Privacy policy.

01What we collect

Account data

Your email address, phone number, name, a hashed password, your chosen role (requester, agent or both), and your profile: bio, skills, work photos, personal photos, portfolio links and average response time if you are an agent.

Verification data

Phone verification results. Identity verification is performed by our identity provider, SSYNC ID, which processes your government-issued identity document and National Identification Number (NIN) and a live selfie, and returns the outcome to us. We do not receive or store your NIN. We store the verification result, the reference for the check, and, where the check succeeds, the selfie as your profile photo. For agents, we collect a proof-of-address document (utility bill, bank statement or tenancy document dated within the last three months), the geocoded address, and, optionally, a location reading used to confirm you are within 150 metres of that address.

Location data

The address of each Request and, where you use the map, the coordinates of the address you choose. If you are an agent, your device location while you are online, refreshed so that requesters within 10 kilometres can see you and so that you can see gigs within your chosen radius (15 kilometres by default). Location is not collected while you are offline.

Request and job data

Everything you put in a Request: category, description, voice notes, budget or offer, schedule, parcel type, size and declared value, receiver name and phone, property type, listing link, property photo and checklist. Everything that happens on the Request: offers and counter-offers, the locked price, each of the four steps with its timestamp, proof photos, checklist answers, live-view snapshots and session details, ratings, reviews, tips and disputes with their evidence.

Communications

Messages, images, video and voice notes in Request chats and in your support conversation, and the notifications we send you.

Financial data

Wallet balances, funding and withdrawal instructions, transaction history, receipts, payment-processor references, and the bank account details you provide for withdrawals. We do not store card numbers.

Device and usage data

Device type and operating system, app version, push notification tokens, IP address, log data, crash reports, and how you use the app, such as which screens you open. On the website, standard server logs.

02How we use it

• To run the Service: create and match Requests, show nearby agents, hold and release money, produce receipts, send notifications, and keep the record of each Request.
• To verify identity and address, so that every person on the Service is who they say they are, and to display trust levels, ratings and completed-job counts.
• To keep people safe and the Service honest: to review disputes, investigate suspected breaches of our Terms, detect fraud and abuse, and enforce removal.
• To transcribe and summarise voice notes so a short summary can be shown on a Request.
• To provide support and respond to your messages.
• To comply with legal obligations, including financial record-keeping, tax and lawful requests from authorities.
• To improve the Service, understand how it is used, and fix problems. We use aggregated or de-identified data for this wherever possible.
• To send you service messages about your account and Requests. We will only send marketing with your consent, and you can withdraw it at any time.

03Our lawful bases under the NDPA

• Performance of a contract: most processing is necessary to provide the Service you have signed up for, including verification, matching, escrow and the record of each Request.
• Consent: precise location while you are online as an agent, push notifications, and marketing. You can withdraw consent in your device settings or in the app; some features will then stop working.
• Legitimate interests: keeping the Service secure, preventing fraud, resolving disputes, and improving the Service, balanced against your rights.
• Legal obligation: retaining financial records, responding to lawful requests, and meeting our obligations under the NDPA and financial regulation.

04Who we share it with

Other users

When you send a Request, agents you send it to, and nearby agents if it is open, see your first name, rating, the category and details of the Request, and the general area of the address. The exact address is shared with an agent only when they accept the locked price. When an agent accepts, you see their name, profile photo, trust level, rating, reviews, completed jobs and skills. Parcel receivers' name and phone are shared with the agent for delivery. Chat, proof and ratings are visible to the parties to the Request.

Service providers

We share data with providers who process it on our behalf and under contract, only as needed for the purpose described:

• SSYNC ID, for phone, identity and liveness verification. SSYNC ID processes your identity document, NIN and selfie and is responsible for that processing under its own policy.
• Paystack, for wallet funding and bank transfers, which receives your email, transfer details and bank account details for withdrawals.
• Amazon Web Services, for storing media and documents, served through short-lived signed links.
• OpenAI, for transcribing and summarising voice notes. Recordings are sent for processing and the result is returned to us.
• Mailgun, for email delivery, and Expo, for push notifications.
• Google, for address search and map display.

Partners

If you use SendMe through a Partner's product, the Partner receives the status of Requests it created and may read their record. Partners do not receive your NIN, identity images, escrow controls or, for agents, your home address.

Legal and corporate

We may disclose data to comply with law, a court order or a lawful request from a regulator or law-enforcement body, to protect the rights, safety or property of users or Boldswitch, or as part of a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different policy.

We do not sell personal data.

05Automated processing

Voice notes are transcribed and summarised automatically so that a one-sentence summary can appear on the Request. The summary is a convenience; the original recording is what the other party hears. You can type instead of recording.

Agents are ranked and matched automatically by distance to the address, whether they are online, their verification status and, for parcels, whether they are heading toward the drop-off. No decision that has a legal or similarly significant effect on you is made solely by automated means; disputes, address verification and account removal are reviewed by people.

06How long we keep it

• Request media, including proof photos, chat attachments and live-view snapshots: 365 days from upload, after which it is deleted from storage.
• The record of a Request (its steps, prices, timestamps, checklist answers, ratings and dispute outcomes) and wallet transactions and receipts: for as long as your account is active and thereafter for the period required by Nigerian financial and tax record-keeping law, currently at least six years.
• Verification results and references: for the life of your account and for a period afterwards sufficient to prevent re-registration by removed users and to meet legal obligations. Address documents are kept until reviewed and then for the same period as verification results.
• Account and profile data: while your account is active. When you close your account we delete or anonymise it within 90 days, except data we must keep under the bullets above or to resolve an open dispute.
• Location readings for agents: only the latest reading is kept for matching; readings are not stored as a history beyond what is needed to operate the Service and investigate disputes.
• Logs and crash reports: up to 12 months.

07How we protect it

Data is encrypted in transit. Media and documents are uploaded through short-lived presigned links and served through signed links that expire after ten minutes. We do not store your NIN or card numbers. Wallet operations are recorded atomically with idempotency keys so that money cannot be double-counted. Access to personal data within Boldswitch is limited to staff who need it, and support staff can see a Request's record only when a dispute or support case requires it.

No system is perfectly secure. If we become aware of a breach that is likely to affect your rights, we will notify the Nigeria Data Protection Commission and, where required, you, within the periods the NDPA sets.

08Your rights

Under the NDPA you have the right to:

• Access the personal data we hold about you, and receive a copy in a portable format.
• Have inaccurate data corrected. Much of your profile you can edit yourself in the app.
• Have your data deleted, subject to the retention we are required to keep.
• Restrict or object to processing based on our legitimate interests.
• Withdraw consent where processing is based on it, without affecting processing before withdrawal.
• Not be subject to a decision based solely on automated processing that produces a legal or similarly significant effect.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these, use the account settings in the app or write to privacy@sendme.ng. We will respond within the time the NDPA allows and may need to verify your identity first.

09Children

The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

10This website

The SendMe website is informational. It sets no advertising or tracking cookies. It loads fonts from Google Fonts, which receives your IP address in the process. Server logs are kept for security and are not combined with app data.

11International transfers

Some of our service providers store or process data outside Nigeria, including in the United States and the European Union. Where they do, we rely on contractual safeguards and the provider's own certifications so that your data receives protection consistent with the NDPA.

12Changes to this policy

We may update this policy as the Service changes. Material changes will be notified in the app or by email before they take effect. The version and effective date appear at the top of this page.