Privacy Policy

DimaHire is a technology platform that connects customers and businesses with independent talents and service providers, available at dimahire.com.ng.

[INSERT LEGAL ENTITY NAME, REGISTRATION NUMBER, AND REGISTERED ADDRESS] — to be confirmed by DimaHire's legal counsel before publication.

This Privacy Policy applies to personal information processed through:

• the DimaHire website and web application,
• the Dima AI assistant, including interactions through WhatsApp,
• talent, customer, and business accounts, and
• related bookings, payments, verification, and support processes.

DimaHire currently operates, or intends to operate, in Nigeria, Ghana, Kenya, South Africa, the United Kingdom, and the United States. Some sections of this Policy address requirements specific to particular jurisdictions.

We collect information in a few different ways:

• information you provide directly, such as when you create an account, complete a profile, or contact support;
• information generated through your use of the Platform, such as booking and transaction records;
• information from identity verification and connected-account (Work Proof) providers, where you choose to use those features; and
• information collected automatically, such as device and log data.

The sections below describe each category in more detail.

Depending on how you use DimaHire, you may provide us with:

• your name, email address, and phone number,
• your country and location,
• profile information, skills, services, experience, pricing, and availability,
• portfolio information, work samples, and profile photographs,
• business information (if you use a business account),
• account preferences and settings, and
• messages, documents, or other content you choose to submit.

Talents may create a professional profile that can include first and last name, a professional description, skills, services, experience, location, pricing, availability, portfolio or work-sample content, a profile photo, professional links, and a public DimaHire ID (for example, DMH-pq34w2). This ID is a platform reference used to help customers find and identify a talent through Dima — it is not a government-issued identification number.

If you create a business account, we may collect:

• business name, contact person, business email, and phone number,
• website, business description, industry, and location,
• business registration and business verification information,
• hiring requirements and job listings, and
• subscription or payment-related information.

We use this information to create and manage business accounts, publish jobs, facilitate hiring, promote business listings, process subscriptions or payments, communicate with your business, and help prevent fraud.

DimaHire may use third-party identity verification providers, such as Didit, to verify the identity of talents, customers, and/or businesses. Verification may involve government-issued identification documents, name, date of birth, address, document information, a selfie, facial biometric information, liveness checks, face matching, device information, IP information, verification results, and fraud or risk signals.

DimaHire may allow talents to connect external professional accounts or services — such as GitHub, LinkedIn, Figma, YouTube, Behance, Vercel, or Google Drive — to demonstrate their work (sometimes referred to as "Work Proof"). Connecting an account is optional and controlled by you.

• Authorization for a connected account is typically handled through OAuth or another mechanism supported by that provider.
• We only request the permissions reasonably necessary to power the relevant feature (for example, displaying selected public projects on your profile) — we do not have access to every piece of information stored in your connected account, only what you authorize and what the provider's permissions model allows.
• Connecting an account does not give DimaHire ownership over your external account or its content.
• You can disconnect a connected account at any time from your account settings.
• Each connected provider has its own privacy policy and terms, which also apply to your use of that service.
• We may use imported work signals (such as public project or activity information) to improve talent profiles, discovery, matching, and trust signals on the Platform.

Dima is DimaHire's AI assistant. Depending on how you interact with Dima, it may process user messages, WhatsApp messages, search requests, talent preferences, booking requests, conversation and interaction history, relevant profile information, transaction context, results returned by internal tools or APIs, AI-generated outputs, and related conversation metadata.

DimaHire's customer-facing AI experience may operate through WhatsApp. When you interact with Dima through WhatsApp, your messages may be processed by DimaHire to provide the service, and information will also pass through WhatsApp/Meta's own infrastructure as part of how WhatsApp operates.

WhatsApp and Meta maintain their own privacy policies and terms, which govern their handling of your information. DimaHire does not control, and is not responsible for, Meta's independent processing of information through WhatsApp. We recommend avoiding sending unnecessary sensitive personal information (such as financial account details or identity documents) over WhatsApp.

