Privacy Notice

Draft 01 · 16 August 2026 · Not yet in force

What this preview does today

These pages are a design preview. They have no server behind them and no account system. The preview sets no cookies, runs no analytics, no tag manager and no advertising script, and stores nothing in your browser — no local storage, no session storage, no fingerprinting. Closing the tab leaves nothing behind.

The forms on the contact and nomination pages are previews of forms. The contact page checks what you typed and then builds a message in your own email program, addressed to hello@yourenx.com, which you can read and edit before deciding to send it; nothing reaches us until you send it yourself. The nomination form transmits nothing at all — it reports that it is a prototype and stops. Neither form keeps a copy.

One request does leave your browser. The typefaces are loaded from Google's font service, so fonts.googleapis.com and fonts.gstatic.com receive the request, which means Google can see your IP address, your browser and the page that asked. That is the only third party any page here contacts. Self-hosting the fonts would remove it and is on the list for the production build.

Categories of information

When the service runs, a record is expected to draw on the following kinds of information. Nothing in this list exists yet.

• Identity and contact. Your name, email address, country, and the password credential used to sign in, held in a form we cannot read back.
• Account and security. Sign-in times, device and browser descriptions, two-factor settings, and records of changes you made to your own record.
• Record content. What you tell us about your work — education, roles, research, ventures, awards, publications, code, designs, the summary in your own words.
• Evidence. Documents, links and files you attach so a claim can be checked, together with what a check found and when.
• Third-party statements. References, supervisor confirmations, institutional attestations, and nominations made about you by someone else.
• Discovery activity. Which institutions viewed your record, what they were looking for, and any approach they made through the platform.
• Correspondence. What you write to us, and what we reply.

Some of this is sensitive by nature. A disability accommodation, a health circumstance that explains a gap, a refugee or immigration status, a political or religious affiliation visible in your work — none of these will be required fields, and the protections that must surround them if you choose to disclose them are among the parts counsel has to settle before launch.

Why each category is processed

Each category exists for a stated reason, and a category with no reason should not be collected. Identity and contact information exists so that a record belongs to a real, reachable person and so that we can write to you. Account and security information exists so that you, and only you, can reach your record, and so that a break-in can be detected and explained.

Record content and evidence exist so that a claim can be checked and shown as checked. This is the centre of the service: without evidence, YoureNX would be another place to assert things about yourself. Third-party statements exist so that a claim can be corroborated by someone with standing to corroborate it.

Discovery activity exists so that you can see who has looked at you — the same transparency institutions get about the people they consider. Correspondence exists so that a question you asked can be answered and a complaint you made can be traced.

Essential and optional processing

The distinction that matters is between what the service cannot run without and what you choose to add. Essential processing covers identity, credentials, security records and the minimum record content needed to have a record at all. Refusing it means not having an account, so it is not offered as a choice.

Everything else is optional and separately controlled: appearing in discovery at all, each individual piece of evidence, contact details beyond your email address, taking part in opportunity matching, and any sensitive detail you decide is relevant. Optional means reversible — withdrawing one of these choices is expected to be a single action, not a request you have to argue for.

Declining an optional item may make your record less persuasive to an institution. It will not be treated as a reason to rank you lower, and it will never be presented to an institution as a negative signal about you.

What is visible on your profile

A record is expected to have three layers. What is public is what you publish: your name, your field, your summary, and the claims you have chosen to show, each marked verified or unverified. What is visible to institutions you have opened your record to adds the evidence behind those claims. What is private — your credentials, your security history, your contact details, your correspondence with us, and the identity of anyone who nominated you — is visible to nobody but you and the staff who must see it to do their work.

Verification status is shown either way. A claim that could not be checked appears as unverified rather than disappearing, because a record with the awkward parts quietly removed is not evidence of anything. You can withdraw a claim entirely; you cannot relabel an unverified claim as verified.

A record that is not yet claimed by the person it describes will not be public. That is the point of the nomination route below.

Taking part in discovery

Being discoverable is a choice you make and can unmake. Turning discovery off keeps your record intact and removes it from search, from matching and from every institutional view; it does not delete anything, and turning it back on restores the record as it was.

While discovery is on, you are expected to be able to see which institutions viewed your record and when, to exclude a named institution — a current employer is the obvious case — and to limit which fields are searchable. Discovery is not an auction: institutions cannot pay to be shown a person who has excluded them, and no ranking is for sale.

Sharing with institutions

Nothing about you goes to an institution because it asked. It goes because you opened your record to that institution, or because you were discoverable and the institution matched what you had chosen to make searchable. Either way, the sharing is logged and visible to you.

Institutions are bound by the Terms of Use to use what they learn for the opportunity they described, and not to resell it, syndicate it, or fold it into a profile they keep about you elsewhere. YoureNX can enforce that against an institution's account; it cannot follow the information into that institution's own systems, and this notice does not pretend otherwise.

Beyond institutions, information is expected to reach only the service providers needed to run the platform — hosting, email delivery, file storage — each acting on our instructions and no more. A current list of those providers belongs in this notice and will be added before launch. Information will not be sold, and will not be handed to a government or a court except where the law requires it, in which case the intention is to tell you unless telling you is itself unlawful.

