Privacy Policy

StudElect is a digital election infrastructure platform built exclusively for Nigerian tertiary institutions — universities, polytechnics, and colleges of education. We provide secure, cryptographically auditable student election systems to Electoral Commissions (ELCOM) and student bodies across multiple campuses.

We are the data processor acting on behalf of each institution (the data controller). Each institution is responsible for the accuracy of the voter data they upload.

Data Protection Contact: privacy@studelect.com.ng

When an institution registers voters on StudElect, the following data fields may be collected:

• Matriculation number
• Full name
• Department and faculty
• Academic level (e.g. 100L, 200L)
• Email address (optional)
• Phone number (optional)
• Voter PIN — generated at issuance, never stored in plaintext
• Voting metadata — encrypted, anonymous ballot hash (cryptographically decoupled from identity)

We collect the above data solely for the following purposes:

• Voter identity verification before ballot issuance
• Eligibility screening — dues payment status, disciplinary standing
• Cryptographic ballot issuance and one-time PIN generation
• Fraud prevention and duplicate submission detection
• One-person-one-vote enforcement via cryptographic deduplication

Voter records are stored in Supabase PostgreSQL with encryption at rest. All database connections are TLS-encrypted in transit.

Voter PINs are one-time use and are masked on all public screens. They are hashed with a strong cryptographic algorithm and are never stored in plaintext.

Ballot selections are cryptographically decoupled from voter identity — an auditor can verify that every vote was cast by an eligible voter without being able to determine how any individual voted.

StudElect uses session cookies strictly for administrator authentication — specifically for ELCOM and SuperAdmin dashboard access.

We do not use tracking cookies, third-party advertising cookies, analytics cookies, or any form of cross-site tracking. For full details, see our Cookie Policy.

Only your institution's registered ELCOM (Electoral Commission) administrators can access voter roll data for their institution. ELCOM administrators cannot access data from other institutions.

StudElect platform administrators (SuperAdmin) manage institutional licensing and platform infrastructure. They do not access voter-level data in the normal course of operations.

We do not share personal data with any third party except as required by Nigerian law or a valid court order.

Under applicable Nigerian data protection law (NDPR), you have the right to:

• Access your voter record held by your institution's ELCOM
• Request correction of inaccurate personal data
• Request deletion of your data after the election cycle concludes

To exercise these rights, contact your institution's ELCOM directly or email us at privacy@studelect.com.ng.

Voter records are retained for the duration of the active academic session. At the end of an election cycle, voter roll data may be archived or deleted at the request of the institution.

Audit ledger entries — which record that votes were cast (but not how) — are retained for 5 years for electoral integrity and dispute resolution purposes.

For any privacy-related questions, data requests, or complaints, please contact our Data Protection team:

privacy@studelect.com.ng

We aim to respond to all privacy enquiries within 5 business days.