Privacy policy

Last updated: 17 October 2026

This policy explains how [COMPANY NAME] (“askJBoss”, “we”) collects and uses your personal data on the askJBoss website and apps, in line with the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC).

1. Data we collect

Account data: name, username, email, phone number (optional), password (stored encrypted), your role (for example artist or business), state, LGA, city and hometown.
Google or Facebook sign-in: if you choose “Continue with Google” or “Continue with Facebook”, we receive your name, email address and profile photo from that service, and an ID that links your askJBoss account to it. We never receive your Google or Facebook password.
Content you post: updates, photos, videos, music and audio, comments, answers, polls, messages, items for sale, business listings, reviews and seller ratings, and CVs you upload when applying for jobs.
Marketplace data: items you sell (price, condition, phone or WhatsApp number you add), whether an item is sold, ratings you give and receive, and saved searches you create for Marketplace alerts.
Business data: business name, address, contacts, opening hours, products, services and bookings.
Payment data: wallet transactions, top-ups, tips, promotions, adverts, purchases and withdrawals. Card payments are handled by Paystack — we never see or store your full card number. For withdrawals we store your bank name, account number and account name.
Location:
- Approximate location from your internet address: when you first visit without choosing a town, we use your IP address to guess your nearest town in Nigeria so we can show local updates. We keep only the town (in a cookie on your device), not your IP address.
- Exact location: only if you tap “Use my exact location” and allow it in your browser or phone. It is used once to find your nearest town and is not stored.
- The town, LGA and state you choose for your account or your posts.
Usage data: pages you open, how many times a post is viewed (counted per day, without saying who viewed it), the device and browser you use, and push-notification tokens if you turn notifications on.
“Who’s online”: to show how many members and guests are online, we note that a browser was active in the last few minutes, using a scrambled (hashed) version of your session — not your name or IP address. These records are deleted within about two hours.
Verification data (only if you choose to get verified): a photo of an ID document and a selfie. These are kept privately and deleted 30 days after your request is decided.

2. Why we use it (lawful basis)

To provide the service (contract): your account, local feed, posts, wallet, chats, Marketplace, bookings, job applications, alerts and notifications you ask for.
To keep askJBoss safe (legitimate interest and legal obligation): reviewing posts, fighting scams and fake accounts, handling reports, and answering lawful requests from authorities.
To show you local and relevant content (legitimate interest): your approximate town, popular posts and post statistics. You can change your town at any time.
Emails and notifications (consent): daily digests, alerts and push notifications — you can switch them off at any time in your settings or device.
Payments, tax and fraud checks (legal obligation).

3. What other people can see

Your public profile (name, username, photo, town, bio, posts, followers, badges and seller rating) and everything you post publicly can be seen by anyone. Messages are seen only by you and the person you send them to. Job applications and CVs go only to the employer. Post statistics are shown only to the author and our team.

4. Who we share data with

We do not sell your personal data. We share only what is needed with:

Paystack — payments and payouts;
Google and Facebook — only if you choose to sign in with them;
Location lookup services (ipwho.is, ipapi.co) — your IP address, to find your approximate town;
Our hosting, email, video and notification providers — for example our web host, email delivery service, Bunny (video streaming) and Expo/Firebase (app notifications);
Google Analytics and Google AdSense — only if switched on, to measure visits and show adverts (see our Cookie policy);
Authorities — when Nigerian law requires it.

Some of these providers store data outside Nigeria. Where they do, we rely on the safeguards allowed under the NDPA.

5. How long we keep it

Account data: while your account is active. When you delete your account (Me → Delete my account), your profile, posts, comments, messages and wallet history are removed. We may keep a minimal record of payments where Nigerian tax or anti-fraud law requires it.
Posts: until you delete them; ordinary posts may also be removed automatically after a period set by us.
Payment records: for as long as Nigerian tax and anti-fraud law requires while your account exists.
ID verification files: deleted 30 days after your request is decided.
“Who’s online” records: about two hours. Daily view counts: kept as totals for post statistics.

6. Your rights

Under the NDPA you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw your consent. Many of these you can do yourself in your account. Otherwise email support@askjboss.com — we reply within 30 days. You may also complain to the Nigeria Data Protection Commission.

7. Security

We use encrypted connections (HTTPS), encrypted passwords and secret keys, private storage for CVs and ID documents, and access controls for our staff. No system is perfect — tell us immediately if you think your account is at risk.

8. Children

askJBoss is not for children under 13. Users under 18 need a parent’s or guardian’s permission and may not use the wallet, payments, the Marketplace or withdrawals.

9. Changes

We will update this page when our practices change and tell you about important changes.

10. Contact

Data Protection Officer: [NAME], [COMPANY NAME], [ADDRESS] — support@askjboss.com.