Privacy Policy

1. Who we are

DoneSharp operates the DoneSharp marketplace, which connects people in Nigeria with independent artisans and errand runners. For the purposes of the Nigeria Data Protection Act 2023 ("NDPA"), DoneSharp is the data controller for the personal data described in this policy. You can reach us about anything in this policy at support@donesharp.com.

2. Information you give us

When you create an account

• Your full name and, if you choose, a preferred name to show others.
• Your phone number and your email address. We send a code to your email to confirm it is yours before your account is created, and you can sign in with either.
• Your password. It is stored in a scrambled (hashed) form, so nobody at DoneSharp can read it.
• Your state and neighbourhood, and a profile photo if you add one.

If you register as an artisan or company

• Your business name, bio, service categories, years of experience, hourly rate, team size, business address, office locations and the contact phone numbers you want customers to see.
• For companies, your CAC registration number, a copy of your CAC certificate and your Tax Identification Number (TIN), which we use to verify your business. Your TIN and certificate are never shown to other members.
• Photos and videos you add to your portfolio.

When you use DoneSharp

• Bookings: the job you need done, the address and timing, the price the artisan records, and whether payment was reported and confirmed.
• Errands: the task, its location, the reward, and who applied to run it.
• The messages and photos you send in chat.
• Reviews and ratings you give and receive.
• DoneSharp Points you earn, send, receive or spend.
• Commission owed and paid, if you are an artisan.
• If you ask to advertise: your business name, banner image, website link, chosen pages and dates, any Points you want to apply, and a contact email.
• Members you block, and reports you make about other members (the member you report is not told who reported them).
• Anything you tell us when you report a problem or contact support.

3. Information we collect automatically

• Your location, only if you allow it. The app can use your phone's location to show artisans near you and to fill in your area. This is worked out on your phone using its own location service. We do not store your GPS coordinates on our servers. You can switch location access off in your phone settings at any time and choose your area by hand.
• A notification token. If you allow notifications, we store a token for your device so we can alert you about bookings, errands and messages.
• Crash and error reports. If the app crashes or hits an error, technical details are sent to us so we can fix it: what went wrong and where in the app, the app version, your phone model and operating system, and your DoneSharp account number (an internal ID, never your name, phone number or email). For a small share of sessions we also measure how long screens take to load.
• Security records. When someone requests a sign-up or password-reset code, we record the email address or phone number, the time and the network (IP) address, so we can limit how often codes are sent and stop abuse.
• Our website. donesharp.com does not use advertising or analytics cookies. Like any website, our hosting provider keeps standard server logs, such as IP addresses and browser type, for security and to keep the site running.

4. How we use your information, and why we're allowed to

The NDPA requires us to have a lawful reason for each use of your data. Here is what we do and the reason that applies.

• To provide the Service you signed up for (performing our contract with you): creating and securing your account, showing artisans and errands near you, making bookings, applications and chat work, sending notifications about them, running DoneSharp Points, reviewing ad requests, confirming your email address, and resetting your password by email.
• To keep DoneSharp safe and fair (our legitimate interests): verifying artisans and companies, showing trust signals such as ratings and completed-job counts, tracking commission, preventing fraud, spam and abuse, investigating reports, and enforcing our Terms. If our team suspends an account, it can no longer be used to sign in, book, post or apply for errands, or send messages, and an artisan listing is hidden; booking requests and open errands still waiting are closed so the other members aren't left waiting. We keep a record of the suspension and the reason, which only our team can see.
• To improve the app (our legitimate interests): fixing crashes and bugs and understanding which features need work.
• With your consent: using your phone's location and sending push notifications. You can withdraw consent at any time in your phone settings.
• To meet our legal obligations: keeping records the law requires and responding to lawful requests from authorities.

We do not use your data for advertising profiles, and we do not sell it.

5. Automatic decisions

One decision is made automatically. If an artisan's commission is not paid by its due time, the account is suspended from accepting new bookings until it is paid. If you think this has happened to you by mistake, contact us at support@donesharp.com and a member of our team will review it. Any other suspension is decided by a person on our team, never automatically.

