Privacy & terms
Privacy notice
Version 2026-11-12
Michofat Konsult Limited operates WhoSabi and is responsible for the personal data described here. For privacy questions or requests, email info@michofat.com.
What we collect and why
- Account and access. We use your name, email, password hash, verification and reset records, and policy agreement to create and secure your account. We process the information needed to provide your account and requested services on the basis of contract. We use session cookies to keep you signed in and short-lived cookies to continue account verification or recovery.
- Profiles and activity. We use the trade, service description, location, photos, posts, comments and reviews you choose to publish to provide the directory, portfolio and review features you request. Published content, your display name and the location you include may be visible to visitors.
- Chats and transactions. We use messages, attachments, job references, quotes, payment references, delivery and rating records, and payout or dispute evidence to operate your job, retain its history and help resolve problems. These are part of providing the service. Chat participants can see the conversation. Authorized staff can access chats and related evidence for support, moderation, and dispute handling. Payout evidence is available to the artisan and authorized staff.
- Artisan verification. We use the government ID, any required document number, your selfie, and your trade profile and work evidence to review your application and prevent impersonation and fraud. Only authorised reviewers can access private evidence. Customers see the outcome, not the documents or samples submitted for review.
- Artisan payouts. After approval, we use your bank and account number to resolve the account name through our payment provider, check that it matches your WhoSabi account name, and pay you for completed jobs. Bank details are private and are available to authorised payout staff when needed.
- Security and legal obligations. We use request and security logs, moderation records and account activity for our legitimate interests in protecting the service, preventing abuse and investigating incidents. We retain or disclose records where required by law. Where we rely on consent for a specific optional purpose, we ask for it separately and you may withdraw it.
Who receives information
We use hosting and database providers, email delivery services for account messages and notifications, file storage providers for uploads, and payment processors for supported checkout. The payment processor collects payment details on its checkout page. WhoSabi uses the payment reference, amount and status to update the job. We may also disclose information to regulators, authorities or professional advisers where the law permits or requires it.
Some providers may process information outside Nigeria. Where an international transfer applies, we must rely on a transfer basis permitted by Nigerian data protection law. You can contact us for information about the safeguards applicable to your data.
Retention and security
Account and service records are kept while needed to operate your account and jobs. After closure or a deletion request, we may retain records needed for an unresolved dispute, fraud prevention, legal obligations or the defence of claims. Verification and reset codes have a limited validity period.
Private verification evidence is scheduled for deletion 90 days after review. We keep the review outcome, date and check reference as an audit record. We use access controls for private records, hash passwords and use time-limited links for private files. Send identity documents only through the verification form.
Your choices and rights
You can ask for access to your data, corrections, deletion, restrictions, or a portable copy where applicable. You may object to processing based on legitimate interests and challenge a decision made solely by automated processing where the law provides that right. Automated controls can temporarily limit repeated requests or prevent an uploaded file from being attached. Contact us if you think a control has affected your account in error.
Use the privacy email above to exercise your rights. We may ask for information to verify your identity and protect your account. You may lodge a complaint with the Nigeria Data Protection Commission.