Privacy Policy

Introduction

The Independent Corrupt Practices and Other Related Offences Commission (ICPC) ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Ask ICPC — our multilingual AI assistant platform for anti-corruption guidance and citizen support.

By using Ask ICPC, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Google Sign-In & User Data We Collect

When you sign in with Google (via Auth0), we collect and process the following information from your Google account:

• Basic Profile Information: Your name, email address, and profile picture as provided by your Google account.
• Google Account ID: A unique identifier used for authentication purposes only.

The data we collect from you is limited to what you have explicitly provided through:

• Your Google account information (name, email address) via Auth0.
• Information you provide directly when using our platform (questions, feedback).
• Your usage patterns and preferences within Ask ICPC.

Information We Collect

We collect information that you provide directly to us, including:

• Name and email address (via Google/Auth0 sign-in).
• Chat messages and questions submitted to the AI assistant.
• Feedback and ratings on AI responses.
• Device type, language preferences, and usage data.
• Anonymous session identifiers for analytics.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI assistant services.
• Authenticate users securely via Google and Auth0.
• Respond to queries with accurate, source-grounded information.
• Improve the AI model's quality and accuracy over time.
• Generate anonymised usage analytics and reports.
• Comply with applicable legal obligations.

Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit and at rest.
• Secure authentication via Auth0 and Google OAuth 2.0.
• Regular security audits and monitoring.
• Strict data access policies for our team.

Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent: When you explicitly authorise sharing.
• Service providers: With trusted third-party providers (e.g. Auth0, cloud infrastructure) who assist in operating our platform.
• Legal requirements: When required by Nigerian law or to protect ICPC's rights.
• Government obligations: In connection with official ICPC mandates and inter-agency cooperation.

Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a structured, readable format.
• Opt-out: Unsubscribe from any communications.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you close your account or request deletion, we will delete or anonymise your personal information within a reasonable timeframe, except where retention is required by applicable Nigerian law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.