How we protect your data

✓ It is your data

Employee records, documents, payslips and requests are owned by the company that entered them. We use them only to run the service for you. We do not sell them, share them for advertising, or use them to train AI models.

✓ Who can see what

• Each company sees only its own records. Other companies cannot.
• Each employee sees only their own record, through their own login. Employees cannot reach the database directly.
• An employee login only works after the employee's verified email matches the invitation HR sent.
• HR can remove an employee's access at any time, and access ends when someone is marked as exited.

✓ Sensitive details are handled carefully

• Bank details can only be changed through a request that HR approves, and are shown masked to the employee.
• Emails about requests never contain bank numbers, salaries or message text. They tell people something needs attention and point them to the app.
• Documents are opened inside the app, not sent as email attachments.
• Clock-in can check that someone is at the work location, but location is read once, at the tap, never tracked in the background, and, for staff who work at the company's location, the place of each clock-in and clock-out is kept so HR can see it. Remote staff are never checked and their location is not recorded. There is no selfie or fingerprint.

✓ A record of who did what

Approvals, document access and profile changes are written to an activity log that HR can see. The log records which field changed, not the value. Nobody can edit it from a browser.

✓ Where it is processed

To run the service we use professional providers for hosting and database, email delivery, payments and AI language features. They process data only to provide those services, under their own security commitments, and data is encrypted in transit. Some processing may happen on servers outside Nigeria. A named list of providers is available to any company on request, and can be included in a data processing agreement.

✓ Your rights

Companies can export or delete their records. Employees can ask HR to correct or delete theirs. Under the Nigeria Data Protection Act 2023 you may also complain to the Nigeria Data Protection Commission. To ask us anything about your data, email careerpathconsults@gmail.com.