Privacy Policy

This Privacy Policy applies to the Dexta Campus Ambassadors web application (the “Service”), operated by Dexter Inc (“Dexta”, “we”, “us”). It describes how we handle personal data when you use the Service to create campus ambassador flyers.

This policy is separate from the main Dexta learning platform at dextainc.com, which covers courses, billing, and community features not used in this app.

Questions or requests: privacy@dextainc.com

When you use the Service as an allowlisted campus ambassador, we may collect:

• Email address — for allowlist verification, magic-link sign-in, and program communication.
• Full name — displayed on your generated flyer.
• School — selected from our catalog; your state is shown read-only from the school record.
• Portrait photo — original upload and cropped version used on your flyer. Photos may be considered biometric-adjacent data.
• Generated flyer files — PNG exports you create through the Service.
• Consent record — timestamp when you agree to use of your name, school, state, and portrait for flyer generation and publication.
• Session and authentication metadata — sign-in times, session identifiers, and related security logs.
• Generation audit snapshots — records of flyer generations including submitted field values and storage references, retained for program administration and security.

We do not collect payment or course-enrollment data through this Service.

We use your data to:

• Verify that your email is on the ambassador allowlist and grant access.
• Send magic-link emails so you can sign in securely.
• Generate, preview, and let you download your personalized campus ambassador flyer.
• Enforce per-email flyer generation limits set by Dexta staff.
• Administer the ambassador program, including audit review and account lifecycle (active, deactivated, or deleted).
• Protect the Service against abuse, fraud, and unauthorized access.

We rely on your explicit consent for processing your portrait, name, and school for flyer generation and publication. Allowlist membership is used as an access-control measure for the program.

In-app consent wording (do not alter without legal review): “I consent to Dexter using my name, school, state, and portrait photo to generate and publish my Dexter Campus Ambassador flyer.”

We use trusted third parties to operate the Service. They process data only on our instructions and for the purposes described in this policy:

• Supabase — database (PostgreSQL), authentication, and file storage for portraits and generated flyers.
• Resend — delivery of transactional magic-link emails.
• Vercel — application hosting and content delivery.

These providers may store or process data in facilities outside Nigeria. Where data is transferred internationally, we take steps consistent with applicable Nigerian data protection requirements, including the Nigeria Data Protection Regulation (NDPR).

While your ambassador account is active, we retain your profile, portrait files, and generated flyers so you can access and download them within program limits.

Deactivate: When Dexta staff deactivate your account, your generated flyer and portrait files are removed from storage and related URL fields are cleared. Your database record is kept (marked inactive) for program history. Staff may reactivate your account; you will need to upload a new portrait before generating again.

Permanent delete: When a full erasure is required (for example, at your request or for compliance), we remove stored files and delete your ambassador record from our systems, subject to limited retention where the law requires audit or security logs to be kept.

Replacing a flyer on regenerate removes the previous generated file from storage; your account remains active unless staff deactivate it.

We use industry-standard measures including encryption in transit (HTTPS), access controls, row-level security in our database, and staff-only administrative tools. No system is perfectly secure; please use a strong, private email account and report suspected misuse to privacy@dextainc.com.

Under the Nigeria Data Protection Regulation (NDPR) and applicable Nigerian law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure, restriction, or objection to certain processing.
• Withdraw consent where processing is consent-based (see below).
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise your rights, contact privacy@dextainc.com. We will respond within reasonable timeframes required by law. Withdrawing consent may mean you can no longer generate or publish flyers through the Service.

The ambassador program is intended for university-age participants. If you are under 18, you should only use the Service with permission from a parent or guardian. Contact us if you believe we have collected data from a minor without appropriate consent.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy where permitted by law.

This policy is governed by the laws of the Federal Republic of Nigeria. For privacy inquiries: privacy@dextainc.com. Learn more about Dexta at dextainc.com.