Privacy Policy

Version 2026-08-21 · in force since 21 August 2026

1. Who We Are

Jobivo Digital Services Limited (RC 9697026) ("Jobivo", "we", "our", "us") is a Nigerian online marketplace that connects customers with independent, verified service professionals ("Pros"). Our platform is accessible at jobivo.ng and through our mobile application (together, the "Platform"). Jobivo Digital Services Limited (RC 9697026) is the Data Controller in respect of the personal data described in this Privacy Policy. Our registered address is Ibilola Nelson House, 82 Allen Avenue, Ikeja, Lagos State We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 ("NDPA") and the NDPA General Application and Implementation Directive 2025 ("GAID") issued by the Nigeria Data Protection Commission ("NDPC").

2. Definitions

  • "Personal Data" means any information relating to an identified or identifiable individual.
  • "Sensitive Personal Data" includes biometric data (such as a selfie used for identity verification) and other categories the NDPA identifies as attracting heightened protection.
  • "Data Controller" means the entity that determines the purpose and means of processing personal data — in this case, Jobivo.
  • "Data Processor" means an entity that processes personal data on the Data Controller's behalf, such as Paystack, Dojah, and Supabase.
  • "NDPC" means the Nigeria Data Protection Commission, Nigeria's independent data protection supervisory authority.

3. Information We Collect

3.1 Information you give us

  • Account details: full name, email address, phone number, password (stored hashed).
  • Profile information: profile photo, bio, service categories, location (state/city).
  • KYC and verification information: NIN, BVN (where provided), and a selfie used for identity verification. For company accounts, we may also collect the CAC Certificate of Incorporation, the CAC Status Report, director's NIN, and relevant company information.
  • Booking details: job descriptions, addresses, dates, prices, and communications with the other party to a booking.
  • Payment information: processed through Paystack — we do not store your card number.
  • Reviews and ratings you submit.
  • Files you attach to a quote request, such as photographs of the work you want done.
  • Notes and photographs a Pro records against a Job, which may include photographs of your property. Where a Pro marks one of these as the record of the Job being finished, it is shown to you.
  • Communication preferences: your chosen notification channels (WhatsApp, email, SMS). 3.2 Information collected automatically
  • Log data: IP address, browser type, pages visited, timestamps.
  • Device information: device type, operating system.
  • Essential cookies and local storage for session management and preferences (see Section 13). 3.3 Sensitive personal data Your National Identification Number (NIN), Bank Verification Number (BVN, where provided), and the selfie image used to verify your identity are sensitive personal data under the NDPA. We process this category of data only for identity verification and fraud prevention, on the basis of your explicit consent given at the point of KYC verification, and it is processed through our identity verification process, including Dojah Technologies Limited where applicable.

4. Lawful Basis for Processing

  • Contract performance: processing necessary to provide our marketplace services and to process bookings and payments.
  • Legal obligation: KYC verification, fraud prevention, and financial record-keeping under Nigerian law.
  • Legitimate interests: platform security and fraud detection, where we have assessed that this interest is necessary and does not override your rights and freedoms; a record of this assessment is maintained and available on request.
  • Consent: WhatsApp and SMS notifications, optional BVN verification, sensitive biometric verification data, and marketing communications. You may withdraw consent at any time through Settings or by contacting us, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Information

  • To create and manage your account.
  • To verify your identity through KYC checks.
  • To facilitate bookings between customers and Pros.
  • To process payments and manage transactions.
  • To send booking confirmations, updates, and notifications via email and, where you have consented, WhatsApp or SMS.
  • To resolve disputes between parties.
  • To detect and prevent fraud, abuse, or violations of our Terms of Service.
  • To improve the Platform and develop new features.
  • To comply with applicable Nigerian law and regulatory requirements. If any of these purposes is ever fulfilled through a fully automated decision without human review, we will notify you separately, explain the logic involved, and offer you the right to request human review of that decision.

6. How We Share Your Information

We do not sell your personal data. We share it only in the following circumstances:

