Privacy Policy

KRAFFT ("KRAFFT", "we", "us") operates an online marketplace connecting customers with skilled artisans in Asaba, Delta State, Nigeria. This policy explains what personal data we collect, why, and how we protect it. Questions can be sent to hello@krafft.ng.

We collect information you provide directly, and information generated by using the platform:

• Account information: full name, email address, phone number, and a securely hashed password. We never store your password in plain text.
• Artisan verification: National Identification Number (NIN) and a copy of your ID document, used solely to verify your identity before you can accept bookings.
• Profile information: area/city, service category, bio, pricing, portfolio photos, and profile photo.
• Booking and payment records: booking details, transaction amounts, and payment status. Card and bank details are handled directly by our payment processor, Paystack — KRAFFT does not receive or store your full card number.
• Communications: messages exchanged through KRAFFT's in-app chat between customers and artisans, including any photos shared.
• Reviews: ratings, written reviews, and photos submitted after a completed booking.
• Device information: push notification subscription data (if you enable notifications) and standard technical data such as IP address and browser type, collected automatically.

• To create and secure your account, and verify artisan identity via NIN before allowing bookings.
• To connect customers and artisans, facilitate chat, quotes, bookings, and escrow payments.
• To send booking, payment, and account notifications (including via push notification, if enabled).
• To moderate reviews and investigate reports of fraud, abuse, or policy violations.
• To improve the platform and understand how it's used.
• To comply with legal obligations, including under the Nigeria Data Protection Act (NDPA).

• The other party in a booking: when you chat or book with someone, they see your name, and relevant contact/location details needed to complete the job.
• Paystack: our payment processor, to process escrow payments and payouts. Paystack has its own privacy policy governing payment data.
• Service providers: hosting and infrastructure providers who process data on our behalf, under contractual confidentiality obligations.
• Law enforcement or regulators, only where required by law.

We do not sell your personal data to third parties.

We keep your account and booking data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs. You can request deletion of your account at any time (see Section 7).

Passwords are stored using industry-standard one-way hashing (bcrypt) — we cannot see or recover your actual password. Data in transit is encrypted via HTTPS/TLS. No system is perfectly secure, and we continue to improve our safeguards as the platform grows.

You can access, correct, or request deletion of your personal data at any time by emailing hello@krafft.ng. Note that some information (e.g. completed transaction records) may need to be retained for legal or accounting purposes even after an account is closed.

KRAFFT is not intended for anyone under 18. We do not knowingly collect data from minors.

We may update this policy as KRAFFT evolves. Material changes will be reflected by updating the date at the top of this page.

Questions about this policy or your data can be sent to hello@krafft.ng.