Legal

Privacy Policy

Effective: January 1, 2026

This Privacy Policy explains how DMHicc ("Platform", "we", "us") collects, uses, and safeguards information in connection with your use of the DMHicc platform operated by Harvesters International Christian Centre.

Information We Collect

We collect information you provide directly: your name, email address, and password when you register for an account.

We automatically collect usage data: campaign participation events, smart link clicks, referral attributions, points earned, and leaderboard positions.

We collect device and session data: browser type, device identifiers, and authentication session tokens.

How We Use Your Information

To operate and secure your account and authenticate your identity across sessions.

To track campaign participation, calculate points, attribute referrals, and generate engagement analytics.

To display your name and rank on leaderboards visible to other platform participants.

To send platform-related communications such as account changes or security alerts.

Data Sharing

We do not sell your personal data to third parties.

Your performance data (rank, points, participation) is visible to other authenticated platform users as part of the leaderboard and team features.

Administrative staff with ADMIN or SUPER_ADMIN roles can view all user accounts, campaign participation, and trust scores for platform management purposes.

Data Retention

Account data is retained for as long as your account is active. Upon account deactivation, personal identifiers are pseudonymised and activity records are retained for platform integrity purposes.

Your Rights

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at churchministry@harvestersng.org.

You may request a copy of the data we hold about you at any time.

Cookies & Local Storage

DMHicc uses only essential cookies and local storage. These are strictly necessary for the platform to function — they cannot be disabled without breaking core functionality.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies.

We set two session-management cookies stored as secure, httpOnly HTTP cookies that are inaccessible to JavaScript: a short-lived access token used to authenticate API requests, and a longer-lived refresh token used to renew your session without requiring you to log in again. We also store a single browser preference flag in localStorage to record that you have acknowledged this cookie notice.

Security

Passwords are hashed using bcrypt. Authentication tokens are stored in httpOnly cookies inaccessible to JavaScript. We apply rate limiting and trust scoring to detect and mitigate abusive activity.

Contact

For privacy-related enquiries, contact us at churchministry@harvestersng.org or write to: Harvesters International Christian Centre, Lagos, Nigeria.