Data Protection Certification

TaskHub (the “Company”), a Nigerian service marketplace, hereby certifies that it handles personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and related laws. This Certificate outlines TaskHub’s commitment to lawful, transparent, and secure data processing for all Users and Taskers of the platform.

  • ● Data Controller

    TaskHub (Team TaskHub, Abuja, Nigeria) is the Data Controller. We are responsible for personal data collected on our platform.

  • ● Purposes of Processing

    We process personal data for core platform functions: user registration and KYC verification, service matching, payment processing (escrow and payouts), customer support, and fraud prevention. We also use data for platform improvement, analytics, and marketing (with consent).

  • ● Lawful Bases

    Consent: Explicit consent is obtained for KYC verification and marketing.

    Contract: Processing is necessary to perform the service agreement.

    Legal Obligation: Certain processing is required by law (e.g. AML/CFT regulations).

    Legitimate Interest: Processing for security (fraud detection) and service improvement.

  • ● Data Categories

    Identification data, contact data, financial data, transaction data, and technical data (IP, device info, cookies).

  • ● Third-Party Processors

    Didit (didit.me): For ID document verification and liveness checks.

    AuthentifyNG (authentify.com.ng): For NIN and BVN verification with facial recognition.

    Payment Processors: PayStack and Stellar for handling card payments and disbursements.

  • ● Security Measures

    TaskHub has implemented robust technical and organizational measures: encrypted databases, TLS for all data in transit, strict access controls, routine security audits, and staff training on data protection. Personal data is stored on secure servers located in Oregon, with multi-factor access.

  • ● Data Retention

    Inactive accounts are purged after a set period. KYC data and transactional records are retained for Five(5) years to comply with financial regulations, then securely deleted.

  • ● Data Subject Rights

    TaskHub ensures that all users can exercise their NDPR rights: access, correction, deletion, objection, etc.

© 2026 TaskHub. All rights reserved.