Operational privacy, safety, and AI-handling principles for JobRadarNG.
Last updated: 1 October 2026
JobRadarNG operates a Nigerian recruitment marketplace and aligns its privacy programme with the Nigeria Data Protection Act 2023, NDPC guidance, and NDPR-aware handling practices.
We collect only what the marketplace needs, explain why it is needed, protect it, limit internal access, respect user rights, and keep auditable records for high-risk operations such as CV processing, identity verification, AI matching, and scam moderation.
Applicant data includes account details, CVs, skills, work history, saved jobs, applications, cover notes, alerts, and AI match signals. Employer data includes company profiles, logos, billing status, subscriptions, job posts, application analytics, and moderation history.
Individual recruiter data includes profile details, phone/email verification, identity-review status where used, job posting limits, hidden-contact settings, and listing history. Admin and safety data includes reports, scam flags, AI logs, scraping logs, source health, and moderation events.
JobRadarNG maintains a lawful-basis register for core processing. Common bases include contract performance for account features and applications, consent or user request for CV upload and AI matching, legitimate interests for fraud prevention and service improvement, legal obligation for compliance and safety records, and consent for optional marketing.
Where a feature relies on consent, the interface makes the choice clear and does not treat silence or inactivity as consent.
Core controls include Supabase row-level security, protected admin routes, role-based access checks, private resume storage, public logo storage separation, service-role keys kept out of source control, environment variable controls in Vercel, strict input validation, rate limiting for sensitive actions, moderation queues, and user report workflows.
New sensitive features go through a lightweight data protection impact review before release, especially where they involve identity documents, fraud scoring, automated recommendations, or large-scale job aggregation.
AI features are presented as assistance, not guaranteed truth. Job summaries, category predictions, scam flags, duplicate detection, skill extraction, and match scores are reviewable and correctable where they materially affect users.
Applicants are told that CV uploads may be processed to infer skills, experience level, career category, and job recommendations. Employers are told that AI summaries and trust scores do not replace their own due diligence.
JobRadarNG supports requests for access, correction, deletion, restriction, portability, objection, consent withdrawal, and human review of relevant automated decisions. Requests are logged, identity-checked where needed, and answered within a reasonable legal timeframe.
Admins avoid deleting safety-critical records where retention is required for fraud prevention, disputes, legal obligations, or platform integrity; in those cases, data is restricted, anonymised, or retained with a documented reason where appropriate.
Core vendors include Supabase, Vercel, OpenAI where enabled, Dojah for verification, Paystack for payments, and email/SMS providers where enabled. JobRadarNG keeps a vendor register, reviews vendor security posture, documents cross-border transfers, and uses data-processing terms where appropriate.
Service-role credentials, API keys, and webhook secrets are never committed to GitHub and are rotated after exposure, staff changes, or suspicious activity.
A personal-data incident is triaged immediately for scope, affected data, affected users, containment, evidence preservation, notification duties, and remediation. Security incidents involving resumes, identity documents, account sessions, service keys, or admin privileges are treated as high priority.
JobRadarNG maintains an incident log, assigns an owner, preserves relevant audit evidence, and notifies affected users or regulators where legally required.
JobRadarNG keeps its privacy inbox, reviewed policies, Vercel environment variables, Supabase service-role configuration, OpenAI credentials where enabled, storage policies, privileged admin-account process, and data-subject request workflow actively maintained.
Monetised features keep payment terms, refund language, invoicing records, subscription cancellation flows, and Paystack privacy disclosures clear and up to date.
JobRadarNG operates a Nigerian recruitment marketplace and aligns its privacy programme with the Nigeria Data Protection Act 2023, NDPC guidance, and NDPR-aware handling practices.
We collect only what the marketplace needs, explain why it is needed, protect it, limit internal access, respect user rights, and keep auditable records for high-risk operations such as CV processing, identity verification, AI matching, and scam moderation.
Applicant data includes account details, CVs, skills, work history, saved jobs, applications, cover notes, alerts, and AI match signals. Employer data includes company profiles, logos, billing status, subscriptions, job posts, application analytics, and moderation history.
Individual recruiter data includes profile details, phone/email verification, identity-review status where used, job posting limits, hidden-contact settings, and listing history. Admin and safety data includes reports, scam flags, AI logs, scraping logs, source health, and moderation events.
JobRadarNG maintains a lawful-basis register for core processing. Common bases include contract performance for account features and applications, consent or user request for CV upload and AI matching, legitimate interests for fraud prevention and service improvement, legal obligation for compliance and safety records, and consent for optional marketing.
Where a feature relies on consent, the interface makes the choice clear and does not treat silence or inactivity as consent.
Core controls include Supabase row-level security, protected admin routes, role-based access checks, private resume storage, public logo storage separation, service-role keys kept out of source control, environment variable controls in Vercel, strict input validation, rate limiting for sensitive actions, moderation queues, and user report workflows.
New sensitive features go through a lightweight data protection impact review before release, especially where they involve identity documents, fraud scoring, automated recommendations, or large-scale job aggregation.
AI features are presented as assistance, not guaranteed truth. Job summaries, category predictions, scam flags, duplicate detection, skill extraction, and match scores are reviewable and correctable where they materially affect users.
Applicants are told that CV uploads may be processed to infer skills, experience level, career category, and job recommendations. Employers are told that AI summaries and trust scores do not replace their own due diligence.
JobRadarNG supports requests for access, correction, deletion, restriction, portability, objection, consent withdrawal, and human review of relevant automated decisions. Requests are logged, identity-checked where needed, and answered within a reasonable legal timeframe.
Admins avoid deleting safety-critical records where retention is required for fraud prevention, disputes, legal obligations, or platform integrity; in those cases, data is restricted, anonymised, or retained with a documented reason where appropriate.
Core vendors include Supabase, Vercel, OpenAI where enabled, Dojah for verification, Paystack for payments, and email/SMS providers where enabled. JobRadarNG keeps a vendor register, reviews vendor security posture, documents cross-border transfers, and uses data-processing terms where appropriate.
Service-role credentials, API keys, and webhook secrets are never committed to GitHub and are rotated after exposure, staff changes, or suspicious activity.
A personal-data incident is triaged immediately for scope, affected data, affected users, containment, evidence preservation, notification duties, and remediation. Security incidents involving resumes, identity documents, account sessions, service keys, or admin privileges are treated as high priority.
JobRadarNG maintains an incident log, assigns an owner, preserves relevant audit evidence, and notifies affected users or regulators where legally required.
JobRadarNG keeps its privacy inbox, reviewed policies, Vercel environment variables, Supabase service-role configuration, OpenAI credentials where enabled, storage policies, privileged admin-account process, and data-subject request workflow actively maintained.
Monetised features keep payment terms, refund language, invoicing records, subscription cancellation flows, and Paystack privacy disclosures clear and up to date.
Questions about privacy, safety, or account access: privacy@jobradarng.com.
Need product help instead? Open support or read the FAQ.