1. Introduction and Scope
This Privacy Policy applies to all users of the Artivio mobile application (iOS and Android), visitors and users of the Artivio website (www.artivio.ng), all communications sent through or received from Artivio, and all transactions conducted through the Artivio platform.
2. Information We Collect
2.1 Personal Identification Information
When you register for an Artivio account, we collect:
- Full legal name (as it appears on government identification)
- Nigerian mobile phone number (for account verification and communication)
- Email address (optional, for alternative communication)
- Date of birth (to verify you meet minimum age requirements)
- Residential address (city, state, and optionally full address)
- Government-issued ID type and number (for artisan verification only)
- Bank Verification Number (BVN) for payment verification (artisans only)
2.2 Financial and Transaction Data
To process payments and maintain financial records:
- Bank account details (account number, bank name, account name) for withdrawals
- Transaction history (payments made, received, pending, failed)
- Wallet balance and transaction ledger
- Escrow transaction details (amounts, parties, statuses, timestamps)
2.3 Usage and Behavioral Data
To improve our platform and personalise your experience:
- Pages viewed, features used, time spent on each section
- Search queries and filter preferences
- Artisans you view, save, or share
- Purchase history and browsing patterns
2.4 Device and Technical Information
- Device type, model, and manufacturer
- Operating system and version
- IP address and approximate location (city/state level)
- App version and build number
3. How We Use Your Information
3.1 Account Management and Service Delivery
- Create and maintain your Artivio account
- Verify your identity and prevent unauthorised access
- Enable you to list services (artisans) or hire professionals (customers)
- Provide customer support and respond to inquiries
3.2 Payment Processing and Financial Services
- Process payments through our secure escrow system
- Manage your digital wallet and transaction history
- Process withdrawal requests to your bank account
- Detect and prevent payment fraud
3.3 Platform Security and Fraud Prevention
- Monitor for fraudulent accounts and suspicious activity
- Verify artisan credentials and qualifications
- Detect and prevent spam, scams, and prohibited content
- Investigate and resolve disputes
4. Legal Basis for Processing (NDPR Compliance)
Under the Nigeria Data Protection Regulation (NDPR), we process your personal data based on the following legal grounds:
- Consent: You have given clear consent for specific purposes (e.g., marketing communications)
- Contract Performance: Processing necessary to fulfil our contract with you
- Legal Obligation: We must process your data to comply with Nigerian laws
- Legitimate Interests: Processing necessary for our business interests (fraud prevention, platform improvement)
5. Data Sharing and Third-Party Disclosure
We never sell your personal information. We share data only in the following specific circumstances:
5.1 Service Providers and Business Partners
We share necessary information with trusted third parties:
- Nigerian banks and financial institutions (for payment processing)
- Card payment processors — primarily Paystack (Paystack Payments Limited, a Stripe company operating in Nigeria)
- BVN verification providers
- Cloud hosting providers (AWS, Google Cloud)
- Email and SMS service providers
- Customer support tools
5.2 Legal and Regulatory Authorities
We disclose information when legally required:
- To comply with court orders, subpoenas, or legal processes
- To cooperate with law enforcement investigations
- To protect our rights, property, or safety
- To meet tax reporting obligations (FIRS, state tax authorities)
6. Cookies and Tracking Technologies
Artivio uses cookies and similar technologies to enhance your experience:
- Essential Cookies: Session management, security features, payment processing
- Functional Cookies: Remember preferences, store session state
- Analytics Cookies: Understand usage patterns, measure performance
You can control cookies through your browser settings or our cookie consent banner.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Retained while your account is active |
| Transaction history | 7 years (Nigerian tax law requirement) |
| Personal identifiers (on account closure) | Deleted within 30 days |
8. Your Privacy Rights Under NDPR
8.1 Right to Access
You have the right to request a copy of all personal data we hold about you. Navigate to Settings > Privacy > Download My Data.
8.2 Right to Rectification
You have the right to correct inaccurate personal information. Edit your profile directly in the app.
8.3 Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data. Go to Settings > Account > Delete Account.
8.4 Right to Object
You can object to processing based on legitimate interests or direct marketing communications at any time.
8.5 Right to Lodge a Complaint
If you believe we've violated your privacy rights, contact our Data Protection Officer at legal@artivios.com or file a complaint with the Nigeria Data Protection Bureau (NDPB).
9. Data Security Measures
9.1 Technical Security
- Encryption in Transit: TLS 1.3 encryption for all data transmission
- Encryption at Rest: AES-256 encryption for sensitive database data
- Firewall Protection: Multi-layered firewall systems
- Intrusion Detection: Real-time monitoring for suspicious activity
9.2 Your Role in Security
- Use strong, unique passwords (minimum 8 characters)
- Enable two-factor authentication
- Never share your password or OTP codes
- Keep your app updated to the latest version
- Report suspicious activity immediately
10. Data Breach Notification
In the event of a data breach:
- We will notify you within 72 hours of discovering the breach (NDPR requirement)
- Notification will include the nature of the breach, data affected, and recommended actions
- We will notify the Nigeria Data Protection Bureau (NDPB) as required by law
11. International Data Transfers
Your data is primarily stored on servers located in Nigeria. For any international transfers, we ensure adequate data protection through Standard Contractual Clauses or your explicit consent.
12. Children's Privacy
Artivio is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover data from a minor has been collected, we will delete it immediately and terminate the associated account.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you via email and in-app notification, and publish a new effective date at the top of this document. Continued use of the platform after changes constitutes your acceptance of the revised Policy.
14. Contact Information
For privacy-related questions or requests:
- Data Protection Officer: legal@artivios.com
- General Privacy Inquiries: legal@artivios.com
- In-App: Settings > Help & Support > Privacy Request
- Response Time: 7 business days