Opportunity matching

Matching compares what an institution is looking for against records that have chosen to take part. It is optional, off until you turn it on, and describable: where a match is made, you should be able to see which parts of your record produced it.

No decision about you will be made by matching alone. A match is a suggestion to a human being, who decides whether to look further, and the institution's own decision remains its own. Where automated scoring is used at all, you are entitled to know it was used and to ask for a person to look again.

Matching will not use a sensitive category as an input unless you have specifically asked for it — for example, to be matched to a programme intended for people in your circumstances.

Research and analytics

YoureNX intends to publish research about how talent surfaces: which fields are under-examined, where evidence is hardest to obtain, how long discovery takes. That work will use aggregated figures, and aggregated means genuinely aggregated — no cohort so small that a person can be recognised inside it.

Your individual record will not be used in a case study, a launch announcement or a marketing example without your specific agreement, asked for at the time and refusable without consequence. Product analytics, when it arrives, will measure how the platform is used rather than build a profile of you, and it will be disclosed in this clause before it is switched on. As stated above, none is running today.

Nominations about other people

Someone can be nominated by a person who is not them, which makes nomination the most sensitive route into the platform. A nomination creates an unclaimed, unpublished record. The person named is contacted and told they have been nominated, and nothing about them becomes visible to any institution until they have claimed the record and chosen what it says.

A nominee can decline. Declining removes the nominated material rather than parking it, and a person who has declined will not be nominated into the same platform repeatedly by the same nominator. A nominee is told what was submitted about them. Whether the nominator's identity is disclosed to them is a real conflict — between a nominee's right to know who described them and a nominator's exposure for saying something honest — and it is one of the questions counsel must decide rather than one this draft should settle quietly.

If you nominate someone, you are responsible for what you submit about them, and for having a legitimate reason to submit it. Nominating someone to expose or embarrass them is a breach of the Terms of Use.

How long information is kept

Information is kept while it is doing the job it was collected for, and then removed. A live record and its evidence are kept while your account is open. Security and sign-in records are kept long enough to investigate a break-in and no longer. Correspondence is kept while a question or a complaint is open, and for a period afterwards so that a recurrence can be understood.

Closing your account starts removal rather than finishing it: there is a short reversal window in which you can change your mind, after which the record and its evidence are deleted from live systems, and then from backups as those backups age out. An unclaimed nomination expires on its own if the nominee never responds, rather than sitting indefinitely.

Two things may outlive the rest. A withdrawn verification is kept as a record that it was withdrawn, because an institution that relied on it is entitled to know. And anything a law or an unresolved dispute requires us to hold is held until that ends. The exact periods for each category are a schedule this draft deliberately leaves blank rather than inventing figures counsel has not approved.

Security

The intended measures are the ordinary ones taken seriously: transport encryption for everything in transit, encryption at rest for evidence files, passwords stored using a modern one-way hash, two-factor authentication available to every account and required for institutional and staff accounts, access limited to the staff whose work needs it, and an audit trail of who looked at what.

No system is safe from every attack, and a notice claiming otherwise would be worth nothing. If a breach affects your information, the intention is to tell you what happened, what was reached, and what to do about it, in plain terms and without waiting until the picture is flattering.

Access, correction, export, restriction and deletion

Five routes are intended, and each is meant to be an action you can take rather than a favour you request:

• Access. See everything held about you, including who has viewed your record and what verification found.
• Correction. Fix anything inaccurate. Where a third party's statement about you is disputed and cannot be resolved, the dispute is recorded alongside it rather than hidden.
• Export. Take a machine-readable copy of your record and your evidence, whether or not you are leaving.
• Restriction. Withdraw from discovery, matching or a named institution's view without deleting anything.
• Deletion. Close the account and have the record removed, subject only to the two exceptions in the retention clause above.

Where a route cannot be honoured, the reason will be given specifically rather than as a general refusal. There is also a right to object to how information is used and a right to bring a complaint to a supervisory authority; naming that authority, and the deadlines that apply to each route, is part of the review this draft is waiting on.

Applicable law

YoureNX is based in Abuja, Nigeria, so the Nigeria Data Protection Act 2023 is the starting point, and the platform is being designed with its requirements in view. This draft states no position on which further regimes apply — records will describe people outside Nigeria and be read by institutions outside Nigeria, and working out which laws that engages is exactly the question counsel has been asked. This clause will be rewritten on their advice, and it makes no claim about any regime until then.

Where information is stored, and what protects it when it crosses a border, will be stated here once the hosting arrangements are fixed. No transfer of your information outside the country it was collected in will be presented as covered by a safeguard that has not actually been put in place.

How to reach us

Write to hello@yourenx.com about anything in this notice, including a request to see, correct, export, restrict or delete information, or a complaint about how it was handled. YoureNX is based in Abuja, Federal Capital Territory, Nigeria. No response time is promised here, because the team answering is small and a promise it cannot keep is worse than none.

A dedicated data protection contact is not named yet, and inventing one would be worse than admitting it: appointing that person, with a direct address and a registered postal address, is part of the work before launch. The Terms of Use cover the agreement itself, and the contact page reaches a person about anything else.