Privacy Policy

1. Who operates this service

TSAP Educational Services operates TSAP Scholarship SOP Builder at sop.tsap.ng. This notice explains how information is used when you visit the site, create an account and prepare scholarship Statements of Purpose (SOPs). It is written for users in Nigeria and internationally.

2. Information we handle

• Account information: your email address, name, sign-in information and account identifiers. Passwords submitted for email sign-in are handled by the authentication service.
• Applicant information: profile details, education, employment, achievements, skills, research, volunteering, goals and other experiences you enter or confirm.
• CVs: uploaded PDF or DOCX files, filenames, file size and type, processing status and information extracted from the document.
• Application work: scholarship names and URLs, course and university details, essay questions, instructions, word limits, scholarship research, interview answers, evidence, match results, SOP drafts, edits, reviews and finalisation status.
• Technical information: session information and operational events such as timestamps, random request identifiers, operation names, outcomes, timings, error categories and draft version numbers. Hosting and service providers may also handle network and device information when you connect.
• Support correspondence: information you choose to send when contacting us.

Your CV and answers may contain personal or sensitive information, including details about other people. Include only what is relevant; avoid identity documents, financial credentials or unnecessary sensitive details.

3. Why information is used

Information is used to create and authenticate your account, save and resume work, maintain applicant profiles, extract CV information, research scholarship requirements, match evidence, ask follow-up questions, generate and review SOPs, save versions, finalise and export your work, and respond to support requests. Operational diagnostics help identify failures and maintain the service.

4. AI processing and third parties

AI features send relevant content to Lovable’s AI gateway, with Google Gemini selected as the model. CV extraction sends PDF content or text extracted from a DOCX file. Other AI tasks send relevant scholarship information, profile facts, evidence and answers. SOP generation, review and improvement can send your SOP text and supporting evidence. Uploaded and entered information therefore does not remain solely within this application.

AI results and extracted information are saved so you can review and continue your work. AI can make mistakes: review extracted facts and generated statements before relying on them. Entering a profile manually avoids sending a CV file for extraction, but relevant profile information is still processed when you use other AI features.

Lovable Cloud provides the application’s authentication, database and file storage. Google and Lovable participate in Google sign-in, and authentication email delivery uses the configured email service. The site also requests fonts from Google Fonts, which receives the browser requests needed to deliver them.

Scholarship research retrieves supplied URLs and related pages, including redirected destinations. Those sites receive the retrieval request and requested URL; retrieved page text is then used in AI analysis. Avoid putting personal information or access tokens in URLs. External sites and providers have their own privacy practices.

Provider retention periods, any use of content for model training, downstream processors and contractual handling are not specified here. This policy does not promise that providers never retain or use submitted content. Contact help@tsap.ng before using AI features if these practices are important to your decision.

5. Authentication

You can use email and password or Google sign-in. Email signup supports account confirmation, and password recovery uses a reset link. These processes use your email address and authentication information. Google sign-in involves Google and Lovable’s sign-in service; review the information and permissions shown during that flow. Account details returned by the sign-in service may populate your profile.

6. Storage, access and protection

Saved work is stored in the cloud. Application access checks and account-based database and CV storage rules are designed to restrict access to the owning account. CV downloads use time-limited links; anyone you share such a link with may be able to use it while it remains valid. Downloaded files and copied text are outside the app’s access controls.

Application operational logs are designed to exclude CVs, SOPs, prompts, raw provider responses, names, emails, credentials and sensitive error details. This does not establish what hosting or AI providers retain separately, or erase historical logs. Provider logging, access and retention practices may differ from the application’s controls. No online service can guarantee absolute security.

7. Retention, deletion and requests

Profiles, uploads and application work are saved for continued use. No fixed retention period for accounts, files, logs or backups is specified in this policy. Contact help@tsap.ng for questions about storage duration. Some older SOP versions and failed generation records may be removed as part of draft-history management; do not rely on the app as a permanent archive.

Existing controls let you edit profile information and remove certain profile records and CV uploads. Profiles linked to applications must be archived rather than deleted. Archiving does not erase data. Removing an upload or profile fact does not necessarily remove facts already saved in evidence, drafts, reviews or provider systems, and does not establish immediate deletion from backups.

There is currently no self-service account-deletion control. For account or wider deletion requests, contact help@tsap.ng to discuss your request and what information is needed to handle it. The scope and timing depend on the records and systems involved; immediate or complete erasure is not guaranteed.

8. Cookies and browser sessions

The application uses browser local storage to keep your sign-in session and selected applicant profile between visits, and refreshes authentication tokens. Authentication and hosting providers may also use cookies or related storage. A complete provider cookie inventory is not provided in this policy. Contact help@tsap.ng if you have questions about cookies or browser storage.

You can sign out and clear site data using your browser controls. Clearing or blocking storage may sign you out or prevent session persistence; it does not delete cloud records. Use sign-out on shared devices.

9. International handling

The service uses external cloud and AI services. Their processing and storage locations and cross-border arrangements are not specified in this policy. Do not assume that information remains in Nigeria or in your country of residence. Contact us if location or transfer arrangements are important to your decision to use the service.

10. Your choices and privacy requests

CV upload is optional. You can provide information manually, review extracted facts, correct saved profile information, choose what you include in answers, and stop using the service. Omitting information may limit the usefulness of evidence matching or generated drafts.

Depending on applicable law and your circumstances, you may have rights relating to access, correction, deletion or other handling of personal information. Contact help@tsap.ng to ask about your information or make a request. Do not send passwords, sign-in links or identity documents in your initial message. This notice does not set a guaranteed response deadline.

11. Updates to this policy

This policy may be updated as the service or its practices change. The latest version will appear on this page. Please review it periodically.

12. Contact

For privacy questions or support, contact TSAP Educational Services at help@tsap.ng.