Privacy Policy
Last updated 28 September 2026
This policy explains what personal data WorkAm collects, why we use it, who we share it with, and the choices and rights you have. We process personal data in line with the Nigeria Data Protection Act 2023.
1. Who we are
WorkAm operates the WorkAm marketplace and is the data controller for the personal data described here. For any privacy question or request, email privacy@workam.com.
2. What we collect
Information you give us
- Account details: name, email address, password (stored only in encrypted, hashed form), phone number, and whether you are an employer or a freelancer.
- Profile details: photo, location, skills, experience, portfolio, company details, and anything else you add to your profile.
- Work activity: job posts, applications, proposals, milestones, contracts, reviews, workroom messages, and the files you upload.
- Payment details: wallet transactions, and for withdrawals your bank name, account number, and account name. Card details are entered on the Bachs checkout page and never reach our servers.
- Support and disputes: what you tell us when you contact support or open a dispute.
Information collected automatically
- Technical data: IP address, browser and device type, and server logs, used for security, rate limiting, and fixing errors.
- Browser storage: a sign-in token and your preferences such as dark mode. See our Cookie Policy.
3. How we use it and why
| Purpose | Legal basis |
|---|---|
| Creating your account, showing your profile, matching jobs and freelancers, running contracts and workrooms | Performing our contract with you |
| Processing payments, escrow, fees, and withdrawals | Performing our contract with you; legal obligations |
| Sending account, security, payment, and dispute emails | Performing our contract with you |
| Preventing fraud, spam, and abuse; keeping the platform secure | Our legitimate interests; legal obligations |
| Recommending jobs or freelancers and improving WorkAm | Our legitimate interests |
| Keeping financial records and responding to lawful requests | Legal obligations |
| Marketing emails, if we send them | Your consent, which you can withdraw at any time |
We do not sell your personal data.
4. What other users can see
Your public profile, including your name, photo, skills, portfolio, ratings, and reviews, can be seen by other users. Employers see the applications you send them, and both sides of a contract see the workroom messages and files. Your email address, phone number, and bank details are not shown on your public profile.
5. Who we share it with
We share personal data only with service providers that help us run WorkAm, and only what each one needs:
- Bachs for card payments, bank account checks, and payouts.
- Cloudflare (R2 storage) to store workroom and milestone files.
- Hosting providers that run our servers and database, and our email delivery provider.
- Authorities when the law requires it, or to protect the safety and rights of our users and WorkAm.
Some providers store data outside Nigeria. When that happens, we rely on the safeguards allowed by the Nigeria Data Protection Act, such as the provider's contractual commitments to protect your data.
6. How long we keep it
- Account and profile data: while your account is open, and deleted or anonymised within 90 days of closing it.
- Payment and transaction records: at least 6 years, as required for tax and financial record keeping.
- Contract, workroom, and dispute records: as long as needed to resolve disputes and meet legal obligations.
- Server and security logs: kept for a short period, usually no more than 12 months.
7. Security
We use encrypted connections, hashed passwords, access controls, rate limiting, and private file storage where files can only be opened through short-lived links. No system is perfectly secure, so please use a strong, unique password. If a breach puts your rights at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.
8. Your rights
Under the Nigeria Data Protection Act you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, unless we need to keep it by law or for an open dispute;
- restrict or object to certain uses, including marketing;
- move your data to another service in a common format;
- withdraw consent you have given, without affecting earlier processing.
Email privacy@workam.com from the address on your account. We will reply within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
9. Children
WorkAm is only for people aged 18 and over. We do not knowingly collect data from children, and we delete such data if we find it.
10. Changes to this policy
We will update the "last updated" date when this policy changes and let you know by email or in the app about significant changes.