Privacy Policy

1. Our Commitment to Data Security

At Cortex Guild Ltd., we architect digital systems for civic solutions. Because our platforms handle sensitive institutional data, we treat privacy as a foundational architectural requirement, not an afterthought. This Privacy Policy details how we collect, use, and protect your information across our ecosystem.

2. Information We Collect

We collect information based on the specific Cortex platform you interact with:

• Account & Identity Data: Name, email address, phone number, and encrypted passwords. For Urbis users, this includes strict KYC documents (Government ID, facial recognition data) required for property transactions.
• Institutional Data (UniCore): Academic records, bursary payment histories, and enrollment statuses. Note: Cortex acts as a data processor for UniCore; the respective educational institution remains the data controller.
• Transactional Data: Payment details processed via highly secure, PCI-compliant third-party gateways (e.g., Flutterwave) for event tickets (OyoTimes) or property fees (Urbis).
• Telemetry & Usage Data: Anonymized IP addresses, device types, and interaction metrics to ensure the stability of our serverless architecture.

3. How We Use Your Information

Your data is utilized strictly for the operation and security of the civic grid:

• To authenticate users and provide secure Single Sign-On (SSO) capabilities where applicable.
• To process financial transactions and prevent fraud within the real estate and academic sectors.
• To deliver hyper-local event ticketing and intelligence.
• To comply with federal and state regulatory mandates in Nigeria.

4. Data Storage and Infrastructure

Cortex utilizes centralized, bank-grade cloud infrastructure (including PostgreSQL databases via Supabase). Data is encrypted both in transit (via SSL/TLS) and at rest. We employ strict Role-Based Access Control (RBAC) to ensure that only authorized personnel or institutional administrators can access sensitive records.

5. Sharing of Information

We do not sell your personal data to third parties. We may share information only under the following circumstances:

• With authorized third-party vendors (e.g., payment processors, SMS gateways) necessary to provide our services.
• With institutional partners (e.g., Universities using UniCore) as dictated by their administrative requirements.
• When compelled by lawful subpoena or governmental request within the jurisdiction of the Federal Republic of Nigeria.

6. Your Rights

Under the Nigeria Data Protection Act (NDPA), you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please submit a formal request via our communications portal.