Hoberg ID Privacy Policy
Identity Controller Domain: https://account.hoberg.com.ng
1. What Data We Collect & Data Minimization
- Required Account Data: Full name, email address, cryptographic password hash (managed by our authentication provider; plaintext passwords are never stored), and timestamps of Terms/Privacy acceptance.
- Optional Profile Data: Country of residence, preferred language, profile photo URL, optional phone number, and optional date of birth. Completing these fields is genuinely optional.
- Security & Audit Metadata: Hashed IP addresses, browser user-agent strings, active session timestamps, and OAuth consent logs.
- What We Do NOT Collect: Hoberg ID does not collect national identification numbers (NIN/BVN), passports, or precise residential street addresses.
2. Why We Collect Data & How It Is Shared
We process your account data strictly to authenticate you and provide centralized sign-in across authorized Hoberg applications (such as Maji). Connected applications do not automatically receive all of your profile data; they receive only the claims corresponding to the OAuth 2.1 scopes (openid, profile, email) that you explicitly approve on the Hoberg ID consent screen.
3. Your Rights (Nigeria Data Protection Act 2023 & International Standards)
If you are located in Nigeria (covered by the Nigeria Data Protection Act, 2023 — NDPA) or other jurisdictions with data protection laws (such as GDPR), you have the right to:
- Inspect and update your profile information in real time.
- Revoke consent from any connected application at any time.
- Export a complete copy of your account data in machine-readable JSON format.
- Request deletion of your Hoberg ID account and immediate revocation of all tokens.
4. Data Retention & Deletion
Active account records are retained while your account remains open. When you request account deletion from your Account Settings, all active sessions and OAuth tokens are revoked immediately, and personal profile records are scheduled for permanent purge within 30 days.
5. Operator Contact
For privacy requests or data protection inquiries, contact the Hoberg Privacy Team at privacy@hoberg.com.ng.