Effective: January 1, 2025 · FundiNG is operated by Flinthub Digitals, Nigeria.
1. Information We Collect
Information you provide
- Account data: Name, phone number, email address, state/LGA, profile photo
- Professional data: Skills, portfolio, certifications, education, bank account details (account number and bank code for payouts)
- Identity verification: NIN or BVN number (used only for identity verification — not stored in plain text)
- Contract data: Job descriptions, bids, messages, milestones, reviews
- Payment data: Transaction amounts and references. Card data is processed directly by our payment partners (Squad, Paystack, Flutterwave) — we never store raw card numbers
Information collected automatically
- IP address, device type, browser, operating system
- Pages visited, search queries, time on site
- Approximate location (for near-me search features) — only with your permission
- Push notification tokens (for in-app notifications)
2. How We Use Your Information
- To create and maintain your account
- To match clients with professionals
- To process payments and escrow through our payment partners
- To verify identity and prevent fraud
- To send transactional notifications (contract updates, payment receipts)
- To improve our platform through analytics
- To comply with Nigerian law (NDPR, FCCPC, CBN regulations)
We do not sell your personal data. We do not use your data for third-party advertising.
3. Information Sharing
We share limited information with:
- Other users: Your public profile (name, skills, rating, reviews) is visible to all users. Your phone number and bank details are never publicly displayed.
- Payment processors: Squad, Paystack, Flutterwave — for processing transactions. Subject to their own privacy policies.
- Identity verification: NIN/BVN numbers are verified against NIMC or BVN databases through compliant APIs and not stored beyond verification.
- Law enforcement: When required by valid Nigerian legal process.
4. Data Security
- All data transmitted using TLS 1.2+ encryption (HTTPS)
- Passwords hashed with bcrypt (never stored in plain text)
- API keys and secrets stored in environment variables, never in code
- Database encrypted at rest
- Webhook signatures verified with HMAC-SHA256
- Rate limiting on all authentication endpoints to prevent brute-force attacks
- Bank account numbers stored encrypted
- Regular security audits of our codebase
5. Your Rights (NDPR)
Under Nigeria's Data Protection Regulation (NDPR), you have the right to:
- Access a copy of your personal data
- Correct inaccurate data
- Request deletion of your account and data
- Withdraw consent for optional data processing
- Lodge a complaint with the National Information Technology Development Agency (NITDA)
To exercise these rights, email: privacy@fundi.flinthub.com.ng
6. Cookies
We use only essential cookies and localStorage for:
- Keeping you logged in (auth token)
- Saving your preferences (saved pros, search history)
- Analytics (anonymised, no personal identifiers)
We do not use advertising cookies or third-party tracking pixels.
7. NDPR Compliance
FundiNG complies with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023. We have appointed a Data Protection Officer. Our lawful basis for processing is contract performance, legitimate interest, and consent.
8. Children's Privacy
FundiNG is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.
Data Controller: Flinthub Digitals
Email: privacy@fundi.flinthub.com.ng
Address: Nigeria
For urgent security issues: security@fundi.flinthub.com.ng