Privacy Policy

SkillBridge Technologies Ltd. ("SkillBridge", "we", "our", "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at skillbridge.ng and our related mobile applications (collectively, the "Platform").

This Policy applies to all users of the Platform — clients who book services and workers who provide them. By using our Platform, you consent to the data practices described in this Policy. If you do not agree with these practices, please do not use the Platform.

We are registered with the Nigeria Data Protection Commission (NDPC) and comply with the Nigeria Data Protection Act 2023 (NDPA) and all applicable data protection legislation.

We collect several categories of information to provide and improve our services:

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, password, and profile photo when you register
• Profile Data: Skills, experience, location, bio, and service rates (for Workers); address and service preferences (for Clients)
• Identity Verification: Government-issued ID (NIN, Driver's Licence, International Passport) and a selfie photo for Worker verification
• Financial Information: Bank account name, number, and bank name for withdrawal processing. We do not store full card details
• Job Information: Service requests, job descriptions, addresses, and scheduling preferences
• Communications: Messages sent through the Platform chat system, dispute descriptions, and support tickets
• Reviews and Ratings: Feedback you submit about Workers or jobs

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and actions taken on the Platform
• Device Information: Device type, operating system, browser type, and unique device identifiers
• Location Data: Approximate location (city/region) based on IP address; precise location only if you grant permission
• Log Data: IP address, access timestamps, error logs, and referring URLs

2.3 Information from Third Parties

• Payment processors (transaction status and references — not full card data)
• Identity verification services (verification status only)
• Social sign-in providers if you choose to register via Google or similar

We use your information for the following purposes, always with a lawful basis under the NDPA:

• Platform Operation: To create and manage your account, process bookings, and facilitate service delivery
• Payments: To process transactions, hold escrow funds, release payments, and process withdrawals
• Identity Verification: To verify Worker identities and ensure platform safety
• Communication: To send booking confirmations, notifications, receipts, and platform updates
• Safety & Trust: To detect fraud, investigate disputes, enforce our Terms of Service, and protect users
• Customer Support: To respond to your queries, complaints, and support tickets
• Platform Improvement: To analyse usage patterns, fix bugs, and develop new features
• Legal Compliance: To comply with applicable Nigerian laws and regulatory requirements
• Marketing: To send relevant promotions and updates — only with your consent, and you can opt out at any time

We do not sell your personal data. We share information only in the following circumstances:

• Between Users: When a job is booked, relevant profile information (name, photo, rating) is shared between the Client and Worker to facilitate the service
• Payment Processors: We share necessary transaction data with payment partners (e.g., Paystack, Flutterwave) to process payments securely
• Identity Verification Partners: Worker ID documents are shared with our verification service provider solely for the purpose of identity checks
• Cloud Infrastructure: Our platform runs on Google Firebase (Google Cloud), which processes data on our behalf under strict data processing agreements
• Legal Requirements: We may disclose information to comply with a court order, legal process, or request from a Nigerian law enforcement or regulatory authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred — you will be notified in advance
• Safety: We may share information where we believe in good faith that disclosure is necessary to prevent imminent harm or illegal activity

All third-party service providers are contractually required to handle your data securely and only for the purposes we specify.

Your data is stored on Google Firebase servers, which are ISO 27001 certified and comply with international security standards. We implement multiple layers of security including:

• End-to-end encryption for all data in transit (TLS/SSL)
• Encryption at rest for sensitive data including payment information and ID documents
• Role-based access controls — only authorised personnel can access user data
• Regular security audits and penetration testing
• Firebase Security Rules restricting data access to authorised users only
• Two-factor authentication for admin accounts

While we take reasonable measures to protect your data, no system is completely immune to security breaches. In the event of a data breach that poses a risk to your rights, we will notify affected users and the NDPC within 72 hours as required by law.

We use cookies and similar tracking technologies to improve your experience on the Platform. Types of cookies we use:

• Essential Cookies: Required for the Platform to function — authentication, session management, and security
• Functional Cookies: Remember your preferences such as language and notification settings
• Analytics Cookies: Help us understand how users interact with the Platform (via Google Analytics or similar). Data is anonymised where possible
• Marketing Cookies: Only used with your consent to show relevant promotions

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We honour "Do Not Track" browser signals where technically feasible.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account
• Closed Accounts: Core account data is retained for 5 years after closure for legal and dispute purposes
• Transaction Records: Payment and booking records are kept for 7 years to comply with Nigerian financial regulations
• Identity Documents: Worker ID documents are retained for 2 years after account closure
• Chat Messages: Platform messages are retained for 2 years
• Analytics Data: Anonymised usage data may be retained indefinitely

When data is no longer required, it is securely deleted or anonymised.

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention obligations)
• Right to Restriction: Request that we limit how we process your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Withdraw consent for processing activities that rely on consent

To exercise any of these rights, contact us at privacy@skillbridge.ng. We will respond within 30 days. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

SkillBridge is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@skillbridge.ng and we will delete that information promptly.

Parents or guardians who believe their child's data has been collected should contact us without delay.

Our Platform integrates with the following third-party services, each with their own privacy policies:

• Google Firebase: Database, authentication, and cloud infrastructure — Firebase Privacy
• Paystack / Flutterwave: Payment processing — subject to their respective privacy policies
• Google Analytics: Platform usage analytics (anonymised)

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies. Links to external websites from our Platform do not constitute endorsement of their privacy practices.

Your data is primarily stored and processed in data centres within or accessible from Nigeria via Google Cloud's infrastructure. Some of our third-party service providers may process data outside Nigeria.

When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements that meet the standards of the Nigeria Data Protection Act 2023.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email or in-app notification at least 14 days before changes take effect
• For significant changes, request renewed consent where required by law

We encourage you to review this Policy periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to our Data Protection Officer: