Tafi · Legal

Privacy Policy

Effective 2026-06-06

What we collect

  • Account: phone number, name, email (optional), home address (optional, for nearby provider sort).
  • Identity verification: NIN or BVN, used only to verify the name match. We store the last 4 digits, the verification timestamp, and a yes/no match result. We do not store the full number.
  • Liveness: we process frames in-browser to check it's a live person. Frames are not uploaded or stored on our servers.
  • Bookings + payments: the parties, amounts, location, and status of every booking + escrow.
  • Messages: quote / collab chat threads — we retain them as the system of record for disputes.

How we use it

  • Run the platform (match consumers + providers, hold escrow, resolve disputes).
  • Send transactional notifications (SMS, email, in-app, push) — never marketing without opt-in.
  • Improve safety (detect fraud, abuse, repeated late cancellations).
  • AI features run on your private data on your behalf only; we do not train models on your messages.

Who we share with

  • Paystack — to process payments + payouts. They get your email + the amount.
  • NIMC + your bank — to verify NIN / BVN at sign-up. They never receive your messages or bookings.
  • Anthropic — query strings + tool calls are sent to Claude to power AI features. Anthropic processes for us per their DPA.
  • Supabase — our database provider. Data resides in their EU region by default.

We do not sell your personal data to anyone.

Your rights

You can:

  • Download a copy of your data — email privacy@tafi.ng.
  • Delete your account from Settings. Escrow-held funds are released or refunded first.
  • Correct or update your profile any time.
  • Object to processing — we retain only what's needed to fulfil open bookings + legal obligations.

Retention

Active accounts: indefinitely. Closed accounts: 90 days for support, then anonymized. Financial records: 7 years per NDIC requirements.

Cookies

We use a single session cookie (tafi_session, http-only) for authentication. No third-party tracking cookies.

Contact

Privacy questions: privacy@tafi.ng. DPO: same address.