Last updated: 29 July 2026
This policy explains what information iSabi ("we", "the Platform") collects, why, and your choices — in line with the Nigeria Data Protection Act 2023 (NDPA).
Account data: email address, username, password (stored as a secure hash — we never see or store your actual password), and your chosen account type (freelancer or client).
Profile data you choose to publish: name, professional title, bio, skills, location, photo, links, projects, and service listings. This is public by design — the whole point of a portfolio is to be seen.
Marketplace activity: jobs you post, applications, orders, reviews, and messages sent through the Platform inbox.
Technical data: anonymised view counts on profiles, services, and jobs; a privacy-light visitor hash (derived from IP and browser, not stored raw) used to prevent duplicate skill endorsements; and standard server logs kept by our hosting provider.
We do not collect payment card details or bank credentials (payments happen off-platform), government ID, or precise device location. We do not sell your personal data to anyone.
To operate the Platform: displaying your public profile, matching jobs and services with searches, delivering messages, sending transactional emails (verification, password resets, order and application notifications), showing you analytics about your own profile, and keeping the Platform safe from spam and abuse.
We use a session cookie to keep you signed in and your browser's local storage to remember your light/dark theme choice. We do not run third-party advertising or tracking cookies.
Transactional emails (verification, resets, order updates, message alerts) are sent through our email delivery provider. Newsletter emails are only sent if you subscribed, and every one includes a way to unsubscribe.
Your portfolio, service listings, job posts, and reviews are public. Your email address is never shown publicly. Messages are visible only to the two participants (and to us where necessary for abuse investigation). Contact-form messages go to the profile owner you contacted.
You can access and edit your profile data anytime from your dashboard. You may request a copy of your data, correction of inaccuracies, or deletion of your account and associated personal data by emailing us. We will respond within a reasonable period as required by the NDPA. Note that content inherently tied to other users (such as reviews you left on completed orders) may be retained in anonymised form.
Passwords are hashed with bcrypt. Access to the database is restricted. We keep account data for as long as your account exists; server logs rotate on our hosting provider's schedule. No system is perfectly secure — if we become aware of a breach affecting your personal data, we will notify affected users and the Nigeria Data Protection Commission as required.
iSabi is not intended for anyone under 18. If we learn an account belongs to a minor, we will remove it.
We will announce material changes to this policy on the Platform. Questions or data requests: hello@isabi.com.ng.