1. Introduction
Zeal-B, its affiliates, and subsidiaries ("we", "our", or "us") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access our website, mobile application, and related services (collectively, the "Platform").
By registering for or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, you should not use the Platform.
2. Information We Collect
We collect information you voluntarily provide, information automatically gathered when you use the Platform, and information from third-party sources. The categories of data we collect are outlined in detail below.
2.1 Account & Registration Data
When you create an account, we collect your full name, username, email address, phone number, and encrypted password (hashed using strong one-way encryption). We also record your account type/role and your preferred working mode (freelancer or buyer). A verification token is temporarily stored to confirm your email address and is cleared immediately after verification.
2.2 Profile Information
You may provide additional information to enrich your profile, including your professional title, biography, skills, availability, hourly rate, location, timezone, website URL, and links to social profiles such as LinkedIn, GitHub, or Dribbble. You may also include portfolio items, work experience, education history, certifications, and a profile avatar.
Platform metrics derived from your activity, such as completed jobs, total earnings, rating score, and review count, are included in your profile.
2.3 Identity Verification (KYC) Data
To comply with applicable laws and prevent fraud, we may require users to verify their identity before accessing certain features. This includes your legal name, date of birth, government-issued identification number, residential address, and a document image for verification.
2.4 Financial & Payment Data
When transacting on the Platform, we collect payment-related information such as your wallet balance, transaction history, deposit and withdrawal records, escrow holdings, and applicable fee records. Depending on the payment method, we may also collect card details (processed by PCI-compliant partners), bank account details, and billing address. Withdrawal requests may include full name, phone number, and bank details. We do not store full card numbers or CVC codes; these are handled directly by payment processors.
2.5 Communication Data
All messages, interview correspondence, support tickets, and dispute communications conducted through the Platform are collected to facilitate transactions, resolve disputes, and ensure safety. This includes message content, attachments, timestamps, and resolution details.
2.6 Platform Activity Data
We collect data about your activities, including job postings, proposals, contracts, milestone updates, time-tracking entries, reviews, ratings, and saved items. This information helps us operate the marketplace and improve user experience.
2.7 Tracking & Telemetry Data
To maintain system integrity and optimize operational performance, we securely manage the following categories of data, isolated into non-identifying tracking groups:
- Network Metrics: IP addresses captured automatically via system telemetry logs to ensure secure connectivity and prevent abuse.
- Device Properties: Static hardware configurations and unique device fingerprints utilized exclusively to maintain active session handshakes and recognize returning devices.
- Spatial Variables: Inferred region or location data parsed from operational API communication workflows to provide region-specific service optimization.
2.8 Social Login Data
If you sign in using Google or Facebook through Firebase Authentication, we receive your email address, display name, profile photo URL, and a Firebase-issued JWT. We do not receive your social media password. You may revoke access at any time through your social provider's settings.
3. Cookies & Tracking Technologies
We and our partners use cookies, local storage, and similar technologies to operate, secure, and improve the Platform. Essential cookies handle session management and security and cannot be disabled. We also use analytics tools to gather anonymised usage data that helps us improve performance and features. Session data may store theme preferences and authentication state.
You may control cookie preferences through your browser settings, but disabling essential cookies may limit certain Platform features. We do not currently respond to "Do Not Track" (DNT) signals.
4. How We Use Your Information
We use the information we collect to create and maintain accounts, process transactions, manage escrow, facilitate contracts, and enable core marketplace functionality. We also use it to provide personalised recommendations, deliver communications, detect and prevent fraud, comply with legal obligations, resolve disputes, and improve our services.
Communications include transactional emails, push notifications, in-app alerts, and, where you have opted in, marketing messages. You may manage your communication preferences in your account settings.
5. Legal Basis for Processing
If you are located in the European Economic Area or the United Kingdom, our processing is based on contractual necessity, legitimate interests, legal obligations, and consent. You may withdraw your consent at any time without affecting prior processing.
6. How We Share & Disclose Your Information
We do not sell your personal information. We share your data only in the circumstances described below and with parties bound by appropriate confidentiality obligations.
6.1 With Other Users
Your public profile and relevant contract details are visible to other users as needed to facilitate transactions. Proposal content, messages, reviews, and dispute communications are shared with the directly involved parties.
6.2 With Service Providers & Partners
We engage trusted service providers who handle payments (Stripe, Paystack, Flutterwave, PayPal), authentication (Firebase), email delivery (SMTP providers), real-time events, error tracking, and search indexing. They receive only the data necessary to perform their functions and are contractually required to protect it.
6.3 Legal & Regulatory Disclosures
We may disclose your information to comply with legal obligations, court orders, or governmental requests, or to protect our rights, property, or safety, or that of our users or the public.
6.4 Business Transfers
In the event of a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity. We will notify you of such a change through email and/or a prominent notice on the Platform.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, subject to legal requirements. Account data is retained for up to six years after account closure to meet financial record-keeping obligations. KYC documents are kept for the duration of your account and up to 90 days after closure. Transaction records are retained for seven years.
8. Data Security
We implement technical and organisational measures including TLS encryption in transit, AES-256 encryption at rest, bcrypt password hashing, rate limiting, anomaly detection, and controlled access to personal data. Despite these measures, no system is completely secure, and we cannot guarantee absolute security.
9. Your Rights & Choices
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, object to certain processing, or withdraw consent. You can update most profile details directly from your account settings. To exercise other rights, please contact us using the details below.
9.1 Access & Portability
You may request a copy of your personal data in a portable format by contacting our support team.
9.2 Rectification
You may correct inaccurate information most easily through your account settings. For other corrections, please contact support.
9.3 Rigorous Account Deletion
You may request account deletion through Settings → Delete Account. Upon request, we initiate a rigorous erasure sequence:
- Primary Table Purge: Core profile records are instantly deleted from production databases.
- Backup Cascade: User references are scrubbed across backups and temporary logs within an explicit timeline threshold.
- Third-Party Eviction: Programmatic data erasure requests are dispatched to our external analytics partners to ensure your data is removed from their systems.
Certain data, such as transaction records required by law, may be retained as specified in our retention policy.
9.4 Restriction & Objection
You may opt out of marketing emails at any time, disable push notifications in your device or browser settings, and opt out of Firebase Analytics through your device preferences.
9.5 Withdrawal of Consent
Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of prior processing.
9.6 How to Exercise Your Rights
Submit requests through the Platform's support system. We will respond within thirty days, or as required by applicable law. We may need to verify your identity before processing your request.
10. International Data Transfers
Your data may be transferred to, stored, and processed in countries outside your jurisdiction, including the United States and Nigeria. Where required, we implement appropriate safeguards such as Standard Contractual Clauses and Data Processing Agreements.
11. Children's Privacy
The Platform is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware of such collection, we will take steps to delete the data promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational needs. Material updates will be communicated through email and/or a prominent notice on the Platform. We encourage periodic review of this policy.
13. Contact Information
For questions, concerns, or requests regarding this Privacy Policy, please contact:
Data Protection Officer: privacy@zeal-b.com
Support Team: Available through the Platform's support ticketing system
We are committed to resolving complaints about our handling of personal data. If you remain unsatisfied, you may contact your local data protection authority.