Privacy Policy

1. Introduction

ESAP Link (“ESAP Link”, “we”, “us”, or “our”) operates a mobile platform that connects users seamlessly with trusted local professionals and technicians (“Service Providers”). Our service incorporates intelligent location-matching search logic to find nearby experts, and integrates Paystack for secure payment processing during checkout.

This Privacy Policy explains what information we collect when you use the ESAP Link mobile application and related services (collectively, the “Services”), how we use it, the choices you have, and how to exercise your rights — including how to delete your account and personal data.

2. Information We Collect

2.1 Information you provide directly

• Account information: full name, email address, phone number, and password when you register.
• Service request details: the type of service requested, job descriptions, photos or notes you attach, your service address, and any additional notes for the Service Provider.
• Technician profile information (Service Providers only): bio, years of experience, skills/categories, identification and verification documents, and bank account details required for payouts.
• Communications: messages you send to us through support channels, and in-app messages exchanged in connection with a job.
• Ratings and reviews you submit after a completed job.

2.2 Information collected automatically

• Location data: precise or approximate device location, as described in Section 3.
• Device and log data: device model, operating system, app version, IP address, language, timestamps, crash logs, and usage events.
• Push notification token: a device token issued by Apple (APNs) or Google (FCM) so we can send you notifications (Section 5).
• Payment metadata: transaction references, amounts, and payment status returned by Paystack (Section 4). We do not collect or store your full card number, CVV, or PIN.

3. Location Data

Location is core to how ESAP Link works: our intelligent matching logic uses your position to find the nearest available Service Providers, show accurate arrival estimates, and route technicians to your service address.

3.1 How we use location data

3.2 Your control

• Location access is requested only with your permission, and you can grant or revoke it at any time in your device Settings.
• Technicians can stop sharing location at any time by toggling Offline in the app — location updates stop immediately.
• You may use a manually entered service address instead of GPS-based location for job requests where supported.
• We do not sell location data, and we do not track you in the background — location is collected only while the app is in use (foreground), except for a technician’s active session while they are online and a job is in progress.

4. Payments (Paystack)

All payments on ESAP Link are processed by Paystack (a licensed payment processor, PCI-DSS Level 1 certified). When you pay for a service:

• You enter your card or payment details directly into Paystack’s secure checkout. ESAP Link never sees, receives, or stores your full card number, CVV, PIN, or bank login credentials.
• We receive only a payment reference, transaction status, amount, and masked card details (e.g., card brand and last four digits) needed to confirm and record your payment.
• Payouts to Service Providers are made to the bank account details they provide, and are processed via Paystack or our banking partner.

5. Push Notifications

We use push notifications (via Apple Push Notification service and Firebase Cloud Messaging) to keep you informed about activity that matters:

• Clients: request accepted, technician on the way, job updates, payment confirmations, and account security alerts.
• Service Providers: new job requests nearby, acceptance confirmations, session updates, and payout notifications.

• Notifications are opt-in on iOS and Android, and you can change your preference at any time in your device Settings → Notifications → ESAP Link, or in your in-app notification settings where available.
• Disabling notifications does not affect your ability to use the core features of the app.
• We do not use notifications for third-party advertising.

6. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services (account creation, job matching, scheduling, and job fulfilment).
• Match clients with nearby Service Providers using location-based search logic.
• Process payments, issue receipts, and facilitate payouts to Service Providers via Paystack.
• Send service-related notifications and transactional messages (via push, SMS, or email).
• Verify Service Provider identities and maintain trust and safety on the platform.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Provide customer support and respond to your enquiries.
• Improve and optimize the app (analytics, crash diagnostics, feature usage).
• Comply with legal obligations and enforce our Terms of Service.

No sale of personal dataWe do not sell your personal information to third parties, and we do not use your data for third-party advertising.

7. Information Sharing & Disclosure

We share information only in the following limited circumstances:

• Between clients and Service Providers: to fulfil a job, we share your first name/last name, phone number, service address, job details, and (for technicians) your approximate location while en route.
• Paystack: payment details you submit during checkout are shared directly with Paystack under its own privacy policy (Section 4).
• Service providers supporting our operations: cloud hosting, analytics, crash reporting, and messaging services — bound by data-processing obligations and only given access needed to perform their services.
• Legal requirements: where disclosure is required by law, regulation, legal process, or to protect the rights, property, or safety of ESAP Link, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets — you will be notified of any change in ownership or use of your information.

8. Data Retention

• We retain your personal information for as long as your account is active or as needed to provide the Services.
• Transaction and payment records are retained for the period required by applicable financial and tax regulations (typically a minimum of 5–7 years).
• Location data tied to a completed job is retained only as long as needed for dispute resolution, safety investigations, and fraud prevention, after which it is deleted or de-identified.
• When you delete your account, we delete or anonymize your personal data as described in Section 9, except where retention is required by law.

9. Your Rights & Data Deletion

Depending on your jurisdiction (including the Nigeria Data Protection Act 2023 and GDPR for EU users), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information (editable in-app via Profile settings).
• Withdraw consent for optional processing (e.g., location access, push notifications) at any time via device settings.
• Object to or restrict certain processing of your data.
• Request deletion of your account and associated personal data.

9.1 How to delete your account and data

You can request deletion in either of these ways:

• In the app: go to Profile → Settings → Delete Account, and confirm. This permanently deletes your profile, job history, stored preferences, and linked device tokens.
• By email: send a deletion request to support@esaplink.com from the email or phone number registered to your account. We process verified requests within 30 days.

10. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest.
• Authentication tokens and session management for secure account access.
• Role-based access controls limiting employee access to personal data.
• Regular security reviews and monitoring for suspicious activity.
• Payments handled exclusively through PCI-DSS compliant infrastructure (Paystack).

No method of transmission or storage is 100% secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

11. Children’s Privacy

The Services are not intended for children under the age of 13 (or under 16 in jurisdictions where a higher digital-consent age applies). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at support@esaplink.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you in-app or by email before the change takes effect. Continued use of the Services after an update constitutes acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you can reach us at: