Privacy Policy

When you register: your name, email, phone number, city and suburb, and whether you are a client or a worker.

When you verify your identity: a photo of your national ID or passport and a selfie. Workers may also upload certificates for their qualifications, with the qualification's name, type, institution, year and expiry date.

When you use Graft: the tasks you post (descriptions, photos, budget), the offers you send, your messages, the photos and files you send in conversations, locations you choose to share, and your reviews and ratings.

When you pay or get paid: the payment reference, amount, currency and status of each transaction, and the mobile money number you give us for payouts. We do not store card numbers or mobile money PINs.

Automatically: your device and app version, the pages and screens you use, notification settings and push notification tokens, and approximate location if you allow it.

To run Graft: connect clients with workers, verify identities, process payments and payouts, keep escrow, resolve disputes, prevent fraud and enforce our rules, send you notices about your account and jobs, and improve the platform. We may contact you about your account, task updates or platform news, and you can turn most of these off in your notification settings. We do not sell your personal data.

Visitors who are not signed in see a limited preview of a worker profile: your first name and the initial of your last name, trades, verification badge, confirmed qualifications, ratings and bio. Signed-in users see more. Nobody sees your ID documents, selfie, certificates or phone number.

Worker profiles are public pages, so search engines such as Google may show them in their results, in the same limited form a visitor sees: first name and initial, never your full name, and we ask search engines not to show profile photos. You can take your profile out of search engines at any time in Profile, Privacy, "Show my profile on Google". Search engines can take a few weeks to drop a page they already have. Profiles of people who only hire are never offered to search engines.

A confirmed qualification is shown by name, institution and year, never as the document itself.

They are stored privately and can be opened only by authorised Graft staff for verification, and are never shown to other users. When staff open an image it is re-encoded first, which removes hidden data such as the location a photo was taken.

We delete identity documents and certificates 30 days after the review is complete. Your selfie is kept while your account is open, so we can check that a later account, a dispute or a report involves the same person, and is deleted with your account or sooner if you ask. What remains is the outcome: that you were verified, your verification level, and the details of a confirmed qualification. A document is not deleted while it is under review, and a new submission after a rejection starts its own review.

We keep documents longer only where they are needed to investigate or trace a fraud incident, to handle a dispute or a legal claim, or to meet a legal duty, and only while that reason applies. Documents belonging to a suspended account, or to a person involved in an open dispute, are kept for that time. If you delete your account we delete your documents when the account is removed, 30 days later, unless one of these reasons applies.

Photos and files you send are stored privately. Other members can open only what was sent to them.

To keep people safe, our systems automatically check messages, photos, job posts and sign-ups for signs of fraud, scams, abuse and attempts to take payment outside Graft. Our team may review conversations, including photos and files, to detect or investigate fraud or a breach of our rules, to handle a report or a dispute, or where the law requires. Each review is recorded. Where fraud is suspected we may keep messages and documents for as long as the investigation needs. You can report any message sent to you by pressing and holding it.

A location you send shows exactly where you were at that moment to the person you send it to. We do not track your location in the background. Search uses an approximate location, reduced to a city, and only if you allow it.

Payments are carried out by independent payment providers, currently Payonify (EcoCash, USD) and Pesepay (ZWG, with cards, InnBucks and EcoCash), and the networks and banks behind them. They receive what they need to process a payment and have their own privacy practices. We keep records of each transaction for accounting, tax and dispute purposes for as long as those rules require, including after an account is deleted.

Payment providers (to process payments and payouts), our cloud hosting, email and notification providers (to run the service), and other users to the extent described above. We may also share information where the law requires, to answer a lawful request from the authorities, or to protect people from fraud or harm. We do not sell your data or share it for advertising.

Identity documents and certificates: 30 days after review, unless kept longer under section 4. Selfies: while your account is open. Payment and contract records: as long as accounting, tax and dispute rules require. Messages and other account information: while your account is open, and removed or anonymised when you delete it, except where we must keep it for the reasons above. A deleted account is closed straight away and its information is removed or anonymised 30 days later, so it can be restored if you change your mind.

You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it, by writing to support@graft.co.zw. You can delete your account at any time from your profile settings. Some records must be kept for legal reasons, as explained above.

We use private storage, access controls and encryption in transit to protect your information, and limit who can see identity documents. No system is perfectly secure. Keep your password private, and tell us straight away if you think your account has been used by someone else.

We use essential cookies to keep you signed in and to keep your session secure.

We also record how Graft is used, on the website and in the app: the pages and screens opened, the type of device, operating system, browser or app version, the kind of connection (for example Wi-Fi or mobile data), and your town and country, which we work out from your internet connection. When you are signed in, this is linked to your account. We use it to improve Graft and to decide where and how to promote it. We do not use advertising IDs, read your GPS location for this, or sell or share this information. The rest is kept for 13 months.

To stop it, choose "Essential only" on the cookie banner on the website, or switch off "Share usage statistics" under Sign-in and security in the app. Adverts on the website are shown by Google, which uses its own cookies under its own policy.

If we change this policy in a way that matters, we will tell you and update the date above. Questions: privacy@graft.co.zw, or write to Graft Zimbabwe, Harare, Zimbabwe.