AventoLinks

Privacy Policy

Last updated: 3 September 2026

AventoLinks ("we", "us", "our") operates the platform available at aventolinkshub.com. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it. We aim to comply with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.

1. Who we are

AventoLinks is a talent-matching platform that connects Nigerian organizations with students, graduates, researchers, and supervisors to solve real-world challenges. If you have any questions about this policy or how your data is handled, contact us at info@aventolinkshub.com.

2. Information we collect

We collect the following categories of personal data, depending on how you use the platform:

Account information

  • Full name, email address, phone number, and password.
  • Role selected at signup (organization, researcher / graduate, supervisor).

Profile information

  • For researchers / supervisors: university, degree, discipline, current status, research interests, areas of expertise, publications, uploaded CV, and passport photo.
  • For organizations: organization name, industry, contact person, position, website.

Challenge and application data

  • Challenges you submit or apply to, project timelines, and progress updates you post.
  • Messages you exchange with an admin through the platform.

Technical data

  • Session cookies for authentication.
  • Basic request metadata (IP address, browser type) as recorded by our hosting provider.

3. How we use your data

  • Provide the service: create your account, publish challenges, match candidates, and record project progress.
  • Communicate with you: send transactional emails (account confirmations, application decisions, project updates, password resets) and announcements you have signed up for.
  • Verify eligibility: confirm that supervisors meet the PhD-holder or PhD-candidate requirement.
  • Improve the platform: analyse usage patterns in aggregate to plan features and fix issues.
  • Comply with legal obligations and enforce our Terms of Service.

Our lawful basis for processing is a mix of your consent (where required), the performance of a contract with you, our legitimate interests in operating the platform, and compliance with legal obligations.

4. Who we share your data with

  • Admin team: AventoLinks administrators review applications, curate matches, and manage projects. They see the profile data you provide.
  • Matched project teams: when an admin assigns you to a challenge, other team members on that challenge see your name, role, discipline, and profile summary.
  • Service providers: we rely on Supabase (database and authentication) and Namecheap Private Email (transactional email). Both are bound by their own privacy commitments.
  • Legal recipients: where required by law, court order, or to protect our rights.

We do not sell your personal data.

5. How we store and protect your data

Your data is stored in a Supabase project hosted in the European Union (Frankfurt). CVs and passport photos live in private storage buckets that only you and platform admins can access. Passwords are hashed at rest by Supabase Auth. Access to administrative tools is restricted to accounts with an admin role.

6. How long we keep your data

  • Active accounts: for as long as the account remains registered.
  • Rejected applications: retained so we do not re-review the same case, unless you ask us to delete.
  • Audit log entries: retained indefinitely for accountability, in line with NDPR record-keeping.

You can request account deletion at any time (see Section 8). We will delete your profile, CV, passport photo, and application data unless a legal obligation requires us to retain a specific record.

7. Cookies

We use only essential cookies to keep you signed in and to remember your role. We do not use advertising or cross-site tracking cookies.

8. Your rights

Under the NDPR and the Nigeria Data Protection Act, you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data ("right to be forgotten"), subject to legal exceptions.
  • Withdraw consent at any time.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we are handling your data unlawfully.

To exercise any of these rights, email info@aventolinkshub.com.

9. Children

The platform is intended for adults (18 and above). If we learn we have collected personal data from a child under 18 without verifiable parental consent, we will delete that data.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes will be announced by email to your registered address.

11. Contact

Questions or requests about this Privacy Policy can be sent to info@aventolinkshub.comor by post to our registered address at 18 Boluwaduro Estate, off Akerele Road, Ido, Ibadan, Oyo State, Nigeria.