Privacy Policy — Servix Arena

1. Introduction

Servix Arena ("we", "us", "our") operates a service marketplace at service-connect.ng. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform. By using Servix Arena, you agree to the terms of this Privacy Policy.

2. Information We Collect

Account information: When you register, we collect your full name, email address, phone number, and password (stored as a one-way hash).

Provider profile information: Service providers supply business name, category, description, location (state, LGA, city, address), hourly rate, and availability. This information is publicly visible on their profile.

Booking data: We store details of every booking including job description, location, dates, and payment amounts.

Payment information: Payment processing is handled by Paystack. We store transaction reference numbers and amounts, but never your card details or bank credentials.

Communications: Messages sent through our in-app chat are stored to enable the service and for dispute resolution purposes.

Usage data: We collect standard web analytics including pages visited, search queries, and feature interactions to improve the platform.

3. How We Use Your Information

To create and maintain your account
To facilitate bookings between customers and service providers
To process payments and payouts
To send booking confirmations, status updates, and receipts
To verify the identity and credentials of service providers
To investigate disputes and enforce our Terms of Service
To send service-related communications (not marketing unless you opt in)
To improve search ranking, recommendations, and overall platform quality

4. Sharing Your Information

We do not sell your personal information. We share data only in the following circumstances:

Between parties in a booking: When a booking is confirmed, the customer and provider can see each other's name, phone number, and location necessary to complete the job.

Service providers (third-party tools): We use Paystack (payment processing) and cloud infrastructure providers to operate the platform. These parties access data only as necessary to provide their services.

Legal requirements: We will disclose information when required by Nigerian law or a valid court order.

5. Data Retention

We retain account data for as long as your account is active. Booking records are retained for 7 years for tax and audit compliance. You may request deletion of your account and associated personal data by emailing privacy@service-connect.ng. Note that we may retain certain records as required by Nigerian financial and tax regulations.

6. Your Rights

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and personal data
Opt out of marketing communications at any time
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, email us at privacy@service-connect.ng.

7. Security

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, JWT-based authentication with short-lived access tokens, and HTTPOnly cookies for refresh tokens. However, no system is completely secure. We encourage you to use a strong, unique password and to report any suspected security issues to security@service-connect.ng immediately.

8. Changes to This Policy

We may update this Privacy Policy. When we do, we will update the "Last updated" date above and notify registered users via email of material changes. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

9. Contact

For any privacy-related questions, contact us at: privacy@service-connect.ng