1. Introduction & Operating Scope
Cloza Technologies Limited ("Cloza") provides a verified marketplace matching clients seeking quality home, technical, repair, and lifestyle services with skilled, local service providers across Africa.
We process your data strictly under the principles of lawfulness, fairness, purpose limitation, and storage limitation in compliance with the Nigeria Data Protection Act (NDPA), the Nigeria Data Protection Regulation (NDPR), and international privacy benchmarks including the European Union General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
We collect personal information directly from your input, through interactions between clients and service providers, and automatically through device sensors with your explicit permission:
A. Account Identity & Profile
Full name, email address, phone number, and account password (stored using irreversible cryptographic salted bcrypt hashing). You may also supply an optional profile photograph.
B. Service Provider Business & Verification Data
Business name, operational category (e.g. Electrical, Plumbing, Cleaning, Saloon, Tutoring), physical office address, description of offerings, pricing rates, WhatsApp contact, and government-issued identity documents for professional verification.
C. Foreground Geolocation Data
Coarse and precise GPS coordinates, city, and state collected strictly while the application is actively in use on screen to compute travel distance and suggest verified nearby providers. We do not track location in the background.
D. Media, Camera & Storage
Photos selected from your device library or captured with your camera, used exclusively to set profile avatars, showcase service portfolio work, or upload identity verification documents.
E. Bookings, Bids & Communications
Job requests, provider quotes and bids, booking confirmations, in-app messaging logs, and authentic star ratings and customer reviews.
F. Device Tokens & Diagnostics
Device hardware model, operating system version, crash diagnostic logs, IP address, and push notification tokens (Firebase Cloud Messaging / Expo Push) to deliver real-time booking alerts and security updates.
3. How We Use Information
We process collected data exclusively for defined, legitimate business and operational purposes:
- Fulfillment: Connecting clients with verified providers, coordinating dispatch, and confirming completed jobs.
- Trust & Verification: Validating provider qualifications, preventing identity fraud, and maintaining marketplace safety.
- Escrow & Payouts: Safely processing booking deposits and disbursing earnings directly to verified bank accounts.
- Real-Time Notifications: Alerting users to new job bids, dispatch updates, chat messages, and account receipts.
- Legal Compliance: Satisfying statutory anti-money laundering (AML), tax, and consumer protection reporting obligations.
4. Device Permissions & Location Transparency
The Cloza mobile client requests explicit system permissions. You maintain full control and can grant or revoke any permission at any time in your device Settings:
| Permission | Platform | Exact Operational Purpose |
|---|---|---|
| Foreground Location | Android / iOS | Discovering verified service providers nearby and calculating travel distance. Active only while the app is foregrounded; never tracked in the background. |
| Camera & Photo Library | Android / iOS | Selecting profile avatars, snapping service portfolio photos, and uploading KYC verification documents. |
| Push Notifications | Android 13+ / iOS | Delivering immediate alerts when a provider submits a bid, a client confirms a booking, or a message is received. |
5. Financial & Payment Data
Cloza integrates with licensed, audited payment processors (including Paystack Payments Limited) to facilitate electronic payments and bank payouts.
We do not collect, view, process, or store credit or debit card numbers, expiration dates, or CVV security codes on our servers. Payment credentials are submitted directly to the PCI-DSS Level 1 certified gateway over encrypted TLS 1.3 channels. For service provider withdrawals, we retain only your verified bank name, bank code, and account number to transmit earned payouts.
7. Security Safeguards & Retention Schedules
We maintain robust technical safeguards including end-to-end HTTPS/TLS 1.3 transport encryption, salted bcrypt password hashing, role-based access control, and firewalled database clusters.
We retain personal information only for as long as your account remains active. When you delete your account, personal data is permanently wiped from live databases within 24 hours. Under statutory tax and anti-financial crime laws, records of completed financial payment receipts must be archived for up to 6 years before automatic destruction.
8. Your Rights & Permanent Account Deletion
You retain statutory rights to access, rectify, extract, restrict, or permanently erase your personal records at any time.
Self-Service Account Deletion Options
In full compliance with Google Play Store User Data policies and Apple App Store Review Guideline 5.1.1(v), Cloza provides two independent, self-service mechanisms to permanently delete your account:
Through the Cloza Mobile App
Open Cloza → Tap Profile in the bottom bar → Scroll to bottom → Tap Delete Account → Confirm your password.
Through the Web Deletion Portal
Visit our verified public portal at cloza.org/delete-account to delete your account from any browser without having the app installed.
Upon deletion, your profile identity, active service listings, push tokens, and authorization sessions are permanently purged.
9. Communications & Email Unsubscribe Policy
You may opt out of promotional communications at any time. We honor RFC 8058 one-click unsubscription standards:
- Clicking the "Unsubscribe" link located in the footer of every marketing email.
- Visiting our web preferences portal directly at cloza.org/unsubscribe.
Transactional notices (security alerts, password resets, and booking receipts) cannot be disabled while maintaining an active account.
10. Regulatory Inquiries & Contact Information
For questions regarding this policy, data subject requests, or regulatory filings, contact our Data Protection Officer:
Cloza Technologies Limited
Data Protection Office: privacy@cloza.org
General Support: support@cloza.org
Official Website: https://cloza.org
Requests are reviewed and resolved within seventy-two (72) business hours.