Privacy Policy

Version 2026-08-26 · in force since 26 August 2026

1. Who We Are

Jobivo Digital Services Limited (RC 9697026) ("Jobivo", "we", "our", "us") is a Nigerian online marketplace that connects customers with independent, verified service professionals ("Pros"). Our platform is accessible at jobivo.ng and through our mobile application (together, the "Platform"). Jobivo Digital Services Limited (RC 9697026) is the Data Controller in respect of the personal data described in this Privacy Policy. Our registered address is Ibilola Nelson House, 82 Allen Avenue, Ikeja, Lagos State We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 ("NDPA") and the NDPA General Application and Implementation Directive 2025 ("GAID") issued by the Nigeria Data Protection Commission ("NDPC").

2. Definitions

  • "Personal Data" means any information relating to an identified or identifiable individual.
  • "Sensitive Personal Data" includes biometric data (such as a selfie used for identity verification) and other categories the NDPA identifies as attracting heightened protection.
  • "Data Controller" means the entity that determines the purpose and means of processing personal data — in this case, Jobivo.
  • "Data Processor" means an entity that processes personal data on the Data Controller's behalf, such as Paystack, Dojah, and Supabase.
  • "NDPC" means the Nigeria Data Protection Commission, Nigeria's independent data protection supervisory authority.

3. Information We Collect

3.1 Information you give us

  • Account details: full name, email address, phone number, password (stored hashed).
  • Profile information: profile photo, bio, service categories, location (state/city).
  • KYC and verification information: NIN, BVN (where provided), and a selfie used for identity verification. For company accounts, we may also collect the CAC Certificate of Incorporation, the CAC Status Report, director's NIN, and relevant company information.
  • Booking details: job descriptions, addresses, dates, prices, and communications with the other party to a booking.
  • Payment information: processed through Paystack — we do not store your card number.
  • Reviews and ratings you submit.
  • Files you attach to a quote request, such as photographs of the work you want done.
  • Notes and photographs a Pro records against a Job, which may include photographs of your property. Where a Pro marks one of these as the record of the Job being finished, it is shown to you.
  • Communication preferences: your chosen notification channels (WhatsApp, email, SMS).
  • If you ask us to tell you when Jobivo becomes available in your city: your email address, the city you named, and whether you asked as someone wanting to book a service or as someone wanting to offer one. You do not need an account to do this, and we do not create one for you — this is the only information we hold about you, we use it for nothing except the single message telling you that city has opened, and we do not share it with anyone. 3.2 Information collected automatically
  • Log data: IP address, browser type, pages visited, timestamps.
  • Device information: device type, operating system.
  • Essential cookies and local storage for session management and preferences (see Section 13). 3.3 Sensitive personal data Your National Identification Number (NIN), Bank Verification Number (BVN, where provided), and the selfie image used to verify your identity are sensitive personal data under the NDPA. We process this category of data only for identity verification and fraud prevention, on the basis of your explicit consent given at the point of KYC verification, and it is processed through our identity verification process, including Dojah Technologies Limited where applicable.

4. Lawful Basis for Processing

  • Contract performance: processing necessary to provide our marketplace services and to process bookings and payments.
  • Legal obligation: KYC verification, fraud prevention, and financial record-keeping under Nigerian law.
  • Legitimate interests: platform security and fraud detection, where we have assessed that this interest is necessary and does not override your rights and freedoms; a record of this assessment is maintained and available on request.
  • Consent: WhatsApp and SMS notifications, optional BVN verification, sensitive biometric verification data, asking to be told when Jobivo becomes available in your city, and marketing communications. You may withdraw consent at any time through Settings or by contacting us, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Information

  • To create and manage your account.
  • To verify your identity through KYC checks.
  • To facilitate bookings between customers and Pros.
  • To process payments and manage transactions.
  • To send booking confirmations, updates, and notifications via email and, where you have consented, WhatsApp or SMS.
  • To resolve disputes between parties.
  • To detect and prevent fraud, abuse, or violations of our Terms of Service.
  • To improve the Platform and develop new features.
  • To comply with applicable Nigerian law and regulatory requirements. If any of these purposes is ever fulfilled through a fully automated decision without human review, we will notify you separately, explain the logic involved, and offer you the right to request human review of that decision.

6. How We Share Your Information

We do not sell your personal data. We share it only in the following circumstances:

  • Between booking parties: when a Booking is made, the customer and Pro share their name, phone number, and job address with each other as needed to complete the service.
  • Trusted contacts you or the other party choose: either party to a Booking may generate a read-only tracking link and send it to a family member or friend for safety. The recipient needs no account. They see the job description, its status, the date and time, first names, and the location — where a Pro shares a home-service Booking, only the area is shown rather than the customer's full address. The link can be created from one hour before the Booking is due to start, expires shortly after the job, and can be revoked at any time. Whenever a Booking is shared, we notify the other party that a link exists, though not who received it.
  • Paystack: payment data is processed by Paystack Payments Limited (RC 1283393), a PCI-DSS compliant Nigerian payment processor operating entirely within Nigeria. Paystack's own privacy policy applies to the data it processes.
  • Dojah: KYC and identity verification, including NIN, BVN and biometric matching, is carried out through Dojah Technologies Limited. The selfie submitted for verification is transmitted to Dojah for biometric matching within Nigeria. A copy of the selfie may also be temporarily stored in Jobivo's Supabase-hosted storage in the United States pending administrative review of the KYC submission. Such storage constitutes a cross-border transfer and is subject to the safeguards described in Section 7.
  • Supabase: our database infrastructure is hosted by Supabase Inc. in the United States. This is a cross-border transfer — see Section 7 for the safeguards that apply to it.
  • Resend: transactional email services. Resend processes names, email addresses and relevant email content necessary to deliver transactional communications on Jobivo's behalf.
  • Meta (WhatsApp): where you consent to WhatsApp notifications, your phone number and message content are transmitted through Meta's WhatsApp Cloud API. This is also a cross-border transfer — see Section 7. You may withdraw this consent at any time in Settings and will continue to receive the same notifications by email or SMS instead.
  • Legal obligations: we may disclose information where required by Nigerian law, a court order, the NDPC, or another competent government authority.
  • Safety: we may share information where necessary to protect the safety of any person.

7. Cross-Border Data Transfers

Some of our service providers are located outside Nigeria. Supabase Inc. (database infrastructure), Resend (transactional email services, and Meta (WhatsApp Cloud API) process data on servers outside Nigeria. Under the NDPA, a crossborder transfer may only take place where the recipient country has been designated by the NDPC as affording an adequate level of data protection, or where the transfer is supported by an NDPC-recognised Cross-Border Data Transfer Instrument, such as standard contractual clauses, binding corporate rules, a code of conduct, or a certification mechanism. For each such transfer, we conduct and document an assessment of the recipient country's data protection standards and put in place contractual safeguards consistent with the NDPA and the GAID. We also select providers that maintain recognised security certifications (such as SOC 2 Type II or ISO 27001) as an additional, though not sole, safeguard, and we limit the data shared to what is strictly necessary for the relevant service. Where a selfie or other identity verification data is temporarily stored in Jobivo's US-hosted infrastructure pending review, such processing constitutes a cross-border transfer and is subject to the safeguards described in this Section. Jobivo limits such storage to the period necessary to complete the verification process and applies the retention and deletion periods set out in Section 8.

8. Data Retention

We retain your account data for as long as your account remains active. After account deletion, we retain transaction records for seven (7) years to comply with financial record-keeping requirements under Nigerian law Verification selfies and other sensitive biometric data are deleted once the relevant verification process has been completed and a decision has been made. Where a verification submission remains undecided, the relevant biometric data is deleted after ninety (90) days. Other KYC documents are deleted within ninety (90) days of account closure unless a longer period is required by law. Files attached to a quote request are deleted thirty (30) days after the request is declined or expires. Communication preference records are deleted with your account. Records of trusted-contact tracking links — the link itself, how many times it was opened, and any label you gave it — are deleted thirty (30) days after the link expires. Where you have asked to be told when Jobivo becomes available in your city, we delete your email address and the city you named thirty (30) days after we send you that message, and after twenty-four (24) months if that city has not opened by then — whichever comes first. You may ask us to delete it sooner at any time, by writing to the address in Section 18. Any other personal data not addressed above (such as booking history and reviews not otherwise required to be retained) is deleted or anonymised within twelve (12) months of account closure.

9. Your Rights

You have the following rights regarding your personal data under the NDPA and the GAID:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your account and personal data, subject to our legal retention obligations.
  • Portability: request your data in a structured, machine-readable format.
  • Objection: object to processing of your data carried out on the basis of legitimate interest.
  • Withdraw consent: withdraw consent for optional processing (for example, WhatsApp notifications or BVN verification) at any time via Settings.
  • Standard Notice to Address Grievance (SNAG): serve a formal notice on us directly, without first involving the NDPC, requiring us to remedy a suspected violation of your data protection rights.
  • Complaint: lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng. To exercise any of these rights, contact our Data Protection Officer at privacy@jobivo.ng. We will respond within 30 days.

10. Our Compliance Programme

Jobivo is committed to full compliance with the Nigeria Data Protection Act 2023 and the GAID 2025 issued by the NDPC. Depending on our classification under the GAID, this includes: registering with the NDPC as a Data Controller/Processor of Major Importance where applicable; appointing and maintaining a designated Data Protection Officer; conducting Data Privacy Impact Assessments for high-risk processing activities; maintaining a Record of Processing Activities; filing Compliance Audit Returns with the NDPC where required; and applying privacy by design and by default in how we build the Platform.

11. Data Breach Notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC within 72 hours, or immediately where the breach poses a systemic or public risk. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay, describing the nature of the breach and the steps we are taking in response.

12. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, encrypted database storage at rest, role-based access controls, and regular security reviews. Payment data is handled exclusively by Paystack under PCI-DSS standards; we do not store your card details. No system is completely secure, and we encourage you to use a strong password and to log out on shared devices. See Section 11 above for what happens in the event of a breach.

13. Cookies

We use essential cookies only for authentication, session management and to remember your preferences. These cookies are necessary for the operation and security of the Platform. We do not use third-party advertising cookies or tracking pixels. Because these cookies are necessary for you to use the Platform, they cannot be disabled through the cookie preference settings.

14. Third-Party Links

The Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with any personal data.

15. Children

Jobivo is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered on the Platform, please contact us immediately at privacy@jobivo.ng.

16. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date and version number at the top of this Policy and notify registered users by email of any material changes. Prior versions of this Policy are archived and available on request. Continued use of the Platform after the effective date of an update constitutes acceptance of the revised Policy.

17. Complaints Procedure

If you have a concern about how we handle your personal data, please contact our Data Protection Officer first at privacy@jobivo.ng, and we will aim to resolve it within 30 days. If you are not satisfied with our response, or wish to raise the matter directly, you may serve a Standard Notice to Address Grievance on us, or lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.

18. Contact & Data Protection Officer

For privacy-related questions or to exercise your data rights, contact our Data Protection Officer:

  • Data Protection Officer: Agbor Nuku Egede
  • Email: privacy@jobivo.ng
  • Contact form: jobivo.ng/contact
  • Regulatory authority: Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng