Privacy Policy

1. Scope

This Privacy Policy explains how NairaCoders collects, uses, shares, and protects personal data when you use the NairaCoders marketplace. It is written to align with the Nigeria Data Protection Act 2023 (NDPA) and considers other applicable data protection laws for cross-border users.

"NairaCoders" refers to the marketplace operator responsible for deciding how platform personal data is used (the data controller).

2. Data we collect

Account and profile data: name, email address, password (stored only as a hash), role, business or profile name, headline, skills, portfolio items, and onboarding preferences.

Identity and verification data: identity documents, self-contained verification artifacts, and trust-and-safety badges where you submit them.

Transaction data: projects, bids, contract snapshots, milestone funding and releases, payouts, subscriptions, and invoices.

Dispute data: case submissions, evidence, messages, jury materials, and outcomes.

Security and device data: session and sign-in records, passkey registrations, trusted-device fingerprints, two-factor settings, IP address, and security logs.

Communication data: messages sent in project workspaces, support requests, and notifications preferences.

3. How we use data

To operate the marketplace: create accounts, match talent to projects, run workspaces, process milestone escrow and payouts, and calculate fees.

To keep the platform safe: verify identities, assess risk and fraud, enforce our Terms, and operate the SabiResolve dispute and jury processes.

To communicate: transactional notifications, security alerts, support responses, and — only with your consent where required — product updates.

To comply with law: tax, accounting, and regulatory obligations, and lawful requests from authorities.

4. Legal bases

Under the NDPA we rely on: performance of a contract (running accounts, projects, and escrow); legitimate interests (platform security, fraud prevention, service improvement); legal obligation (records, tax, lawful requests); and consent (optional communications, optional verification badges, cookies and local storage that are not strictly necessary).

Where we rely on consent, you can withdraw it at any time without affecting earlier processing.

5. Sharing

With other users as necessary to run a project: employers and providers see the profiles, bids, and workspace content relevant to their contracts.

With payment processors and financial institutions to fund milestones, process payments, and pay out earnings.

With identity-verification and security vendors who help us run checks and prevent fraud.

With hosting, email, and infrastructure providers who process data on our instructions.

With analytics and advertising partners — currently Meta and Google — who help us measure and improve sign-up and funding conversion, as described in section 10.

With mediators, jurors, and dispute participants as needed to operate SabiResolve, and with law enforcement or regulators where the law requires or permits it.

We do not sell personal data.

6. International transfers

NairaCoders is Nigeria-first, but infrastructure and vendors may be located outside Nigeria. Where personal data leaves Nigeria, we aim to use safeguards recognized under the NDPA, such as adequacy assessments, contractual clauses, or your consent for the specific transfer.

7. Retention

We keep personal data only as long as needed for the purposes above: account data while your account is active; transaction and escrow records for the period required by tax and accounting law; dispute records for the retention needed to enforce outcomes; and security logs for a bounded security period. Data that is no longer needed is deleted or anonymized.

8. Your rights

You have the right to access your personal data, request correction or deletion, object to or restrict certain processing, request portability of data you provided, and withdraw consent where processing is based on consent.

To exercise these rights, contact us through the support page. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe our processing violates the law.

9. Security

We protect personal data with measures proportionate to the risk: encrypted transport (HTTPS), hashed credentials, signed session cookies, two-factor and passkey authentication options, trusted-device checks, role-based access controls, and audit logging. No system is perfectly secure; we encourage strong passwords and enabling additional authentication factors.

10. Cookies, local storage, and analytics

We use a session cookie to keep you signed in and local storage for preferences such as theme and locale, plus draft onboarding details you choose to keep locally.

Where enabled, we use the Meta Pixel and Meta Conversions API, and Google Analytics and Google Ads conversion tracking, to measure sign-ups and escrow funding and to improve those flows. These tools set cookies (for example _fbp, _fbc, and Google's analytics cookies) and, for the server-side events we send Meta and Google, use hashed contact details (never a plain email or phone number) plus your IP address and browser user agent — never your project, bid, message, or payment content.

You can limit this through your browser's cookie and tracking controls, or ad-platform opt-outs offered by Meta and Google.

11. Children

NairaCoders is not directed at anyone under 18, and we do not knowingly collect their personal data. Accounts found to belong to persons under 18 may be suspended.

12. Contact

Privacy questions and rights requests go through the support page.