Privacy Policy
1. Who We Are
Juzt-Tap is operated by Herdian Dynamics. We are the data controller for personal data collected through the Platform. Our contact details are at the bottom of this policy.
2. Data We Collect
| Category | What we collect | When |
|---|---|---|
| Account data | Full name, email address, password (hashed), professional type, language preference | At registration |
| Profile data | Job title, bio, skills, portfolio items, intro video URL, location, social links, cover photo, avatar | When you edit your profile |
| Verification data | Government-issued ID (front and back), a live photo of you holding it, the ID number and expiry date you type, submission notes, and the declaration you tick (date, time, IP address, Terms version) | When you request verification |
| Business verification data | Business registration or trade documents (RCCM, NIU tax registration, patente, trade card), their number and expiry date | When you request the Registered business seal |
| Safe Hire data | Proof of address (utility bill, lease or residence certificate), location plan and directions, your quartier and city, a criminal record extract (bulletin n°3) and its issue date, the Safe Hire pledge you accept | Only if you choose to request Safe Hire |
| Consent data | Date, time, IP address and version of Terms & Privacy Policy accepted | At registration |
| Communication data | Messages sent and received on the Platform | When you use messaging |
| Usage data | Pages visited, features used, NFC card scans (time, approximate location) | During Platform use |
| Technical data | IP address, browser type, operating system, session identifiers | Automatically on access |
| Payment data | Billing name, email; card details are processed directly by our payment processor and never stored by us | When you subscribe |
3. How We Use Your Data
- To provide the Platform - create and manage your account, display your profile, enable messaging, deliver NFC card features
- To verify identity and credentials - review submitted documents, assign verification levels and badges
- To keep badges accurate - remind you before a verified document or badge expires, and pause or hide a badge when its document has expired
- To personalise your experience - recommend connections, suggest opportunities, surface relevant content
- To communicate with you - send account emails (verification, security alerts, password resets), service updates and, with your consent, marketing communications
- To ensure safety and security - detect fraud, abuse, spam and malicious activity; enforce our Terms
- To comply with legal obligations - respond to lawful requests from authorities; maintain required records
- To improve the Platform - analyse usage patterns, diagnose bugs, run A/B tests
- To evidence consent - record that you accepted our Terms at the specific date, time and IP for legal compliance
4. Legal Basis for Processing
| Processing activity | Legal basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Displaying your public profile | Performance of contract / Legitimate interests |
| Identity and business verification (documents) | Your explicit consent, given by ticking the declaration when you submit (Law No. 2024/017 of 23 December 2024 on personal data protection in Cameroon) |
| Safe Hire (proof of address, criminal record extract) | Your explicit consent; Safe Hire is optional and these documents are used only to decide on the badge |
| Expiry reminders | Performance of contract (keeping your badges valid) |
| Sending transactional emails | Performance of contract |
| Marketing communications | Consent (you may opt out at any time) |
| Fraud detection and security | Legitimate interests / Legal obligation |
| Recording terms acceptance | Legal obligation / Legitimate interests |
| Analytics and Platform improvement | Legitimate interests |
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only in the following circumstances:
- Other users: Your public profile information is visible to other Platform users according to your privacy settings
- What other members see about verification: your badges, the Registered business seal and the date its documents are valid until, and for Safe Hire only your quartier and city. Your documents, ID number, address, directions and criminal record extract are never shown to other members
- Service providers: Hosting providers, email delivery services, payment processors - all bound by data processing agreements and prohibited from using your data for their own purposes
- NFC card fulfilment: Your name and delivery address are shared with our card manufacturing and courier partners
- Legal authorities: We disclose data when required by law, court order or to protect the safety of users or the public
- Business transfers: In the event of a merger or acquisition, your data may be transferred; we will notify you in advance
All third-party processors are carefully selected and bound by appropriate data protection agreements.
6. Data Retention
| Data type | Retention period |
|---|---|
| Account and profile data | For the life of your account, plus 90 days after deletion request |
| Identity and business verification documents (photos) | Deleted automatically within 30 days of the final verification decision |
| Safe Hire proof of address, location plan and criminal record extract | Deleted when reviewed, and at the latest within 30 days of the decision. We keep only the fact they were checked, the date and the reviewer |
| Verification record (type of check, decision, date, document number, expiry date, your declaration) | For the life of your account, so badges and reminders stay accurate; the declaration record for 7 years |
| Messages | For the life of your account; deleted with your account |
| Consent records (terms acceptance) | 7 years (legal compliance requirement) |
| Audit and security logs | 2 years |
| Payment records | 7 years (tax and financial regulation) |
| NFC scan events | 2 years from scan date |
After the retention period, data is securely deleted or anonymised.
7. Security
We implement technical and organisational measures to protect your data, including:
- Passwords stored using bcrypt hashing - we cannot read your password
- HTTPS/TLS encryption for all data in transit
- Verification documents encrypted (AES-256) and stored outside the public website, viewable only by authorised reviewers, and deleted automatically within 30 days of a decision
- Regular security reviews and access controls for staff
- CSRF protection on all forms, rate limiting on authentication endpoints
No system is completely secure. If you discover a security vulnerability, please disclose it responsibly to legal@juzt-tap.com.
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Session management, CSRF tokens, language preference - required for the Platform to function
- Preference cookies: Theme (light/dark mode) - stored locally
- Analytics: We may use privacy-respecting analytics to understand Platform usage; no data is sold to advertisers
You can manage cookies through your browser settings. Disabling essential cookies may prevent the Platform from functioning correctly.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
To exercise any right, contact us at legal@juzt-tap.com. We will respond within 30 days. Identity verification may be required before we process your request.
10. Children's Privacy
Juzt-Tap is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately and we will delete the account and all associated data within 72 hours.
11. International Data Transfers
Your data may be processed on servers located outside your country of residence. Where we transfer data internationally, we apply appropriate safeguards such as standard contractual clauses or equivalent mechanisms to ensure your data receives an equivalent level of protection.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect and display a notice on the Platform. The "Last updated" date at the top always reflects the current version.
13. Contact and Complaints
For privacy enquiries, data subject requests or complaints:
Herdian Dynamics
Email: legal@juzt-tap.com
Response time: within 30 days (legal requirement)
In Cameroon, your rights are protected by Law No. 2024/017 of 23 December 2024 on the protection of personal data. If we are unable to resolve your complaint, you may lodge a complaint with the personal data protection authority established under that law. If you are in the European Union, you may also contact your local data protection authority.