Privacy Policy

1. Who we are

SabiJorb is an online job marketplace for Nigeria that connects job seekers and employers directly. SabiJorb (“we”, “us”) is the controller of the personal data described here. A registered legal entity and data-protection contact for SabiJorb have not yet been finalised; both will be stated here before public launch.

2. Personal data we collect

We collect the following, depending on how you use the platform:

• Account data: your name, email address, password (stored only as a hash by our authentication provider), and whether you use SabiJorb to find work, to hire, or both.
• Contact information: a phone number and other contact details you add to your profile or choose to share inside a conversation (for example a WhatsApp number or alternative email).
• Job seeker profile data: your CV / resume files and the information in them, work experience, education, skills, location, salary expectations, availability, and whether your profile is discoverable by employers.
• Employer and company data: your job title and work email, and your company’s name, description, industry, size, website, location, and logo.
• Verification documents: business registration or licence documents that employers upload so we can verify the company before it can post jobs.
• Job and application activity: jobs you post, jobs you save, conversations and messages between job seekers and employers, interview proposals, and reports you submit about a conversation.
• Interaction data: a count of how many times your public job-seeker profile has been viewed by employers, and the jobs you save or mark as not interested — used together with the preferences you set to order search results and recommendations.
• Technical and security data: your IP address and request metadata, used for rate limiting, abuse prevention, and the bot-protection challenge on sign-up and sign-in. We do not use third-party advertising or analytics trackers.

3. Why we process your data and our legal bases

• To provide the marketplace — creating your account, showing job listings, letting job seekers and employers message each other, arranging interviews, and processing paid job promotions. Processing here is necessary to perform our agreement with you.
• To verify employers — reviewing uploaded business documents so job seekers can trust who they are talking to. This is necessary for the service and in the legitimate interest of preventing fraud.
• To keep the platform safe — rate limiting, bot protection, investigating reports, and suspending accounts that break the Terms. This is in our legitimate interest and that of other users.
• To send service communications — email about conversations, interview reminders, verification decisions, and account matters. You can adjust notification preferences in your account settings; some essential account emails cannot be turned off.
• To meet legal obligations — for example retaining transaction records for paid promotions.

We rely on consent for your acceptance of these terms at sign-up and, where it applies, for making your job-seeker profile discoverable by employers. You can withdraw discoverability at any time in your profile settings.

4. How your data is shared

SabiJorb is a marketplace, so some information is shared with other users by design:

• Approved companies’ public details and their job listings are visible to everyone.
• If you make your job-seeker profile discoverable, a limited profile card (not your CV files or contact details) can be seen by verified employers searching for candidates.
• When you start or reply to a conversation, the other party sees your name and the messages, CV, or contact details you choose to share in that thread.
• Platform administrators can access account, company, conversation, and report data as needed to review verifications, investigate reports, and operate the service.

We do not sell your personal data. We do not share it with advertisers.

5. Service providers (sub-processors)

We use the following providers to run SabiJorb. They process personal data only on our instructions and may store or process it outside Nigeria:

• Supabase — Database, authentication, and file storage hosting.
• Vercel — Application hosting and content delivery.
• Resend — Transactional and notification email delivery.
• Paystack — Payment processing for paid job promotions.
• Cloudflare — Turnstile bot-protection challenge on sign-up and sign-in.
• Google — Optional sign-in with your Google account.

Where data is transferred outside Nigeria we rely on the transfer mechanisms permitted under the Nigeria Data Protection Act, 2023. This list will be kept current as providers change.

6. Cookies and similar technologies

Cookies are small text files that a website stores in your browser. SabiJorb sets only its own (first-party) cookies:

• Sign-in cookies. When you sign in, our authentication provider sets cookies that keep you signed in as you move around the site. They are necessary for signed-in features to work and can last up to about 13 months unless you sign out or clear them.
• Short-lived security cookies. During Google sign-in, password reset, and account-deletion confirmation for accounts that sign in with Google only, we set brief cookies that carry a step of that process (for example, that you accepted the Terms, or that you followed a valid reset link). They are necessary to complete and secure those actions and expire within minutes.
• Language preference cookie (sj_lang). When you choose a language, we remember your choice in a cookie named sj_lang for up to one year, so the site opens in your language. If you are signed in, we also save your choice to your account, and the cookie may be set on a new device to match it. This cookie is a preference; SabiJorb works without it, and if it is missing we use your account setting, then your browser’s language, then English.

SabiJorb does not currently use advertising cookies, analytics cookies, or other tracking technologies, and does not use your browser’s local storage, session storage, or IndexedDB for its own features. If that changes, we will update this policy first.

Some services you choose to use are run by third parties. If you sign in with Google or pay through Paystack, you are redirected to their pages, where they may set their own cookies under their own privacy and cookie policies, which we do not control. You can delete or block cookies in your browser settings, but blocking sign-in cookies will stop you from staying signed in.

7. How long we keep your data

We keep personal data for as long as your account is active and for as long as needed for the purposes above. In general:

• Profile, CV, and company data are kept while your account exists and removed when you delete your account.
• Conversations and messages are kept while either participant’s account exists; when one party deletes their account, their identity is removed from the thread but the messages the other party received remain visible to that other party.
• Verification documents are kept while the company account exists.
• Records needed for legal, accounting, or fraud-prevention reasons (such as payment records for promotions) may be kept longer.

8. Account deletion

You can permanently delete your account from your account settings. This removes your profile, CV and other uploaded files, job-seeker and employer profiles, saved jobs, and company data. Your messages to other people are not deleted from their view, but your name is removed and the thread is shown as being with a “deleted user”. Deletion is immediate and cannot be undone.

9. Your rights

Subject to the Nigeria Data Protection Act, 2023, you have the right to access the personal data we hold about you, to ask us to correct it, to ask us to delete it, to object to or restrict certain processing, and to withdraw consent where we rely on it. You can exercise many of these directly in the app (edit your profile, change notification preferences, turn off discoverability, delete your account). For anything else, or to raise a concern, contact us at [privacy contact — configure a monitored inbox before launch]. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

10. How we protect your data

Access to personal data is controlled by row-level database security so that users can reach only their own records and the data the marketplace is designed to show. Uploaded files (CVs, logos, verification documents) are kept in private storage and served only through short-lived links to authorised users. Passwords are handled only by our authentication provider and stored as hashes. We apply rate limiting and bot protection to sensitive actions and transmit data over encrypted connections. No system is perfectly secure, but we work to protect your data and to limit who can see it.

11. Data breaches

If a personal-data breach occurs that is likely to affect your rights, we will notify the Nigeria Data Protection Commission and affected users without undue delay and in line with the timeframes in the Nigeria Data Protection Act, 2023, and describe what happened and what we are doing about it.

12. Children

SabiJorb is not intended for anyone under 18. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy as the service develops or the law changes. If we make a material change we will update the effective date and version above and, where appropriate, notify you or ask you to accept the updated terms.

14. Contact

Questions about this policy or your data: [privacy contact — configure a monitored inbox before launch]. A postal address and the name of the responsible entity will be added before public launch.