Privacy Policy

Last updated: 29 October 2026

This policy explains how Serving in handles personal information when you visit the website, create an account, apply for a PPA, recruit a corps member, or use a paid service. It describes the platform’s current functionality.

1. Who is responsible for your information

Serving in is operated by UniGrid Digital Technologies Limited, Nigeria.

For support, privacy requests, safety concerns, or complaints, email servinginofficial@gmail.com. Use a subject such as “Privacy request”, “Account support”, or “Billing query”. Include only the details needed to identify your account or order; never send passwords or payment-card details.

UniGrid Digital Technologies Limited determines how information is used to operate Serving in. Employers receiving applications are responsible for their own subsequent recruitment use of applicant information and any copies they retain.

2. Information we collect

• Account information: name, email address, account role, authentication records, and contact details you provide.
• Corps member profiles: deployment state, LGA, batch, service year, passing-out date, institution, course, skills, biography, and uploaded CVs.
• Employer information: organisation name, registration details, address, website, description, verification status, and PPA listings.
• Recruitment activity: saved opportunities, applications, submitted CV snapshots, status updates, withdrawals, and relevant administrator audit records.
• Billing information: organisation billing name, purchased service, amount, payment reference and status, subscription period, recruitment brief, campaign updates, and refund requests.
• Technical information: session cookies, security and hosting logs, and limited aggregate site analytics described below.

Provide only information relevant to recruitment. Do not put passwords, bank credentials, payment-card details, government identification numbers, or unnecessary health or other sensitive information in your CV or recruitment brief.

3. Why we use information

We use account and profile information to provide the service, authenticate users, match profiles to opportunities, process applications, verify organisations, manage purchases, respond to requests, and maintain platform security.

Depending on the activity, the relevant basis is providing the service you request, your consent to particular sharing, our legitimate interests in operating and protecting the service where those interests do not override your rights, or compliance with legal obligations. Where processing relies on consent, you may withdraw it; withdrawal does not invalidate processing that was lawful before withdrawal.

4. Who can see your profile and CV

CVs are stored privately rather than in a public document directory. Applying to a listing shares your profile and that application’s CV with the responsible employer. Administrators can access relevant records for operations, verification, support, and security. Company profiles and verified open opportunities are visible to visitors.

Withdrawal removes future employer access through that application. It cannot recall downloaded documents, and the same employer may retain access through another active application you submitted to it. Changing your current CV does not replace a CV snapshot already submitted. Employers must handle downloaded copies lawfully; contact the employer about information it holds independently.

Inviting friends

Each account can share a personal invitation code in a registration link. If you use that link to create a new corps member account, we record which account invited you at signup. Your inviter sees only aggregate signup and email-verification counts, not your name, email, CV, profile, or application activity through this feature. Existing accounts and employer signups are not attributed. We do not access your contacts, send invitations automatically, or use an additional referral cookie. You can choose to register without an invitation link.

5. Matching and decisions

Matching currently uses your entered deployment state, skills, and course of study. It does not automatically analyse your CV or make final hiring or NYSC placement decisions. Employers review applications themselves. Paid promotion does not change profile-fit scores.

6. Service providers and international processing

We use Supabase for authentication, database records, and private CV storage; Vercel for hosting; and Paystack for employer payments. The application’s Supabase project is hosted in Ireland. Hosting, delivery, security, and payment providers may process information in other countries as part of their services. Where required, appropriate safeguards must apply to international transfers. Their own privacy notices describe their independent processing: Supabase, Vercel, and Paystack.

We may also disclose relevant information where required by law, to address fraud or security threats, or to establish or defend legal claims. We do not sell CVs or personal information.

7. Payments and subscriptions

Paystack handles payment-card information. Serving in does not store card numbers, CVV codes, or reusable card authorisations. We keep purchase and refund records and the provider references needed to manage subscriptions. Private subscription management credentials are restricted to the server. Recruitment briefs and delivery updates are accessible to the relevant employer and administrators.

The payment integration is currently in test mode. Read the billing terms for renewal, cancellation, and refund procedures.

8. Cookies and site analytics

Necessary session cookies support sign-in and protected access. Serving in’s own analytics do not use tracking cookies or persistent visitor identifiers. We count page views by fixed page route, referring website hostname, date, and device category. We do not save URL query strings, full referring URLs, or raw IP addresses in analytics tables, or track CV download URLs and dedicated administrator routes through this collector.

Do Not Track and Global Privacy Control signals are respected by the collector. A daily keyed hash of the request IP is used for abuse control only and is not linked to an account. Reports cover a rolling 90-day window. Older aggregates and rate-limit buckets older than ten minutes are pruned as new views are collected; this is not a continuously running deletion process. Hosting and payment providers may separately process request logs or necessary cookies for their services.

9. Retention and deletion

We retain account, profile, application, and CV records while needed to provide the service and address legitimate operational, security, and legal needs. Uploading a replacement CV does not delete earlier application snapshots. Withdrawing an application restricts access but does not itself delete its records. Account deletion is currently handled by request rather than a self-service button.

When considering deletion, we review what can be removed and what must be retained for accounting, legal obligations, fraud prevention, or unresolved disputes. Backups and provider logs may remain subject to their own retention cycles. We do not promise that every copy is erased immediately, and we cannot delete copies an employer controls independently. Email us for a review of your account, including applicable retention and deletion arrangements.

10. Your rights and choices

Subject to applicable Nigerian data-protection law and relevant exceptions, you may request access to your information, correction, deletion, restriction or objection to processing, portability where applicable, and withdrawal of consent. You may also raise concerns about automated processing and request human review where relevant. Edit profile details in your portal and withdraw applications through My applications.

Send privacy requests to servinginofficial@gmail.com from your account email where possible. We may ask for proportionate information to verify your identity before disclosing or changing records. We will assess requests and respond within the applicable legal time limit. You may complain directly to the Nigeria Data Protection Commission; contacting us first is not a condition of that right.

11. Security and incidents

We use authentication, role and ownership checks, private CV storage, and server-side payment verification to limit access. No internet service can guarantee absolute security. Report suspected account misuse or an exposed document to our support email without including passwords. Where a security incident requires notification under applicable law, we will take the required steps.

12. Policy updates

We may update this policy as the service or its processing changes. The date above identifies the current version. Material changes will be communicated through an appropriate platform notice or account communication.