  • Between booking parties: when a Booking is made, the customer and Pro share their name, phone number, and job address with each other as needed to complete the service.
  • Paystack: payment data is processed by Paystack Payments Limited (RC 1283393), a PCI-DSS compliant Nigerian payment processor operating entirely within Nigeria. Paystack's own privacy policy applies to the data it processes.
  • Dojah: KYC and identity verification, including NIN, BVN and biometric matching, is carried out through Dojah Technologies Limited. The selfie submitted for verification is transmitted to Dojah for biometric matching within Nigeria. A copy of the selfie may also be temporarily stored in Jobivo's Supabase-hosted storage in the United States pending administrative review of the KYC submission. Such storage constitutes a cross-border transfer and is subject to the safeguards described in Section 7.
  • Supabase: our database infrastructure is hosted by Supabase Inc. in the United States. This is a cross-border transfer — see Section 7 for the safeguards that apply to it.
  • Resend: transactional email services. Resend processes names, email addresses and relevant email content necessary to deliver transactional communications on Jobivo's behalf.
  • Meta (WhatsApp): where you consent to WhatsApp notifications, your phone number and message content are transmitted through Meta's WhatsApp Cloud API. This is also a cross-border transfer — see Section 7. You may withdraw this consent at any time in Settings and will continue to receive the same notifications by email or SMS instead.
  • Legal obligations: we may disclose information where required by Nigerian law, a court order, the NDPC, or another competent government authority.
  • Safety: we may share information where necessary to protect the safety of any person.

7. Cross-Border Data Transfers

Some of our service providers are located outside Nigeria. Supabase Inc. (database infrastructure), Resend (transactional email services, and Meta (WhatsApp Cloud API) process data on servers outside Nigeria. Under the NDPA, a crossborder transfer may only take place where the recipient country has been designated by the NDPC as affording an adequate level of data protection, or where the transfer is supported by an NDPC-recognised Cross-Border Data Transfer Instrument, such as standard contractual clauses, binding corporate rules, a code of conduct, or a certification mechanism. For each such transfer, we conduct and document an assessment of the recipient country's data protection standards and put in place contractual safeguards consistent with the NDPA and the GAID. We also select providers that maintain recognised security certifications (such as SOC 2 Type II or ISO 27001) as an additional, though not sole, safeguard, and we limit the data shared to what is strictly necessary for the relevant service. Where a selfie or other identity verification data is temporarily stored in Jobivo's US-hosted infrastructure pending review, such processing constitutes a cross-border transfer and is subject to the safeguards described in this Section. Jobivo limits such storage to the period necessary to complete the verification process and applies the retention and deletion periods set out in Section 8.

8. Data Retention

We retain your account data for as long as your account remains active. After account deletion, we retain transaction records for seven (7) years to comply with financial record-keeping requirements under Nigerian law Verification selfies and other sensitive biometric data are deleted once the relevant verification process has been completed and a decision has been made. Where a verification submission remains undecided, the relevant biometric data is deleted after ninety (90) days. Other KYC documents are deleted within ninety (90) days of account closure unless a longer period is required by law. Files attached to a quote request are deleted thirty (30) days after the request is declined or expires. Communication preference records are deleted with your account. Any other personal data not addressed above (such as booking history and reviews not otherwise required to be retained) is deleted or anonymised within twelve (12) months of account closure.

9. Your Rights

You have the following rights regarding your personal data under the NDPA and the GAID:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your account and personal data, subject to our legal retention obligations.
  • Portability: request your data in a structured, machine-readable format.
  • Objection: object to processing of your data carried out on the basis of legitimate interest.
  • Withdraw consent: withdraw consent for optional processing (for example, WhatsApp notifications or BVN verification) at any time via Settings.
  • Standard Notice to Address Grievance (SNAG): serve a formal notice on us directly, without first involving the NDPC, requiring us to remedy a suspected violation of your data protection rights.
  • Complaint: lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng. To exercise any of these rights, contact our Data Protection Officer at privacy@jobivo.ng. We will respond within 30 days.

10. Our Compliance Programme

Jobivo is committed to full compliance with the Nigeria Data Protection Act 2023 and the GAID 2025 issued by the NDPC. Depending on our classification under the GAID, this includes: registering with the NDPC as a Data Controller/Processor of Major Importance where applicable; appointing and maintaining a designated Data Protection Officer; conducting Data Privacy Impact Assessments for high-risk processing activities; maintaining a Record of Processing Activities; filing Compliance Audit Returns with the NDPC where required; and applying privacy by design and by default in how we build the Platform.

11. Data Breach Notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC within 72 hours, or immediately where the breach poses a systemic or public risk. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay, describing the nature of the breach and the steps we are taking in response.

12. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, encrypted database storage at rest, role-based access controls, and regular security reviews. Payment data is handled exclusively by Paystack under PCI-DSS standards; we do not store your card details. No system is completely secure, and we encourage you to use a strong password and to log out on shared devices. See Section 11 above for what happens in the event of a breach.

13. Cookies

We use essential cookies only for authentication, session management and to remember your preferences. These cookies are necessary for the operation and security of the Platform. We do not use third-party advertising cookies or tracking pixels. Because these cookies are necessary for you to use the Platform, they cannot be disabled through the cookie preference settings.

14. Third-Party Links

The Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with any personal data.

