How we protect your account
- Encrypted in transit. All traffic to uniquestafrica.com and our mentor dashboard is served over HTTPS.
- Hashed passwords. Passwords are stored as one-way hashes managed by Firebase Authentication. We cannot see them, recover them, or share them.
- Short-lived sessions. Sign-in tokens are short-lived and refresh credentials are revoked when you change your password.
- Scoped access. Only a small number of authorised staff can reach production data, and what they do is logged.
- Analytics on the live site only. Google Analytics and Microsoft Clarity load only on the production website.
- Hosted on managed infrastructure. Our application runs on reputable managed cloud providers, with automated backups. The specific sub-processors we use are listed in our Privacy Policy.
How you can keep your account safe
- Choose a long, unique password — ideally one generated by a password manager. Don’t reuse passwords from other sites.
- Treat any email asking for your password as suspicious. We will never ask you to send your password by email, WhatsApp, or SMS.
- Confirm the address bar reads
https://www.uniquestafrica.comorhttps://mentors.uniquestafrica.combefore signing in. - Sign out of shared computers, and don’t save your password in browsers you don’t control.
- Keep the email address on your account current so password resets and security alerts reach you.
Payments
Payments are handled by Paystack, a PCI-DSS-compliant payment processor. Card details and mobile-money PINs go directly to Paystack and are never stored on our servers.
If you think your account has been compromised
- Sign in and change your password immediately. This revokes existing sessions on every device.
- Review your recent activity (sessions you’ve created or booked, profile changes) and report anything you didn’t do.
- Email support@uniquestafrica.com so we can investigate, lock the account if needed, and look for related activity.
Reporting a vulnerability
If you are a security researcher and have found a flaw in our site or API, please write to support@uniquestafrica.com with steps to reproduce. We commit to:
- Acknowledge your report within three business days.
- Keep you informed as we triage, fix, and deploy a remediation.
- Credit you publicly once the issue is resolved, if you wish.
Please do not run automated scanners against the production site, do not access data that doesn’t belong to you, and do not publicly disclose an issue before we’ve had a chance to fix it.
Data protection
For details on what personal data we collect and your rights over it, see our Privacy Policy.