In connection with bookings, we may process:

• customer account/identity information and talent information,
• the requested service, booking amount, and booking status,
• timestamps and a booking reference,
• communications related to the booking, and
• cancellation, rejection, or completion information.

We use this information to facilitate bookings, notify participants, help manage disputes, prevent fraud, maintain records, calculate earnings, and provide customer support.

DimaHire may facilitate transactions such as booking fees, service payments, escrow or held funds, refunds, talent earnings, and withdrawals, along with related transaction references and payment status.

Payment processing is generally handled by third-party payment providers. DimaHire may receive transaction-related information (such as amount, status, and reference) without necessarily receiving or storing full card or bank account credentials, which are typically handled directly by the relevant payment provider.

Transaction information may be retained for accounting, fraud prevention, dispute resolution, legal obligations, and general platform operations, for as long as reasonably necessary for those purposes.

DimaHire may send you:

• account and verification-related emails or messages,
• booking notifications and security alerts,
• other transactional or service-update communications,
• important legal notices,
• support communications, and
• marketing communications, where legally permitted.

Where we send marketing communications, you can opt out of them using the unsubscribe mechanism provided or by contacting info@dimahire.com.ng. You will continue to receive essential transactional and security communications necessary for your use of the Platform even after opting out of marketing messages.

DimaHire may use strictly necessary cookies or similar technologies required for the website and application to function correctly, such as maintaining your session and keeping you signed in.

[INSERT DETAILS OF ANY ADDITIONAL ANALYTICS, ADVERTISING, OR TRACKING TECHNOLOGIES ACTUALLY IMPLEMENTED, IF ANY, ONCE CONFIRMED AGAINST THE CODEBASE — including the provider name, categories of information collected, and how users can manage preferences.] This Policy does not describe any analytics or tracking tool that has not been confirmed as implemented.

Where technically applicable, we may process information such as your IP address, browser type, device information, operating system, approximate location derived from technical data, timestamps, log data, referring URLs, and related security information. We use this information for security, fraud prevention, debugging, performance, abuse prevention, and service reliability. DimaHire does not use precise GPS-based location tracking unless a specific feature is implemented and disclosed to you at the point of use.

We use personal information to:

• provide, operate, and maintain the Platform,
• create and manage accounts and profiles,
• match customers and businesses with talents,
• facilitate bookings and process transactions, including withdrawals and refunds,
• carry out identity verification and business verification,
• prevent fraud and protect the security of the Platform,
• provide customer support,
• send communications described in Section 14,
• operate and improve Dima and other AI functionality,
• conduct analytics where applicable,
• comply with legal obligations, and
• enforce our Terms of Service and protect our users and DimaHire.

Where applicable law requires a legal basis for processing personal information, DimaHire relies on one or more of the following, depending on the specific processing activity:

• performance of a contract with you (for example, providing an account or facilitating a booking),
• our legitimate interests (for example, fraud prevention, security, and improving the Platform), balanced against your rights,
• your consent, where required (for example, for certain marketing communications),
• compliance with a legal obligation, and
• protection of vital interests, in rare circumstances where applicable.

No single legal basis applies to every processing activity described in this Policy — the applicable basis depends on the specific activity and your jurisdiction.

We may share personal information with:

• hosting and infrastructure providers,
• our authentication and database provider (Supabase),
• identity verification providers (such as Didit),
• payment processors,
• WhatsApp/Meta, in connection with the Dima experience,
• providers of connected integrations you choose to authorize,
• analytics providers, where applicable and confirmed as implemented,
• AI or model providers used to power Dima, where applicable,
• professional advisers (such as lawyers and auditors),
• regulators or law enforcement, where legally required, and
• other service providers who process information on DimaHire's behalf.

We do not sell personal information. Sharing information with the service providers listed above so they can perform services for us does not constitute a sale of your personal information.

The third parties described in this Policy (such as our authentication/database provider, identity verification provider, payment processors, and WhatsApp/Meta) each have their own privacy policies and terms governing their handling of information. We encourage you to review those policies where relevant. We only work with service providers to the extent necessary to operate the Platform.

