Privacy notice
Last updated 12 October 2026
Thombi is a career partnership for African tech professionals, run by Eazify Innovations LTD, a Nigerian company. This notice explains what we collect about you, why, who sees it, how long we keep it, and your rights under Nigeria's Data Protection Act 2023.
The short version. We use your details only to see if we can help and to run your cycle. We never sell them. We use AI to help draft your materials only if you say yes. We delete your personal details 2 years after your final check-in, or sooner if you ask. We keep anonymised facts about you and your applications, with nothing that identifies you, and, only if you agreed, your materials with your name and contact details removed. You can ask for a copy, a correction or deletion at any time.
Who we are and how to reach us
Eazify Innovations LTD is responsible for your personal data in Thombi. For anything about your data, message us on WhatsApp at +234 704 972 8416 and say it's a privacy request.
What we collect
- From the form: your name, what you do, the country you live in, years of experience, a link to your work, the roles you're going for, what you've tried so far, your email and your WhatsApp number.
- During your cycle: the CV and materials you send us, our notes from checking your work, the applications we prepare with you and what came back from each, and our WhatsApp conversation.
- The weekly list: if you join it, your email, used only to send the list. Ask us and we remove you.
- Payments: the amount, date, payment reference and the email you pay with, from Paystack. We never see or keep your card or bank details.
Why we use it, and on what basis
- To see if we can help and to run your cycle: because you asked us to, and it's needed to provide the service (a contract, or steps before one).
- To take payments and send refunds: to provide the service, and to keep the financial records the law requires.
- To improve Thombi: we learn from anonymised facts about applications, such as which companies reply to people based in Africa and at what level. Nothing in these facts identifies you. This is in our legitimate interest and doesn't override your rights.
- To improve Thombi and its AI with your materials: only with your consent, a separate box on the form. See "How we improve Thombi" below.
- To draft your materials with AI: only with your consent, which you give or refuse on the form and can withdraw at any time. See "How we use AI" below.
- To share your results publicly (for example, "a backend engineer in Lagos reached an interview"): only if you give a separate yes. Saying no never affects your cycle, and you can withdraw it any time.
Who sees it
- The Thombi team at Eazify. Each person signs in, and the database shows client records only to named team members.
- Services that run Thombi for us, each seeing only what it needs: Supabase (our database), Vercel (this website), WhatsApp by Meta (our conversation), Paystack (payments) and, only if you agree, an AI service that helps us draft (see below).
- Employers: only the applications you've approved, sent in your name.
Some of the services above store data outside Nigeria. We use them under their data-processing terms and share only what each one needs.
How we use AI
If you agree on the form, we use AI to draft a first version of your CV, cover notes and application answers. This is how it works:
- Your name, email, phone number and address are taken out first. What goes to the AI is your work history, skills and the job you're applying for. That can still say something about you (your employers and dates, for example), which is why we ask for your consent.
- It is processed outside Nigeria, mainly in the United States. The law there may not protect your data as fully as Nigerian law does, and you may find it harder to enforce your rights there. We rely on your consent for this transfer (Nigeria Data Protection Act 2023, section 43).
- The AI service doesn't train on it. The service we use may not train on what we send, and it deletes it within 30 days. Whether Thombi itself uses your materials to improve is a separate choice (see "How we improve Thombi").
- A person reads and approves every word before anything reaches an employer. The AI drafts; we decide.
- Our role finder also uses AI to read public job listings and judge whether a role is open to people in Africa. No client data is involved in that.
If you say no, or withdraw later, we stop sending anything of yours to AI and a person does all the drafting by hand. It takes longer. Nothing else about your cycle changes. To withdraw, tell us on WhatsApp.
How we improve Thombi
Thombi gets better the more it learns about what works for people applying from Africa. There are two parts to this:
- Facts about you and your applications, always, without your name: your role, years of experience, country, the roles you were aiming for, what you'd tried, how far you got with us, what was holding you back, and for each application which roles were genuinely open to people in Africa, at what level, and what came back (a reply, an interview, a no). Nothing in these facts identifies you. We rely on our legitimate interest for this, and you can object at any time by telling us.
- Your materials, only if you agree: if you tick the second box on the form, we may use your CV, cover notes and application answers, with your name, email, phone number and address removed, to improve how we prepare applications, including teaching and testing the AI that helps us draft. We never publish them or show them to other clients. When your other details are deleted, we keep these copies, with those identifiers removed. Removing them takes out what names you directly; your employers and dates stay, because that's what makes the materials useful, which is why we ask first.
The box is optional and starts unticked. Saying no never affects your cycle. To withdraw, tell us on WhatsApp and we stop.
How long we keep it
- If you go ahead: your personal details (your name, contact details, our notes and our WhatsApp conversation) are deleted 2 years after your final check-in. We keep them that long so we can follow up and tell you about new roles. Ask and we delete them sooner.
- If you don't go ahead: your enquiry is deleted within 90 days.
- Payment records: kept for as long as the law requires for financial records.
- Anonymised facts about you and your applications: kept to improve Thombi, because they no longer identify you (see "How we improve Thombi").
- Your materials, if you agreed: kept with your name, email, phone numbers and links removed, to improve Thombi and its AI.
- After deletion: what we keep can't be linked back to you, so we can't pick out your part of it later. If you want your materials left out, withdraw your consent before your details are deleted.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, stop a use you object to, or move it to someone else. Where we rely on your consent, you can withdraw it at any time. We'll respond within 30 days, usually much sooner. If you're not satisfied, you can complain to the Nigeria Data Protection Commission.
Keeping it safe
Access is limited to the Thombi team. Our database refuses anyone who isn't signed in as a team member, the public form can only add a new enquiry and can't read anything back, and team laptops clear their copies of client records when someone signs out.
Changes
12 October 2026: added "How we improve Thombi" and a second, optional consent box on the form, which applies only to people who tick it from this date. Personal details are now kept for 2 years after the final check-in instead of 30 days, and anonymised facts about clients (not only about applications) are kept.
5 October 2026: added "How we use AI". Before this date we didn't use AI on clients' details.
If we change how we use your data, we'll update this page and its date, and tell current clients on WhatsApp before a change affects them.