Privacy policy

• Phone number. You sign in with it by a code sent by SMS. It is also how a rider or our staff reach you about an order.
• Name and saved address, if you add them, so a rider knows who and where to collect from.
• Location. When you choose a pickup point, the app reads your phone's location to find the nearest NodeLink service node. It is read only while you are using the app, never in the background, and you can drop a pin by hand instead.
• Order details. Pickup and drop-off addresses and their map positions, the sender's name and phone, the receiver's phone number, what the package is, its weight and size, and a photo if you add one.
• Payments. For a card payment you enter your card details on Paystack's page, not in our app; we never see or store your full card number. We keep the amount, a payment reference, whether it succeeded, and the record Paystack sends back, which can include the card type, its last four digits and the bank.
• Messages. Chats with your rider or a node agent: text, voice notes, pictures and PDF files you send.
• Call records. In-app voice calls with your rider go directly between the two phones and are not recorded. We keep who called whom, when, and whether the call connected.
• Ratings you give a rider. Your account also has a customer rating that riders can see.
• Push notification token for your device, so we can tell you when a rider is assigned, has arrived or has delivered.
• The date you accepted the customer policy, and which version.

The app asks for the camera and microphone only when you choose to take a package photo, send a voice note or make a call.

• Identity and application details you give when you apply: name, phone number, date of birth, gender, home address, NIN or other ID type and number, photos of your ID, driver's licence, vehicle papers, hackney or rider's permit and insurance paper, proof of address if you give one, a profile photo, your vehicle and plate number, and the bank account we pay you into.
• Your guarantor's details, if we ask you for a guarantor. Your guarantor gives them to us themselves on a form we send through you: their name, relationship to you, phone numbers, email, occupation and employer, addresses, the type and number of their ID with a photo of it, a photograph of themselves and their signature. They agree to this on the form.
• Your PIN, stored only in scrambled (hashed) form, and a count of recent failed sign-in attempts on your number.
• Location, including in the background. See the next section.
• Delivery records. The jobs you were offered, accepted, declined or let expire, pickup photos you take of each package, delivery confirmations, late deliveries, returns and claims.
• Money records. Your earnings, cash-trip commission owed, remittances you send us and the receipt you upload for each, and payouts.
• Conduct records. Customer ratings, warnings, suspensions and any appeal you make.
• Messages and call records with customers and node agents, as described for customers above.
• SOS alerts. If you press SOS, we record your location from that moment until the alert is closed, and the audio, pictures or video your phone sends during it.
• Push notification token and whether your phone is a smartphone.

The NodeLink Rider app collects your phone's location even when the app is closed or not in use, while you are checked in at a service node or carrying a delivery. It stops when you check out and are not on a job. The app does not collect location at any other time.

We use it to:

• confirm you are at the service node when you check in, and check you out if you leave it;
• offer a new order to the rider who can reach the pickup point soonest;
• show the customer, the receiver and our staff where the package is while you are delivering it;
• tell the customer you have arrived at the pickup point;
• review a delivery that ran late, or a dispute about where a package was;
• send help to the right place if you press SOS.

We keep your latest position while you are checked in. We also store individual positions as part of a record: where you were when you accepted an order, your route while an SOS alert is open, positions sampled during a delivery that has gone past its time limit, and your position at the moment orders were matched. We do not keep a continuous history of your movements.

The customer and the receiver see your live position only while their own package is with you. You can turn location off in your phone's settings, but you cannot check in or take jobs without it.

• Receivers. The sender gives us your phone number and delivery address. We send a delivery code to that number by SMS; the rider needs it to hand over the package.
• Senders served at a service node. A NodeLink agent can create an order for you. We keep your phone number and name, confirm the number with a code sent by SMS, and record that you accepted the customer policy.
• Anyone opening a tracking link. The page shows the order's progress, the rider's first name and, while the package is on the way, the rider's position. We do not ask who you are.

• To create your account and sign you in.
• To arrange, carry out and prove a delivery, and to take payment for it and pay the rider.
• To check that a rider is who they say they are before they carry other people's property.
• To keep riders and packages safe, and to investigate loss, damage, lateness, fraud or abuse.
• To answer support requests and settle disputes and claims.
• To keep the accounting records the law requires.

We rely on our contract with you for the delivery itself, on legal obligation for accounting records, and on our legitimate interest in safety and preventing fraud for the rest. Location and identity documents are collected with your consent, which you give in the app or on the application form.

People involved in your delivery

• The rider assigned to your order sees the sender's name and phone, the pickup and drop-off addresses, the receiver's phone and the package details. Before an order is assigned, riders checked in at the same service node can see its addresses and package details so they can decide whether to take it, but no names or phone numbers.
• The customer sees the assigned rider's name, vehicle, plate number and rating, and the rider's position while the package is with them. They can message or call the rider through the app.
• NodeLink staff and node agents see what they need to run the service node, pay riders and handle support.
• A rider's guarantor may be contacted if a package or cash goes missing.

Companies that process data for us

We also disclose information to the police, a court or a regulator when the law requires it, or when a package appears to contain something illegal. Some of these companies process data outside Nigeria; we use them under agreements that require them to protect it.

Customers can delete their account in the NodeLink app under Profile, and riders can request deletion in the NodeLink Rider app under Account. You can also ask by email or phone without the app. The steps, and exactly what is deleted and kept, are on the account deletion page.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong;
• delete your data, or stop using it in a particular way;
• withdraw a consent you gave, such as for location.

Write to delivery@nodelink.ng. We reply within 30 days. If you are not satisfied with our answer you can complain to the Nigeria Data Protection Commission.

Data is encrypted in transit. Identity documents, chat attachments, pickup photos and SOS recordings are kept in private storage and opened only through short-lived links by the people entitled to see them. PINs and delivery codes are stored hashed. Staff access is by individual account and limited by role. No system is perfectly secure; if a breach affects you we will tell you and the regulator as the law requires.

NodeLink is not for anyone under 18. Customers must be 18 or older, and riders must be adults who hold a valid licence. We do not knowingly collect personal data from anyone under 18; if we learn that we have, or you write to tell us, we delete it.

When we change this policy we update the date at the top. If a change affects how we use data we already hold, we will tell you before it takes effect.