Because DimaHire operates, or intends to operate, across multiple countries, your information may be processed in a country other than the one in which you reside, including countries that may have different data protection laws. Where applicable law requires specific safeguards for such transfers, we intend to use appropriate safeguards recognized under that law. [INSERT SPECIFIC TRANSFER MECHANISM(S) ONCE CONFIRMED, e.g. standard contractual clauses, adequacy decisions, or equivalent safeguards.]

We retain personal information for as long as reasonably necessary to provide the Platform, maintain your account, complete transactions, resolve disputes, prevent fraud, meet legal and accounting obligations, maintain security, and enforce our agreements. Different categories of information may be retained for different periods depending on these purposes. When information is no longer needed, we aim to delete or anonymize it, or securely retain it where required by law.

We use reasonable technical and organizational measures designed to protect personal information, which may include access controls, authentication safeguards, encryption where applicable, secure API architecture, logging and monitoring, least-privilege access, secure credential handling, and infrastructure security measures provided by our hosting and database providers.

No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security of your information.

You may submit content such as profile photos, descriptions, portfolio items, work samples, messages, and documents. You remain responsible for the content you submit and should not upload content you do not have the right to share. We process your content as reasonably necessary to provide the Platform, including displaying it to other users where relevant to your account type.

As described in Section 6, certain talent and business profile information — such as professional name, skills, services, description, portfolio, Work Proof signals, an appropriate level of location, pricing, and your public DimaHire ID — may be visible to other users of the Platform. Please carefully consider what information you choose to make part of your public profile.

Depending on your jurisdiction and applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, request portability of your data, and withdraw consent where processing is based on consent. Not every right applies in every jurisdiction, and some rights may be subject to exceptions under applicable law.

To exercise any of these rights, contact us at info@dimahire.com.ng. We may need to verify your identity before acting on certain requests.

DimaHire is initially based in, and operates in, Nigeria. We intend to handle personal information in a manner consistent with applicable Nigerian data protection requirements, including the Nigeria Data Protection Act (NDPA), where applicable to our processing activities. This section describes our intended privacy practices and does not constitute a representation that DimaHire is, or has been certified as, fully compliant with any specific regulatory framework. If you have questions about our practices as they relate to Nigerian data protection law, contact us at info@dimahire.com.ng.

Because DimaHire may operate in, or serve users located in, the United Kingdom and other jurisdictions, depending on your location and applicable law you may have rights such as access, correction, deletion, restriction, objection, portability, withdrawal of consent, and the right to lodge a complaint with a relevant supervisory authority. These rights vary by jurisdiction, and not every right described in this section will apply to every user.

DimaHire does not knowingly collect personal information from children where prohibited by applicable law. Because using DimaHire may involve professional work, hiring, payments, and identity verification, use of the Platform is subject to the eligibility requirements set out in our Terms of Service (/terms), [INSERT MINIMUM AGE / ELIGIBILITY REQUIREMENT]. If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete that information.

You can request deletion of your account and associated personal information, as well as correction of or access to your information, by contacting us at info@dimahire.com.ng. [CONFIRM WHETHER A SELF-SERVICE DELETION OPTION EXISTS IN ACCOUNT SETTINGS; IF SO, DESCRIBE IT HERE INSTEAD OF THE CONTACT-BASED PROCESS.] We may retain certain information after deletion where necessary to comply with legal obligations, resolve disputes, or enforce our agreements, consistent with Section 22 (Data Retention).

If a security incident affecting personal information occurs, we will take reasonable steps to investigate and address it in accordance with applicable law, and will notify affected users and/or relevant regulators where legally required to do so. We cannot guarantee that notification will occur in every circumstance, but we will act consistently with our legal obligations.

DimaHire may contain links to external services, professional profiles, payment providers, social networks, or other websites. We are not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party service before providing your information to it.

We may update this Privacy Policy from time to time. Where changes are material, we will provide reasonable notice, such as by updating the date below or through other reasonable means. Continued use of DimaHire after a change becomes effective constitutes acceptance of the updated Policy, to the extent permitted by applicable law.

If you have questions about this Privacy Policy or how DimaHire handles personal information, contact us at info@dimahire.com.ng.