Privacy Policy

Unikjob is operated by UNIK Technologies, based in Lagos, Nigeria. We are the data controller for the personal information described in this policy.

When you create an Unikjob account, we collect:

• Account info: your name, email, password (hashed), business name, and role
• Business data: the clients, jobs, quotes, invoices, photos, and messages you create in Unikjob
• Payment info: if you subscribe to a paid plan, payment data is collected and processed by Stripe (we don’t store full card numbers)
• Usage data: IP address, browser type, device info, and pages visited — used to operate the Service and diagnose issues

We use your data to:

• Provide the Service (run your account, send your quotes/invoices)
• Send transactional emails and notifications
• Improve the product (aggregate, anonymised usage analytics)
• Detect fraud, abuse, or security issues
• Comply with legal obligations

We do not sell your personal data or your customers’ data to third parties. We will not use your data to train AI models without your explicit consent.

We use a small set of vetted infrastructure providers to operate the Service. Each receives only the data needed to perform their function:

• Supabase (database hosting — EU region): stores your business data
• Vercel (web hosting): serves the application
• Stripe (subscription billing): processes payments from you to us
• Paystack & Flutterwave (end-client payments): process payments from your clients to you
• Brevo (transactional email): sends emails from Unikjob to you and your clients
• Meta Cloud API / 360dialog (WhatsApp): sends WhatsApp messages on your behalf

Each provider has their own privacy policy and is GDPR/NDPR- compliant. We share only what’s necessary to deliver the Service.

We retain your business data for as long as your account is active, plus a 30-day grace period after cancellation in case you change your mind. After that, data is permanently deleted within 90 days.

Financial records (invoices, payment receipts) may be retained longer where required by Nigerian tax law.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict processing
• Export your data in a portable format
• Lodge a complaint with the Nigeria Data Protection Bureau if you believe we’ve mishandled your data

To exercise any of these rights, contact us via the WhatsApp button in the footer.

We use a minimal set of cookies, all essential to running the Service:

• Session cookies (keep you logged in)
• Active organisation cookie (remembers which org you’re viewing)
• CSRF token cookie (security)

We do not use third-party advertising trackers, Facebook Pixel, or behavioural ad cookies. We may add privacy-respecting product analytics (e.g. Plausible) in the future — this policy will be updated when that happens.

We use industry-standard security practices:

• TLS 1.3 for all data in transit
• Database encryption at rest
• Hashed passwords (bcrypt via Supabase Auth)
• Row-level security — users only see their own organisation’s data
• Regular dependency updates and security audits

No system is 100% secure. If we discover a breach affecting your data, we will notify you within 72 hours.

Unikjob is intended for business users 18 years or older. We do not knowingly collect data from anyone under 18.

Our primary database is hosted in the EU (Supabase eu-west-2). Some processors (Stripe, Vercel) operate globally. By using Unikjob, you consent to your data being processed in these jurisdictions, all of which provide adequate data protection under NDPR.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

Questions about how we handle your data? Reach us via the WhatsApp button in the footer or at privacy@unikjob.app (when email is wired up).