Privacy & Data Protection

1. Data we collect

• Matriculation number, full name, faculty, department, level
• Institutional email and verified phone number (for OTP delivery)
• Login timestamps, IP address, and device fingerprint (security audit only)
• Vote receipts (anonymous hash — not linked to identity)

2. How we use it

Your data is used only to verify your eligibility, deliver your login credentials, authenticate you, and record your anonymous vote. It is never used for marketing, profiling, or shared with any third party.

3. Ballot secrecy

Your identity is cryptographically decoupled from your vote using a blind signature protocol. No administrator, developer, or auditor — including MOUACO staff — can determine how you voted.

4. Data location & sovereignty

All student data is stored on servers located within Nigeria (MOUAU on-premise or Nigerian cloud region af-south-1). No data crosses national borders. Backups are encrypted with AES-256 and stored in the same jurisdiction.

5. Retention & deletion

Election data is retained for 5 years post-election as required for audit and dispute resolution. After this period, all personal data is permanently deleted. Anonymized statistical aggregates may be kept indefinitely for institutional research.

6. Your rights (NDPR)

• Right to access — request a copy of your data
• Right to rectification — correct inaccurate information
• Right to erasure — request deletion after retention period
• Right to object — lodge a complaint with NITDA