This Privacy Policy explains how iSoft (“we”, “us”), operator of the Cyberones Security Awareness Portal at cyberones.isoft-ng.com, processes personal data. We are based in Nigeria and design this policy to align with the Nigeria Data Protection Regulation (NDPR) and related guidance from the Nigeria Data Protection Commission.
Last updated: 19 August 2026. This is a launch-ready policy; we recommend a lawyer review it as your product and contracts evolve.
1. Who we are and how to contact us
Cyberones is a security-awareness training product operated by iSoft (isoft-ng.com). For privacy requests, email cyberone@isoft-ng.com.
2. Personal data we collect
- Account data: name, email address, password (stored hashed), organisation or household details, age range (where required for age-appropriate quizzes), and role (individual, family, family member, or corporate user).
- Family accounts: the primary account holder may add family members. That person is responsible for providing only information they are allowed to share, including for children.
- Training data: quiz attempts, scores, certificates, learning-path progress, and related activity logs needed to operate the service.
- Payments: when you subscribe, payment is processed by Paystack. We receive confirmation of payment (for example reference, amount, and status). We do not store full card numbers on our servers.
- Newsletter: email address and optional name if you subscribe without creating an account.
- Contact form: name, email, company (optional), and message when you request a quote or demo.
- Technical data: IP address, browser type, and security logs (including rate-limit records) used to protect the service from abuse.
3. Why we use your data (lawful bases)
- To provide the service you requested (contract): accounts, quizzes, certificates, family/organisation administration, and subscription access.
- To process payments via Paystack (contract / legal obligation for records).
- To send transactional email such as verification, password reset, quiz notifications, and subscription notices (contract / legitimate interest).
- To send newsletters only if you subscribed (consent). You can unsubscribe at any time via the link in those emails.
- To secure the platform and prevent fraud or abuse (legitimate interest / legal obligation).
- To improve training content using aggregated or de-identified usage statistics (legitimate interest).
4. Children and family accounts
Cyberones is not a self-service children’s social network. Family and education accounts are created by an adult (parent, guardian, or organisation administrator). If you add a child’s details, you confirm you have authority to do so. We use age-range information only to show appropriate training content.
5. Who we share data with
- Paystack — payment processing.
- Email delivery — our mail server / SMTP provider, to send verification, newsletters, and notifications.
- Hosting — infrastructure used to run cyberones.isoft-ng.com.
- Your organisation administrator (corporate tenants) — may see team membership, quiz completion, and related reports for users in that tenant.
- We do not sell personal data.
We may disclose information if required by Nigerian law or to protect users, iSoft, or the public from serious harm.
6. International transfers
Some processors (for example payment or hosting providers) may store or process data outside Nigeria. Where that happens, we rely on appropriate contractual and security measures offered by those providers.
7. Retention
We keep account and training records for as long as the account is active and for a reasonable period afterwards (typically up to 24 months, or longer if required for tax, dispute, or legal reasons). Newsletter subscriptions are kept until you unsubscribe or we delete inactive lists. Payment records are retained as required for accounting. Security logs are kept for a shorter operational period.
8. Your rights
Subject to NDPR and applicable law, you may request access, correction, deletion, or restriction of your personal data, or object to certain processing. You may also withdraw newsletter consent. Contact cyberone@isoft-ng.com. You may lodge a complaint with the Nigeria Data Protection Commission.
9. Security
We use HTTPS, hashed passwords, session controls, CSRF protection, and access restrictions on administrative tools. No internet service is perfectly secure; please use a strong unique password.
10. Cookies and similar technologies
We use a session cookie required to keep you logged in and to protect forms (CSRF). We do not use advertising trackers on the public site.
11. Changes
We may update this policy. The “Last updated” date will change, and material changes will be posted on this page.