Privacy Policy

Last updated: June 2026 — Compliant with South Africa's POPIA

CubeX ("we", "us") respects your privacy. This policy explains what personal information we collect, how we use it, and the rights you have over it.

1. Information We Collect

• Account data: name, email, password (hashed), role.
• Learning data: course progress, quiz attempts, completed lessons, hands-on project submissions, certificates earned.
• Payment data: processed entirely by Paystack - CubeX never stores your card details.
• Optional profile data: if you opt in to a public Talent Profile, your location and bio are visible to companies browsing the platform.
• Recruiter workspace data: if you participate in a recruiter-hosted assessment, your submissions there are governed by the Assessment Workspace Terms.

2. How We Use Your Information

• To provide and improve the CubeX learning platform.
• To issue certificates and verify them when requested.
• To send service-related emails (verification, password reset, course expiry warnings).
• To detect and prevent fraud, abuse, and security incidents.
• To facilitate introductions between students (who opt in) and hiring companies, where applicable, in exchange for a fee paid by the company.

3. Talent Profile and Company Introductions

If you enable your Talent Profile, your name, course completions, scores, and GitHub repository links become visible to company accounts browsing the platform. Your contact details (email, phone) are never shared until you explicitly accept an introduction request. You can disable your Talent Profile at any time from your dashboard settings, which immediately removes your public page.

4. Data Retention

• Account and learning data is retained for as long as your account is active.
• Session logs are automatically deleted after 14 days unless extended for a security investigation.
• Recruiter workspace data is deleted 60 days after a recruiter's subscription is cancelled or lapses.
• You may request account deletion at any time by contacting support.

5. Third-Party Services

• Paystack — payment processing.
• Cloudinary — image storage (design references, profile images, problem images).
• Cloudflare — security and content delivery.

6. Your Rights

Under POPIA, you have the right to access, correct, or request deletion of your personal information. You may also object to certain processing (such as opting out of bulk emails, which you can do from any email footer). Contact us using the details below to exercise these rights.

7. Cookies

CubeX uses essential cookies only — for authentication (JWT) and CSRF protection. We do not use third-party advertising cookies on authenticated pages. Public pages may display Google AdSense ads, which use their own cookies as described in Google's advertising policy.

8. Children's Privacy

CubeX is intended for users aged 16 and above. We do not knowingly collect data from children under this age without appropriate consent.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

Contact Us

For privacy-related questions or requests, email cubexassist@gmail.com.