PRIVACY POLICY Last Updated: May 6, 2025 | Effective Date: May 6, 2025 🔒 ErrSol is committed to safeguarding your personal information. This Privacy Policy explains precisely what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have over your own data. Reading this document in full is strongly recommended. Table of Contents Scope of this Policy Data We Collect Why We Collect Your Data Identity Verification Data Message & Communication Data Payment & Financial Data Data Sharing & Third Parties Data Retention Data Security Your Rights Children's Privacy Changes to this Policy Contact 1. Scope of this Policy This Privacy Policy applies to all users of the ErrSol platform, including Clients, Workers, and unregistered visitors to our website. It covers all personal data collected through the Platform's website, mobile interface, messaging system, payment system, and identity verification process. By using the Platform, you agree to the data practices described in this Policy. 2. Data We Collect 2.1 Information You Provide Directly Registration Data — Full name, email address, phone number, password (hashed), account type. Collected from all Users. Profile Data — Profile photo, bio, skills, service categories, location, hourly rate. Collected from Workers. Identity Documents — Government-issued ID (national ID, passport, driver's licence, voter's card), ID images. Collected from Workers only. Job Data — Job title, description, budget, location, requirements. Collected from Clients. Communication Data — Messages, job negotiations, dispute submissions. Collected from all Users. Payment Data — Transaction records, payment confirmations, wallet balance history. Collected from all Users. Support Data — Support tickets, reported issues, dispute records. Collected from all Users. 2.2 Information We Collect Automatically When you access the Platform, we automatically collect the following technical data: IP address and approximate geographic location; Device type, operating system, and browser type; Pages visited, time spent on pages, and navigation paths; Referring website or URL; Session duration and login timestamps; Error logs and diagnostic data. 2.3 Information from Third Parties We may receive information about you from third parties, including: Payment processors (e.g. Paystack) confirming transaction completion; Identity verification services confirming or flagging document authenticity; Law enforcement agencies where required by legal process. 3. Why We Collect Your Data We collect and process your personal data on the following lawful bases and for the following purposes: Contract performance: To create and manage your account, facilitate job engagements, and process payments; Legal obligation: To comply with applicable Ghanaian law, including anti-fraud regulations and court orders; Legitimate interests: To prevent fraud, secure the Platform, investigate disputes, and improve our services; Consent: Where we have obtained your explicit consent, such as for marketing communications. 4. Identity Verification Data 4.1 What We Collect Workers are required to submit government-issued identity documents. We collect images of these documents including, where visible, your legal name, date of birth, national ID number or passport number, photo, and expiry date. 4.2 Why We Collect It Identity data is collected exclusively for the following purposes: Verifying the legal identity of Workers before they may engage in any paid work; Preventing impersonation, fraud, and account misuse; Creating an auditable record of verified participants on the Platform; Assisting in the investigation and resolution of disputes where identity is material; Cooperating with law enforcement and regulatory bodies as required by law. ⚠️ Identity documents and the data contained therein are used for security and verification purposes only. They are never sold, rented, or shared with third parties for commercial purposes. Access is restricted to authorised ErrSol administrators and, where legally required, law enforcement. 4.3 Storage and Protection Identity documents are stored in a secured, access-controlled environment with encryption at rest. Only authorised administrators may access identity documents, and all access is logged. Documents are retained for the duration of your account's active life plus a legally required retention period thereafter. 5. Message & Communication Data All messages sent through the ErrSol internal messaging system are stored on our servers. These messages are retained and may be reviewed by authorised ErrSol staff for the purposes set out in Section 9 of our Terms of Service (Communication Monitoring). By using the Platform's messaging system, you acknowledge and consent to this storage and potential review. Messages are retained for a minimum period required for dispute resolution and legal compliance. 6. Payment & Financial Data All payments are processed through Paystack, our authorised payment gateway. ErrSol does not directly store your full card details, bank account numbers, or mobile money PINs. We receive and store: Transaction references and confirmation codes; Transaction amounts and dates; Payer and payee account identifiers (as provided by Paystack); Wallet balance records. Paystack's own privacy policy governs the handling of your payment data by Paystack. We strongly encourage you to review Paystack's Privacy Policy before making any payment. 7. Data Sharing & Third Parties 7.1 We Do Not Sell Your Data ErrSol does not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial purposes. Your data is not used for targeted advertising by any third-party advertiser. 7.2 Authorised Data Sharing We may share your data in the following limited circumstances: Service providers: Trusted third parties who assist us in operating the Platform (e.g. payment processors, email delivery services, identity verification services) under strict confidentiality and data processing agreements; Between Users: Your public profile data (name, profile photo, skills, ratings) is visible to other Users as necessary for the marketplace to function. Private data is never shared with other Users without your consent; Legal compliance: Where required by a court order, subpoena, or applicable law, we will disclose data to law enforcement or regulatory authorities. We will notify you of such disclosure unless legally prohibited from doing so; Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. 8. Data Retention We retain your personal data for as long as your account remains active and for a reasonable period thereafter as required by law or legitimate business interest. Specifically: Account data: Retained for the life of your account plus a minimum of two (2) years after closure; Identity documents: Retained for the life of the account plus the period required by applicable law; Transaction records: Retained for a minimum of seven (7) years in compliance with financial record-keeping obligations; Messages: Retained for a minimum of two (2) years for dispute resolution purposes; Technical logs: Retained for up to ninety (90) days. 9. Data Security ErrSol implements industry-standard technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include: Encryption of sensitive data in transit (HTTPS/TLS) and at rest; Role-based access controls limiting data access to authorised personnel only; Secure, hashed storage of passwords; Regular security audits and vulnerability assessments; Secure file storage for uploaded identity documents. No method of data transmission over the internet is completely secure. While we take all reasonable precautions, we cannot absolutely guarantee the security of data transmitted to or from our Platform. You transmit data at your own risk. 10. Your Rights Subject to applicable Ghanaian law, you have the following rights regarding your personal data: Right to access: Request a copy of the personal data we hold about you; Right to rectification: Request correction of inaccurate or incomplete data; Right to deletion: Request deletion of your personal data, subject to legal retention obligations; Right to portability: Request your data in a structured, machine-readable format; Right to object: Object to processing based on legitimate interests; Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time. To exercise any of these rights, contact us at support@errsol.com. We will respond within thirty (30) days. We may require proof of identity before fulfilling any data rights request. 11. Children's Privacy ErrSol is not directed at children under the age of eighteen (18). We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a person under 18 without verified parental consent, we will take immediate steps to delete that information and terminate the associated account. 12. Changes to this Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other legitimate reasons. When we make material changes, we will notify you by email and/or by a prominent notice on the Platform. Your continued use of the Platform after the effective date of the updated Policy constitutes your acceptance of the changes. 13. Contact For any privacy-related questions, requests, or concerns, please contact ErrSol at: Email: support@errsol.com Phone: +233 000 000 000 Support Portal: [Your support URL]