Privacy Policy

This Privacy Policy covers two kinds of people: Providers who run a business on Prework, and Clients who book with a Provider through a Prework booking page. It explains what we collect, why, and who it’s shared with.

From Providers: name, email, phone, business name and category, logo and cover photo, and payout details (bank name, account number, and account name) used to set up automatic payment splitting.

From Clients: first and last name, email address, and any additional fields a Provider’s contract requests (for example, a shoot date or project details). Payment card and bank details are collected directly by Paystack, our payment processor — Prework never receives or stores them.

Automatically: cookies required to keep you signed in. We also collect technical data such as IP address and device and browser information, for security, fraud prevention, audit, and contract-evidence purposes (for example, to verify the circumstances under which a booking or contract was signed).

• To operate booking pages, generate agreements, and process payments
• To split and route payments between Prework’s platform fee and a Provider’s connected payout account
• To send account and booking-related notices (for example, a payment receipt)
• To keep the platform secure and prevent fraud

We don’t sell personal information. It’s shared only where the platform requires it:

• With the Provider a Client books with — a Client’s booking and contract details are visible to that Provider, since the booking is an agreement between them
• With Paystack, to process payments and, where connected, route a Provider’s share of each payment to their bank account
• With our infrastructure providers (our self-hosted database and application servers; Cloudflare R2 for file storage), who process data on our behalf and are not permitted to use it for their own purposes

All card and bank details are handled directly by Paystack, a PCI-DSS compliant payment processor. Prework stores only the outcome of a transaction — amount, currency, status, and Paystack’s reference for it — never the underlying card or account credentials used to pay.

We keep account and booking records for as long as the account is active and for a reasonable period after, to meet legal, accounting, and dispute-resolution needs. You can request deletion as described below.

Access to Provider and Client data is restricted by row-level access controls scoped to each business, and payment verification happens server-side against Paystack directly rather than trusting information from a browser. No system is perfectly secure, and we can’t guarantee absolute security.

Depending on where you’re located, you may have the right to access, correct, or request deletion of your personal information. To make a request, contact us using the details below; a Client asking about their booking data should also reach out to the Provider they booked with, since Providers control their own Client records.

Prework uses cookies required to keep you signed in and to remember basic session state. We don’t use third-party advertising cookies.

Prework is not directed at children under 18, and we don’t knowingly collect information from them.

We may update this Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Questions about this Policy, or requests about your data, can be sent to the contact address listed on the Prework website.