15. Children

Jobivo is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered on the Platform, please contact us immediately at privacy@jobivo.ng.

16. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date and version number at the top of this Policy and notify registered users by email of any material changes. Prior versions of this Policy are archived and available on request. Continued use of the Platform after the effective date of an update constitutes acceptance of the revised Policy.

17. Complaints Procedure

If you have a concern about how we handle your personal data, please contact our Data Protection Officer first at privacy@jobivo.ng, and we will aim to resolve it within 30 days. If you are not satisfied with our response, or wish to raise the matter directly, you may serve a Standard Notice to Address Grievance on us, or lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.

18. Contact & Data Protection Officer

For privacy-related questions or to exercise your data rights, contact our Data Protection Officer:

  • Data Protection Officer: Agbor Nuku Egede
  • Email: privacy@jobivo.ng
  • Contact form: jobivo.ng/contact
  • Regulatory authority: Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng

1. Who We Are

Jobivo ("we", "our", "us") is a Nigerian online marketplace that connects customers with local service providers, operated by Jobivo Digital Services Limited, a company incorporated in Nigeria (RC 9697026) and the data controller responsible for your personal data. Our registered address is Ibilola Nelson House, 82 Allen Avenue, Ikeja, Lagos State. Our platform is accessible at jobivo.ng. When this policy refers to "the platform" we mean our website, web app, and any related services.

We are committed to protecting your personal data in accordance with the Nigeria Data Protection Regulation 2019 (NDPR) and the Nigeria Data Protection Act 2023 (NDPA).

2. Information We Collect

2a. Information you give us

  • Account details: full name, email address, phone number, password (stored hashed)
  • Profile information: profile photo, bio, service categories, location (state/city)
  • KYC documents: government-issued ID (NIN, Driver's licence, Voter's card, or passport), selfie, BVN (optional)
  • For company accounts: your CAC Certificate of Incorporation and your CAC Status Report, both uploaded as files, plus the director’s NIN and your company details. The Status Report lists your directors and shareholders by name and address; we ask for it to confirm that the person registering is connected to the business.
  • Booking details: job descriptions, addresses, dates, prices, communications with the other party
  • Payment information: processed through Paystack — we do not store card numbers
  • Reviews and ratings you submit
  • Files you attach to a quote request — typically photos of the job. These are stored privately and can be opened only by you, the provider you sent the request to, and our staff.
  • Notes and photographs your provider records against your booking. A provider keeps their own working notes on a job, which may include photographs of the work — and so, of your property. These are private to them, their team and our staff; you do not see them. The exception is the one note a provider may mark as the record of the job being finished: that note and its photographs are shown to you, and you are told when it is added, so you can say at the time if it does not match what you saw.
  • Communication preferences: your chosen notification channels (WhatsApp, email, SMS)

2b. Information collected automatically

  • Log data: IP address, browser type, pages visited, timestamps
  • Device information: device type, operating system
  • Essential cookies and local storage for session management and preferences

3. Lawful Basis for Processing

Under the NDPR and NDPA, we process your personal data on the following lawful bases:

  • Contract performance: Processing necessary to provide our marketplace services, process bookings and payments
  • Legal obligation: KYC verification, fraud prevention, financial record-keeping under Nigerian law
  • Legitimate interests: Platform security, fraud detection, improving our services
  • Consent: WhatsApp and SMS notifications, optional BVN verification, marketing communications — you may withdraw consent at any time

4. How We Use Your Information

  • To create and manage your account
  • To verify your identity through KYC checks
  • To facilitate bookings between customers and service providers
  • To bill provider subscriptions (Jobivo does not process payment for jobs)
  • To send booking confirmations, updates, and notifications via email and WhatsApp (where consent is given)
  • To resolve disputes between parties
  • To detect and prevent fraud, abuse, or violations of our Terms of Service
  • To improve the platform and develop new features
  • To comply with applicable Nigerian law and regulatory requirements

5. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

  • Between booking parties: When a booking is made, the customer and service provider share their name, phone number, and job address with each other as required to complete the service.
  • Paystack: Payment data is processed by Paystack (RC 1283393), a PCI-DSS compliant Nigerian payment processor. Paystack's privacy policy applies to data they process.
  • Supabase: Our database infrastructure is hosted by Supabase Inc. (United States). Data transferred to Supabase is protected by contractual safeguards and Supabase's SOC 2 Type II certification. See Section 6 for cross-border transfer details.
  • Dojah: KYC verification (NIN, BVN, CAC, and biometric matching of your verification selfie against your NIN photo) is processed by Dojah Technologies Limited, a Nigerian NIBSS-licensed identity verification provider. The selfie you submit is transmitted to Dojah for biometric matching within Nigeria. A copy may also be stored temporarily in our Supabase-hosted storage in the United States while your submission is reviewed, and is deleted once that review is complete. That storage is a cross-border transfer — see Section 6.
  • Resend: Transactional emails (booking confirmations, verification outcomes, account notices) are sent through Resend, which processes the recipient address and message content on servers in the United States. See Section 6 for cross-border transfer details.
  • Meta (WhatsApp): Where you consent to WhatsApp notifications, your phone number and message content are transmitted through Meta's WhatsApp Cloud API.
  • Legal obligations: We may disclose information if required by Nigerian law, court order, NITDA, or other government authority.
  • Safety: We may share information to protect the safety of any person.

6. Cross-Border Data Transfers

Some of our sub-processors are located outside Nigeria. Supabase Inc. (database and file storage), Resend (transactional email) and Meta (WhatsApp Cloud API) each process data on servers outside Nigeria, principally in the United States. We ensure adequate protection for such transfers through:

  • Data processing agreements with each sub-processor
  • Selecting providers with recognised security certifications (SOC 2, ISO 27001)
  • Limiting data shared to what is strictly necessary for service delivery

The identity checks themselves happen in Nigeria. Your NIN, BVN and CAC details, and the biometric match between your selfie and your NIMC photo, are carried out by Dojah Technologies Limited within Nigeria.

What we hold afterwards depends on the result. Where a check confirms your identity automatically, we do not keep the identifier at all — the NIN or BVN is discarded immediately and we retain only the name the registry returned, as proof the check was made. Where a check cannot be confirmed automatically and a person has to review it, the identifier and your verification selfie are held in our Supabase-hosted storage in the United States until that review is resolved, and are deleted when it is. That storage is a cross-border transfer of identity and biometric data, and is subject to the safeguards described in this section.

Company registration documents are treated differently, and we want to be plain about it. Your CAC Certificate of Incorporation and CAC Status Report are not deleted when your verification is decided: they are the record of why your business was approved, and we keep them for as long as your account is open. They are held as files in the same Supabase-hosted storage in the United States, which is a cross-border transfer on the same footing as the material described above. They are stored in a private area that is not readable from the public internet, and are opened only by our staff reviewing a verification. They are deleted under Section 7 when your account closes.

7. Data Retention

We retain account data for as long as your account is active. After account deletion, we retain transaction records for seven (7) years to comply with financial record-keeping requirements under Nigerian law. Identity verification material — including your verification selfie, any identifier still held, and company registration documents such as your CAC Certificate and CAC Status Report — is deleted within 90 days of account closure unless retention is required by law. Communication preference records are deleted with your account.

Files attached to a quote request are kept with that quote or booking while it is live. If a request is declined or expires, the files are deleted thirty days later, and you can delete a declined or expired request yourself at any time before that. Photographs your provider recorded against a booking are deleted within 90 days of either of your accounts closing; the written note stays with the booking record.

8. Your Rights Under the NDPR / NDPA

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your account and personal data (subject to legal retention obligations)
  • Portability: Request your data in a structured, machine-readable format
  • Withdraw consent: Withdraw consent for optional processing (e.g. WhatsApp notifications, BVN) at any time via Settings
  • Object: Object to processing of your data for purposes beyond contract performance
  • Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng

To exercise any of these rights, contact our Data Protection Officer at privacy@jobivo.ng. We will respond within 30 days.

9. Nigeria Data Protection Regulation (NDPR) Compliance

Jobivo is committed to full compliance with the Nigeria Data Protection Regulation 2019 (NDPR) issued by the National Information Technology Development Agency (NITDA) and the Nigeria Data Protection Act 2023 (NDPA).

  • We have appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance
  • We conduct periodic data protection impact assessments for high-risk processing activities
  • We maintain a record of our data processing activities as required by law
  • We file annual data protection compliance audits with the NDPC as required
  • We implement privacy by design and by default in our platform development

10. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, encrypted database storage at rest, role-based access controls, and regular security reviews. Payment data is handled exclusively by Paystack under PCI-DSS standards — we do not store card details. No system is completely secure; we encourage you to use a strong password and to log out on shared devices.

11. Cookies

We use essential cookies only — for authentication sessions and user preferences. We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences via the banner shown on your first visit. Disabling essential cookies will prevent you from signing in to the platform.

12. Children

Jobivo is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately at privacy@jobivo.ng.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and notify registered users by email for material changes. Continued use of the platform after changes constitutes acceptance of the revised policy.

14. Contact & Data Protection Officer

For privacy-related questions or to exercise your data rights, contact our Data Protection Officer: