1. Introduction

InnoTech Future Foundation ("Organization", "we", "us", or "our") operates the Integrated Community Development Management System (ICDMS) portal and associated web applications. We respect your privacy and are committed to protecting the personal data of our users, volunteers, coordinators, donors, and student trainees in compliance with applicable data privacy regulations, including the Nigeria Data Protection Regulation (NDPR).

2. Information We Collect

We collect personal information necessary to manage field operations, verify user identities, process donations, and administer training programs. This includes:

• Personal Identifiers: Full name, email address, phone number, and physical/mailing address.
• Jurisdictional Data: State of origin, Local Government Area (LGA), and assigned Zonal/State Command details.
• Professional & Academic Details: Qualification degrees, skills, background documents, resume uploads, and student bootcamp assessment records.
• Financial & Transaction Data: Payment transaction references, donation amounts, and uploaded bank transfer receipts (payment card details are processed directly by our secure payment gateway partner, Paystack, and are never stored on our servers).
• Technical & Field Data: Device IP addresses, login timestamps, and GPS coordinates attached to field operation progress reports.

3. How We Use Your Information

Your data is used strictly for legitimate organizational, operational, and auditing purposes:

• To review, approve, and scope account privileges across Zonal, State, and LGA Command dashboards.
• To track, audit, and display public development metrics (such as verified total donations and beneficiary enrollment numbers).
• To manage Innotech Digital Academy enrollments, project assignments, and certification issuance.
• To send essential transactional notifications, system alerts, and automated donation receipts.
• To detect, prevent, and mitigate security threats, bot attacks, and unauthorized system access.

4. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. Data is only shared under the following conditions:

• Payment Processors: Transaction details are shared securely with payment providers (e.g., Paystack) to complete online donations.
• Legal & Regulatory Compliance: Information may be disclosed if required by law, subpoena, or official request from government authorities.
• Public Field Registries: Public impact metrics display aggregated, anonymized statistics (e.g., project KPI progress and verified total donor counts) without exposing confidential personal credentials.

5. Data Retention & Security

We implement robust technical and administrative security measures—including SSL encryption, Bcrypt password hashing, automated rate-limiting, and reCAPTCHA bot verification—to safeguard your data against loss, theft, and unauthorized access. Personal data is retained only as long as necessary to fulfill operational goals or legal auditing requirements.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access and request a copy of the personal data we hold about you.
• Request corrections to incomplete or inaccurate account details.
• Request the deletion or deactivation of your account, subject to ongoing legal or operational auditing obligations.

7. Cookies & Bot Protection

Our platform uses essential session cookies to keep you authenticated and maintain system security. Additionally, we utilize Google reCAPTCHA v2 to protect public registration, login, and donation forms from automated spam and abuse.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect system upgrades or legal requirements. Updated versions will be posted directly on this page with an updated effective date.