Account access & authentication
- Accounts are protected with email/password or Google sign-in via Supabase Auth.
- Sessions are held in your browser and expire automatically; you can sign out at any time.
- Admin roles are stored separately from user profiles to prevent privilege escalation.
- Admins can suspend or reinstate accounts. Every such action is written to an internal audit log.
Data access & row-level security
- Every database table with user data uses Postgres row-level security (RLS).
- You can only read your own profile fields (name, avatar) through a public projection — contact details are never exposed to other users.
- Errands, offers, favorites, and boost activity are scoped to the owning user.
- Sensitive server operations (moderation, verification, payment webhooks) go through server functions that re-check your role before running.
Messaging & realtime
- Every conversation is tied to a specific errand. Only the customer and assigned provider on that errand can read or post messages; admins may view for moderation.
- Realtime updates use Supabase channels and inherit the same RLS rules — you only receive messages you are allowed to read.
- A permanent safety reminder is pinned to every chat: only pay after confirming the service is completed, and keep conversations on CendLink.
- Attachments (images and documents) are stored in a private bucket. Access URLs are signed and time-limited.
Payments
CendLink does not process or hold payments between customers and providers. Boost purchases by providers are handled through Paystack; webhook events are signature-verified before any account is credited.
What we collect
- Account details you provide (name, email, phone, avatar, business details for providers).
- Errand content and messages you send.
- Basic usage signals (impressions, views, clicks) that help providers understand performance. Signals are aggregated per provider, not resold.
Retention & deletion
You can update your profile at any time. To delete your account, contact support via the Contact page — an admin removes your account and cascades related rows (errands, offers, messages, favorites). Some records required for fraud prevention (audit log, payment receipts) may be retained for a limited period.
Reporting a security issue
If you believe you've found a vulnerability or account issue, please reach out via the Contact page. Please do not test attacks against other users' accounts or data.
This document describes current CendLink practices and may change as the product evolves. It is not a certification and does not replace our Privacy Policy or Terms.