Privacy Policy

1. Who We Are

EyeOnSite is operated by Manti Labs LLC, a Delaware limited liability company with operations in Accra, Ghana ("Manti Labs," "we," "us," or "our"). We are the data controller responsible for your personal data when you use the EyeOnSite platform.

Data Protection Officer: Maku Mazakpe (dpo@eyeonsite.com). For UK/EU matters, our representative can be contacted at the same address.

2. What Personal Data We Collect

2.1 Data You Provide Directly

• Account information: phone number, name, email address, profile photo
• Identity verification (Inspectors): government-issued ID document, selfie for liveness verification
• Payment information: credit/debit card details (processed by Stripe), mobile money number (processed by Flutterwave), bank account details
• Task information (Clients): property locations, inspection instructions, project descriptions
• Evidence data (Inspectors): photographs, videos, checklist responses, written notes and observations
• Communications: messages sent through the Platform, support requests, feedback

2.2 Data We Collect Automatically

• Device information: device model, operating system version, app version, unique device identifiers
• Location data: GPS coordinates during evidence capture (Inspectors), approximate location for task matching
• Usage data: features accessed, tasks created or completed, session duration, interaction patterns
• Log data: IP addresses, access timestamps, error logs, referral URLs
• Photo metadata: EXIF data including capture timestamp, camera sensor information, GPS coordinates embedded in photographs
• Motion data: accelerometer readings during evidence capture (used for fraud detection)

2.3 Data from Third Parties

• Payment processors: transaction confirmation, payment status (from Stripe and Flutterwave)
• Background check providers: screening results for Inspector verification (where available)
• Google Maps: geocoding data, map imagery

3. How We Use Your Data

3.1 To Provide the Service

• Create and manage your account
• Match Inspectors with Tasks based on location, availability, and qualifications
• Process payments and manage escrow
• Deliver Evidence Packages to Clients
• Send notifications about task status, payments, and platform updates

3.2 To Ensure Trust and Safety

• Verify Inspector identity and conduct background screening
• Detect and prevent fraud, including GPS spoofing, evidence fabrication, and duplicate submissions
• Compute evidence quality scores and Trust Scores
• Resolve disputes between Clients and Inspectors
• Enforce our Terms of Service and Community Guidelines

3.3 To Improve the Platform

• Analyze usage patterns to improve features and user experience
• Train and improve our fraud detection and quality assessment systems
• Conduct research using anonymized and aggregated data

3.4 Legal Basis for Processing (UK/EU Users)

• Contract performance: processing necessary to provide the Platform services you have requested
• Legitimate interests: fraud prevention, platform security, service improvement, and aggregated analytics
• Legal obligation: compliance with applicable laws, tax requirements, and regulatory obligations
• Consent: marketing communications and optional data processing (you may withdraw consent at any time)

4. Who We Share Your Data With

4.1 Other Users

Client name and task details are shared with matched Inspectors. Inspector name, profile photo, Trust Score, and completed task count are shared with Clients. Evidence Packages (including photos and GPS data) are shared with the commissioning Client.

4.2 Service Providers

• Stripe, Inc.: payment processing for international transactions
• Flutterwave Technology Solutions Limited: payment processing and mobile money payouts for African transactions
• Google Cloud Platform (Firebase): cloud infrastructure, authentication, data storage, push notifications
• Google Maps Platform: mapping, geocoding, and location services
• Google Cloud Vision API: photo quality analysis
• Background check providers: identity verification and screening (varies by country)

4.3 Legal and Regulatory

We may disclose your data where required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Manti Labs, our Users, or the public; or in connection with a merger, acquisition, or sale of assets.

5. International Data Transfers

EyeOnSite operates across multiple countries. Your data may be transferred to and processed in countries other than your country of residence, including the United States (where Manti Labs LLC is incorporated), Ghana (where our operations are based), and other countries where our service providers operate.

5.1 Safeguards for UK/EU Users

Where we transfer personal data from the UK or EEA to countries without adequate data protection, we implement Standard Contractual Clauses (SCCs) approved by the European Commission and/or UK Information Commissioner's Office, and additional technical and organizational measures where necessary.

5.2 Ghana, Nigeria, and Kenya Users

We comply with the cross-border data transfer requirements of the Ghana Data Protection Act 2012, the Nigeria Data Protection Act 2023, and the Kenya Data Protection Act 2019.

6. Data Retention

• Account data: retained while your account is active and for 24 months after account closure
• Evidence Packages: retained for 36 months after task completion
• Payment records: retained for 7 years as required by tax and financial regulations
• Fraud detection data: retained for 36 months
• Communication logs: retained for 12 months
• Usage analytics: anonymized and retained indefinitely

7. Your Rights

7.1 All Users

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal retention requirements)
• Account closure: close your account at any time through the app or by contacting us

7.2 UK/EU Users (Additional Rights under GDPR)

• Data portability, restriction of processing, right to object, and right to withdraw consent
• Lodge a complaint with your local data protection authority (UK: ICO; EU: your national supervisory authority)

7.3 African Users

• Ghana: rights under Data Protection Act 2012 (Act 843); complaints to the Ghana Data Protection Commission
• Nigeria: rights under NDPA 2023; complaints to the Nigeria Data Protection Commission
• Kenya: rights under DPA 2019; complaints to the Office of the Data Protection Commissioner

To exercise any of these rights, contact us at privacy@eyeonsite.com. We will respond within 30 days.

8. Data Security

• Encryption: all data in transit uses TLS 1.2+; data at rest is encrypted via Google Cloud's default encryption
• Access controls: role-based access with Firebase Security Rules; least-privilege principle
• Infrastructure: Google Cloud Platform with SOC 2, ISO 27001, and GDPR compliance certifications
• Payment data: processed by PCI DSS-compliant processors (Stripe, Flutterwave); never stored on our servers
• Photo security: evidence photos stored in Cloud Storage with time-limited signed URLs

If we become aware of a data breach likely to result in risk to your rights, we will notify affected users and relevant data protection authorities within 72 hours as required by applicable law.

9. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@eyeonsite.com.

10. Cookies and Tracking

Our mobile applications do not use cookies. Our website uses essential cookies necessary for the functioning of the site and, with your consent, analytics cookies (Google Analytics) to understand usage patterns. You can manage cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform at least 14 days before the changes take effect. The "Effective Date" at the top of this policy indicates when it was last updated.

12. Contact Us

• General inquiries: privacy@eyeonsite.com
• Data Protection Officer: dpo@eyeonsite.com
• Postal address: Manti Labs LLC, Accra, Ghana

Relevant Data Protection Authorities: Ghana (dataprotection.org.gh) · Nigeria (ndpc.gov.ng) · Kenya (odpc.go.ke) · UK (ico.org.uk)