Privacy Policy

1. Data we collect

• Account data: name, title, email address, phone number, password (stored encrypted by our authentication provider).
• Professional data: profession, level or cadre, years of experience, work history, state and city, job preferences.
• Verification documents (Document Vault): practising licence, registration, degree, NYSC, internship, residency and other certificates, and government ID.
• Activity data: jobs posted and applied to, offers, shift records, reviews, reports, chat messages and attachments, medpoints and referral history.
• Payment data: Paystack transaction references and amounts. We never see or store your card details. For cash referral rewards we store your bank name and account number to pay you.
• Device data: push notification tokens for devices where you turn on alerts, and basic logs needed to keep the service secure.

2. Why we use it (lawful basis)

• To provide the service you signed up for (contract): matching, applications, offers, chat, alerts and payments.
• To verify professional credentials and keep patients and facilities safe (legitimate interest and legal obligation).
• To send job alerts by in-app notification, push, SMS and email according to your settings (consent, which you can change at any time in Profile, Notifications).
• To prevent fraud, handle reports and enforce our Terms (legitimate interest).

3. Who can see your data

• Your public profile (name, photo, profession, cadre, location, badges, shift history and reviews) is visible to other users and can be shared by link.
• Your verification documents are private. Only the MedixHive verification team and facilities you apply to (or that invite you) can view your verified records.
• Your phone number is shown to the other party only after a job has been offered between you.
• Service providers who process data on our behalf: Supabase (database and storage), Vercel (hosting), Paystack (payments and transfers), Termii (SMS), Resend (email). They are bound by data processing terms.
• Regulators or law enforcement where the law requires it.

4. Retention

We keep your account data while your account is active. Verification documents are kept while you remain verified and for up to 2 years after account closure to support audit and dispute handling, unless a longer period is required by law. Payment records are kept for 6 years for accounting purposes.

5. Your rights

Under the NDPA you may request access to your data, correction, deletion, restriction or objection to processing, data portability, and you may withdraw consent at any time. Contact us at medixhiveltd@gmail.com. You may also complain to the Nigeria Data Protection Commission.

6. Security

Data is encrypted in transit and at rest. Access is controlled by row-level security rules so each user can only reach their own records, and documents are served through short-lived signed links.

7. Contact

Data protection enquiries: medixhiveltd@gmail.com.