Privacy Policy

This policy explains what JMO Hub collects, why, and what you can do about it. It is written against the Nigeria Data Protection Act 2023 (NDPA).

1. What we collect

• Account data — name, email address, phone number, password (stored only as a hash), and the roles you hold.
• Provider verification data — government ID, selfie, business registration or professional certificates, and any document number you supply.
• Transaction data — jobs, amounts, commission, payouts, disputes and the ledger entries recording them.
• Payout details — bank code and account number, stored encrypted.
• Usage data — searches (including those returning no results), sessions and devices, and pages viewed.

We do not store card numbers. Card details are entered on the payment provider's hosted checkout and never reach our servers.

2. Why we use it

• To operate your account and the marketplace.
• To verify provider identity — the basis on which buyers decide to trust a stranger.
• To process payments, commission and payouts, and to settle disputes.
• To detect fraud and abuse.
• To meet legal and accounting obligations.

3. Sensitive documents

Identity documents are stored on private storage that is not reachable from the web. They are accessible only to the provider who uploaded them and to authorised staff reviewing verification, and every access goes through an authorisation check. Document numbers are encrypted at rest.

4. Who we share with

• Our payment provider — to take payments and make payouts.
• The other party to a job — your name and, once a job is funded, contact details.
• Service providers who host or support the platform, bound to protect the data.
• Authorities, where the law requires it.

We do not sell personal data.

5. How long we keep it

Account and transaction records are kept while your account is open and after closure for as long as tax, accounting and dispute obligations require. Verification documents are kept for the period required to evidence that a check was carried out, then deleted.

6. Your rights

Under the NDPA you may request access to your data, correction of inaccurate data, deletion where we have no continuing obligation to keep it, a copy in portable form, and you may object to certain processing. Ask through the help centre. Deleting an account does not erase financial records we are required to retain.

7. Security

Traffic is encrypted in transit. Passwords are hashed. Bank details and document numbers are encrypted at rest. Access to verification documents is restricted and checked per request. No system is perfectly secure; tell us immediately if you suspect your account is compromised.

8. Cookies

We use cookies necessary to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising cookies.

9. Changes

We will notify registered users of material changes to this policy.