Privacy Notice

This notice explains how Jubal Global Music Services Limited ("Jubal", "we") collects and uses personal data when you use the Jubal app and website, and the rights you have under the Nigeria Data Protection Act 2023 and, where they apply to you, other data-protection laws. Jubal is the data controller.

What we collect

• Account details: your name, username, display name and date of birth.
• Contact details: your phone number and email address, used to sign you in, keep your account secure and tell you about your bookings and payments.
• Identity verification: the result of checking your identity with a licensed verification provider, such as your NIN verification result and the name and date of birth it returns. If you complete a selfie or liveness check, it is processed by that provider with your explicit consent; Jubal receives the result, not your face template. We do not store your full NIN.
• Payment and payout details: transactions, fees, escrow balances, wallet activity and the bank account you choose for payouts. Card details are handled by our licensed payment partners and are never stored by Jubal.
• Your content: Sparks, profile media, captions, comments, reviews and service listings you publish.
• Messages and bookings: chats, offers, briefs, agreements, delivery files and dispute evidence.
• Device and security data: device identifiers, app version, IP address, sign-in history and security checks, used to protect your account and prevent fraud.
• Location: the city you choose to show on your profile. We do not collect your precise location.
• Usage data: views, follows, searches and interactions, used to rank and recommend creators and to improve Jubal.

Why we use it, and our lawful basis

• To provide Jubal under our Terms (contract): your account, discovery, messaging, bookings, escrow, wallet, payouts, reviews and support.
• To meet legal duties (legal obligation): age checks, identity and anti-money-laundering checks, tax and accounting records, and lawful requests from authorities.
• To keep Jubal safe (legitimate interests): preventing fraud, scams and account takeover, moderating content, enforcing our Community Guidelines and improving the service. Where we rely on this basis we weigh it against your rights, and you may object.
• With your consent: marketing messages, personalised recommendations and biometric checks. You can withdraw consent at any time in Settings, as easily as you gave it.

Who we share it with

We never sell your personal data. We share it only as needed to run Jubal:

• with the other party to a booking, such as your name, the brief and the delivery, and publicly where you choose to publish content;
• with our licensed payment and banking partners, to collect payments, hold wallet balances and make payouts;
• with identity-verification, messaging (SMS, WhatsApp and email), hosting, content-moderation and customer-support providers who process data on our instructions under written agreements;
• with authorities where the law requires it, and with professional advisers or a buyer of our business under confidentiality.

International transfers

Jubal's systems are hosted by Amazon Web Services in the United Kingdom, and some of our providers process data in other countries. We transfer personal data outside Nigeria only on a basis permitted by the Nigeria Data Protection Act 2023, record that basis, and protect the data with contracts, encryption and access controls.

How long we keep it

• Your account and profile: while your account is open, and for 30 days after you ask us to delete it, in case the request was a mistake.
• Payment, payout, booking and agreement records: 6 years after the end of the relevant financial year or booking, for accounting, tax, chargebacks and legal claims.
• Identity-verification results: while your account is open and for up to 5 years after it closes, where anti-money-laundering rules require it.
• Security logs: 2 years. Raw usage events: 13 months.
• Content removed for breaking our rules: 180 days, to allow appeals, unless the law requires longer.
• Backups roll over within 35 days, so deletions reach them within that time.

Your rights

You can ask to access, correct, delete or move your personal data, to restrict or object to how we use it (including for marketing and profiling), to withdraw consent, and not to be subject to decisions with significant effects made solely by automated means. Many of these are available in the app under Settings, including downloading your data and deleting your account. We respond within 30 days of confirming your identity, free of charge. Some records must be kept even after deletion, such as payment records the law requires, and we will tell you what we keep and why.

Contact our Data Protection Officer at privacy@jubal.africa. You also have the right to complain to the Nigeria Data Protection Commission.

Security

We protect your data with encryption in transit and at rest, strict access controls with every staff access logged, device-bound sign-in and continuous monitoring. If a breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

Age

Jubal accounts are for people aged 18 and over. If we learn that an account belongs to someone under 18, we restrict it and delete data we do not need to keep.

Changes to this notice

We will tell you in the app before any significant change takes effect.