Privacy Policy

We collect information necessary to deliver workforce management, escrow payments, and recruitment services: • Identity & Profile Data: Full name, official email address, phone number, government-issued identification (NIN, BVN, Passport, or Driver's License), and corporate registration documents. • Professional & Career Data: Resumes, CVs uploaded to Resume Studio, employment history, portfolio links, educational qualifications, skills assessment results, and verified references. • Financial & Transactional Data: Bank account details, platform eWallet transaction records, invoice history, tax withholding records, and disbursement logs. Payment card details are tokenized and processed through PCI-DSS Level 1 certified processors. • Technical & Usage Data: IP addresses, browser types, device identifiers, session cookies, login timestamps, and platform navigation metrics.

We process personal data strictly for lawful operational and contractual purposes: • Account Administration: Authenticating users, providing access to role-specific portals (/cl, /tl, /af), and maintaining account security. • Matching & Sourcing: Pairing vetted specialists with enterprise hiring requisitions and facilitating recruiter rental sprints. • Escrow & Financial Operations: Managing wallet balances, calculating statutory withholdings (PAYE, VAT, WHT), executing payouts, and detecting fraudulent activity. • Resume Studio & Career Services: Generating ATS-optimized resumes and professional CV formats. • Legal Compliance: Satisfying mandatory KYC/AML regulations, statutory audit trails, and reporting obligations.

We do not sell, rent, or trade your personal data to third parties. We share data only under strictly regulated conditions: • Enterprise Clients & Specialists: Candidate resumes, skill assessments, and contact information are shared with prospective employers solely during active hiring or contract discussions. • Regulated Financial Institutions: Banking partners, licensed payment gateways, and settlement providers to execute wallet deposits and bank transfers. • Statutory Authorities: Government tax authorities (e.g., FIRS, State Internal Revenue Services) and regulatory agencies where required by compulsory legal processes. • Technology Service Providers: Cloud infrastructure hosts, SMS/email verification partners, and security monitoring providers bound by stringent confidentiality agreements.

We deploy enterprise-grade security controls: • Encryption in Transit & at Rest: All communications are encrypted using TLS 1.3, and databases employ AES-256 bit encryption. • Access Governance: Principle of least privilege (PoLP) and multi-factor authentication (MFA) across all administrative and production access layers. • Vulnerability Management: Regular security scans, automated penetration testing, and continuous audit logging.

We use essential, analytical, and functional cookies to ensure smooth site navigation, preserve authentication sessions, and measure page performance. You can manage your cookie preferences at any time through your browser settings or via the cookie controls on our platform.

We retain account information for the duration of your active platform relationship. Financial records, invoice logs, and contractual agreements are retained for 7 years following account closure to comply with statutory accounting and tax audit mandates under applicable law.

Under applicable data protection regulations (including the NDPA, NDPR, and international frameworks where applicable), you have the right to: • Access: Request copies of your personal data held in our systems. • Rectification: Correct incomplete or inaccurate profile details directly from your dashboard. • Erasure: Request deletion of personal records, subject to statutory retention limits for financial transactions. • Restriction & Objection: Restrict or object to data processing for specific non-essential activities. • Portability: Receive your personal and career history in a structured, machine-readable format.

Where international enterprise clients engage remote specialists across borders, data transfers are conducted using standard contractual clauses and recognized adequacy frameworks to guarantee equivalent privacy protection.

We may update this Privacy Policy periodically to reflect technological advances or statutory amendments. Material changes will be notified through our platform interface or by email before taking effect.

If you have questions, complaints, or wish to exercise your data privacy rights, please contact our Data Protection Officer: Email: privacy@oaas.africa / dpo@oaas.africa Address: Victoria Island, Lagos, Nigeria We respond to all verified data requests within 30 calendar days.