6. Who can see your information

Other DoneSharp members

• Artisan and company profiles can be seen by any signed-in member: business details, categories, service areas, the contact numbers you choose to show, your portfolio, reviews and trust signals.
• Open errands, including the task, area, address and reward, can be seen by signed-in members looking for errands, along with the poster's name and photo.
• Reviewsare shown with the reviewer's name and photo.
• People you deal with can see your name, photo, area and runner rating. That means the other side of a booking, the poster or runner of an errand, the poster of an errand you apply for, and anyone you exchange Points with. Other members cannot browse your profile.
• Never shown to other members: your phone number, email address, location, notification token and DoneSharp Points balance. Artisans and companies choose which contact number customers see on their profile.
• Chat is visible only to the two people in the conversation. Our support team can read a conversation when they need to handle a report, a payment dispute or a support request.

Our team

A small number of DoneSharp staff can access account data to verify artisans, handle support and investigate reports. What each person can see depends on their role, and actions they take on accounts are logged.

Companies that help us run DoneSharp

We use trusted providers who process data on our behalf and only as we instruct:

• Supabase: our database, sign-in, file storage and server functions. Our data is hosted in the United States.
• Vercel: hosting for our website.
• Expo, with Apple and Google: delivering push notifications to your phone.
• Resend: sending the codes we email you to confirm your email address and reset your password.
• Termii: sending password-reset codes by SMS to members using older versions of the app. Signing in with your phone number does not send any SMS.
• Paystack: processing artisans' commission payments. We never see or store card details.
• Sentry: crash and error reporting, as described in section 3. It is not used for advertising or to follow you across other apps.

Other cases

We may share information if the law requires it, to respond to a valid request from a court or authority, to protect someone's safety, or to investigate fraud. If DoneSharp is involved in a merger, acquisition or sale, your data may be transferred as part of it, and this policy will continue to protect it.

7. Payments

Customers pay artisans directly for jobs, in cash or by transfer, outside the app. DoneSharp does not process or hold that money. We only record the price and whether payment was reported and confirmed. Artisans pay DoneSharp's commission through Paystack, which handles the card or bank details. We receive only the payment result.

8. Photos and files you upload

Chat photos can only be opened by the person who sent them and the other people in that conversation, through links that stop working after an hour. CAC certificates can only be opened by the company that uploaded them and our team.

Profile photos, portfolio photos and videos, and ad banners are meant to be seen by other members, so they are kept in storage that opens through long, hard-to-guess links. Anyone who is given such a link can open the file. Whatever you send, the other person can still save or screenshot it, so please only share images you are comfortable with them keeping.

9. Sending data outside Nigeria

Our servers are in the United States, so your data is transferred outside Nigeria. We only do this with providers that protect personal data to the standard the NDPA requires, and we rely on the safeguards the NDPA allows for such transfers.

10. How long we keep your data

• We keep your data for as long as your account is open.
• When you delete your account, we delete your profile and account data, and your bookings, chats, errands, applications, reviews and ad requests.
• DoneSharp Points transaction records are kept with your identity removed, so that other members' balances stay correct.
• Files you uploaded, such as photos, are not deleted automatically when you close your account. Email us and we will delete them.
• We keep records we are required to keep, such as commission and payment records, for as long as the law requires, and then delete them.
• Security records of code requests are deleted after 30 days, and unused sign-up and password-reset codes a day after they expire.
• Crash and error reports are kept by Sentry for a limited time (currently up to 90 days) and then deleted.
• Deleted data may stay in our encrypted backups for a short period until those backups are overwritten.

11. Your rights

Under the NDPA you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• ask us to restrict how we use your data, or object to how we use it;
• receive your data in a format you can take to another service;
• withdraw consent where we rely on it; and
• have an automatic decision reviewed by a person.

You can update most of your details yourself on your profile in the app, and you can delete your account from your profile at any time using Delete my account. For anything else, email support@donesharp.com. We may need to confirm your identity first, and we will respond within the time the law requires.

If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC). We would appreciate the chance to put things right first, so please contact us.

12. How we protect your data

Data is encrypted when it travels between your phone and our servers. Passwords are stored hashed. Our database only lets each member read and change what they are entitled to: other members never receive your phone number, email or balance, and private files open only for the people allowed to see them. Staff access is limited by role, and actions staff take on accounts are logged. No system is completely secure, so please use a strong password you don't use anywhere else, and never share your password or a reset code with anyone, including people who claim to work for DoneSharp.

If a data breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

13. Children

DoneSharp is only for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.

14. Changes to this policy

We may update this policy as DoneSharp changes. If we make a significant change, we will tell you in the app or by other reasonable means before it takes effect. The date at the top shows when it was last updated.

15. Contact us

Questions or requests about your personal data: support@donesharp.com. For help using the app, visit our Support page.