Please read this document carefully. By using Penagix, you agree to be bound by these terms. If you do not agree, please discontinue use of our platform.
Introduction & Scope
At Penagix (developed and operated by JoshuaOnPurpose), we are committed to protecting your privacy and ensuring the highest standards of data security. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our platform, assessments, and related services at penagix.com.
This policy applies to all users of the Penagix platform, including individual assessment takers, organizational administrators, agents, and website visitors. By accessing or using our services, you acknowledge the data practices described in this document. Where applicable law requires explicit consent for certain processing activities, we will seek your consent through appropriate mechanisms.
We adhere to the Nigerian Data Protection Act (NDPA) and applicable international standards, including principles aligned with the GDPR, ensuring your data is handled with transparency, fairness, and accountability.
Information We Collect
We collect information to provide, improve, and secure our services. The types of data we collect include:
1. Information You Provide Directly:
- Account Data: Name, email address, password (encrypted), and profile details when you register.
- Assessment Data: Your responses to psychometric questionnaires, RIASEC framework inputs, and self-reported preferences.
- Billing Data: Billing address and transaction history. (Note: Full payment card details are securely handled by our payment processors, such as Paystack or Stripe, and are never stored on our servers).
- Communications: Messages, support requests, or feedback you send to us.
2. Information Collected Automatically:
- Usage Data: Pages visited, time spent on the platform, features accessed, and interaction metrics.
- Device & Technical Data: IP address, browser type, operating system, and device identifiers.
- Cookies & Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze site traffic.
How We Use Your Information
We use your personal data for the following core purposes:
- Service Delivery: To generate your unique Intelligence Profile, map your functional gifts, and provide personalized career alignment reports based on the RIASEC framework.
- Account Management: To process transactions, authenticate your identity, and maintain your account security.
- Communication: To send transactional emails, platform updates, security alerts, and, with your consent, marketing communications.
- Platform Improvement: To analyze usage patterns, debug errors, and enhance our algorithms and user experience.
- Organizational Use (if applicable): If you are invited by an organization or educational institution, we share your assessment results with the inviting entity in accordance with their enterprise agreement.
- Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and prevent fraud or abuse.
Data Sharing & Disclosure
We do not sell your personal data. We only share your information under the following circumstances:
- Service Providers: We share data with trusted third-party vendors who assist us in operating the platform (e.g., cloud hosting via Vercel/Supabase, payment processing, email delivery via Resend). These providers are bound by strict confidentiality obligations.
- Affiliate, Referral & Partnership Services: Where Penagix participates in affiliate, referral or other partnership programmes, we may use third-party affiliate networks, tracking providers and partner platforms to attribute referrals, measure qualifying actions, prevent fraud, generate reports and administer partnership relationships. These providers may process limited technical or referral information in accordance with their own applicable privacy policies and contractual obligations.
- Organizational Sponsors: If your assessment is paid for or requested by an employer, school, or organization, your results and profile data will be accessible to authorized administrators within that organization.
- Aggregated Research: We may use and share anonymized, aggregated data (which cannot identify you) for academic research, industry reporting, and algorithm improvement.
- Legal Requirements: We may disclose data if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of JoshuaOnPurpose, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction, subject to the buyer adhering to this Privacy Policy.
Data Security & Retention
Security Measures:
We implement robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS/TLS) and at rest, secure database architecture (Row Level Security), and regular security audits.
Data Retention:
We retain your personal data for as long as your account is active or as needed to provide you services. If you choose to delete your account, we will securely erase your personal data within 30 days, except for information we are legally required to retain (e.g., transaction records for tax purposes) or anonymized data retained for research.
Your Privacy Rights
Depending on your jurisdiction, you have specific rights regarding your personal data:
- Access & Portability: You can request a copy of the personal data we hold about you in a structured, machine-readable format.
- Correction: You can update or correct inaccurate profile information directly within your account settings.
- Deletion (Right to be Forgotten): You can request the permanent deletion of your account and personal data.
- Objection & Restriction: You can object to certain processing activities, including opting out of marketing communications.
To exercise any of these rights, please contact us at legal@penagix.com. We will respond to your request within the timeframe required by applicable law.
International Data Transfers
Penagix operates globally. Your data may be transferred to, stored, and processed in countries other than your country of residence, including servers located in the United States or the European Union, provided by our cloud infrastructure partners.
When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to maintain the security and confidentiality of your information in compliance with the NDPA and other relevant data protection frameworks.
Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal information from individuals under 16 without verifiable parental consent.
If we become aware that we have collected personal data from a child under 16 without such consent, we will take immediate steps to delete that information. If you believe we might have any information from or about a child under 16, please contact us at legal@penagix.com.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy, posting a prominent notice on the platform, or sending an email to the address associated with your account.
Your continued use of the platform after such updates constitutes your acknowledgment and acceptance of the revised Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at: