We only collect what's needed to make the app work — your account details and the HR records your company chooses to keep here. Your employer decides what is recorded about its staff; we store it for them. We never sell your data, and we never use it for advertising. Your chats are not used to train AI models. The details below are the full legal version of that same commitment.
CPS HR Assistant has two kinds of data. Account data is about the person who signs up (you): we decide how it is used, so we are responsible for it. Employee data is information about a customer company's staff that the company, or its HR team, enters or imports (employee records, leave, attendance, payroll and documents). The customer company decides what is recorded and why; CPS Global Limited stores and processes it only on the customer's behalf and on their instructions. If you are an employee and have a question about your records, your employer's HR team is your first point of contact.
Account data: name, email address, profile photo, company details and logo, plan and payment status, and usage counts (chats, documents, reminders). Employee data held for customers can include names, job titles, departments, locations, start dates, salary and payroll figures, leave and attendance records, notes and uploaded documents, and, where a customer turns on the Employee Portal, an employee's work email, phone number, home address and emergency contact. Chat conversations and documents you generate are saved to your account so you can resume them.
To provide and improve the App, run the Employee Portal for customers who enable it, send compliance reminders and service emails, manage subscriptions, prevent misuse and answer support requests. We do not sell personal data and do not use it for advertising. Chat content is not used to train AI models.
Chat messages are sent to our AI provider to generate replies. We strongly advise against typing sensitive employee details (NIN, BVN, bank details) into the chat. Saved chat threads stay in your own account and are not visible to other users of the App.
Where a company enables the portal, each invited employee gets a separate login and sees only their own record: job details, leave balance and requests, and payslips the employer chooses to publish. Employees can update their own phone number, home address and emergency contact; these are visible to the employer's HR team. Employers control who is invited and can remove access at any time; access also ends when an employee is marked as exited. Payslips are not shown until the employer publishes them. Employees can also read documents and policies the employer shares and confirm they have read them, see their own attendance record, clock in and out where the employer has switched that on, and send requests to HR, including requests to change bank details, which take effect only after HR approves. We keep an activity log of approvals, document access and profile changes (recording which field changed, not its value), visible to the employer's HR team. Employees are shown a short privacy notice on first login.
Account and employee records are stored in Google Firebase (Firestore and authentication). Uploaded files are stored with our hosting provider Netlify, and profile photos in Firebase Storage. We use Netlify (hosting and server functions), Resend (service emails), Paystack (card payments), and an AI provider (currently Groq) for chat. We share data with these providers only as needed to run the App, and data is encrypted in transit and at rest by them. We do not sell personal data to anyone; we may share anonymised, aggregated usage statistics. Your data may be processed on servers outside Nigeria.
We keep data for as long as the customer account is active. Customers control employee records and can delete them or remove people at any time. To delete an account or ask us to delete data held for you, email careerpathconsults@gmail.com; we process requests within 14 working days, unless the law requires us to keep something. Employees who want their own records corrected or removed should first contact their employer's HR team.
You may ask to access, correct or delete your personal data, and to object to or restrict how it is used, as allowed by the Nigeria Data Protection Act 2023. If your data was entered by your employer, we will help the employer respond to your request. You may also complain to the Nigeria Data Protection Commission.
Access is limited by sign-in and by permission rules so that each account sees only its own company's records, and employees see only their own. If we become aware of a breach affecting personal data, we will notify affected customers without undue delay so they can meet their own legal duties.
The App uses minimal cookies for authentication and session management only. We do not use cookies for advertising.
The App is not intended for users under 18 years of age. We do not knowingly collect data from minors.
We will notify users of significant changes to this policy via email or an in-app notification.
For privacy concerns, contact: careerpathconsults@gmail.com or call +234 703 559 6626. CPS Global Limited, Lagos, Nigeria.
See also: How we protect your data · Terms of Service · Help Center