Session 6: Safety & Final Project

Losing a client's account is the single worst thing that can happen in this role, and it is almost always preventable. The protections are not complicated. Two-factor authentication on every account, always — an attacker with the password still cannot enter without the second factor, and this one setting prevents the large majority of takeovers. A password manager generating a unique long password per account, because reuse is how one breach becomes every breach. Never share a password in plain text over WhatsApp or email; use a proper sharing method or a manager's share feature.

Then the human vectors, which are where most Nigerian account losses actually happen. Phishing — a message claiming to be from Instagram or Facebook saying the account will be closed, with a link. No platform will message you that. Fake verification and 'business support' offers from strangers promising a blue tick or reach for a fee. Impersonation — someone registering the business's name and using its photographs to take deposits from customers, which damages the real business directly. And third-party apps: every 'who viewed your profile' or free-growth tool you authorise gets access, and a compromised one leaks it.

Set this up as a checklist you run for every client on day one: two-factor on, password manager, recovery email and phone current, no unknown third-party apps, and the owner — not only you — holding admin access. That last point matters ethically and practically: a client must never be locked out of their own business by a manager who left, and you should never be in a position where that is even a question.

Copyright is the one people trip over most. Using a photograph, a song or a design you did not create or licence is infringement, and it does not become acceptable because it is on the internet or because you credited the owner. Use your own material, properly licensed libraries, or the client's own assets, and for music use the platform's own licensed library for business accounts, which exists precisely because commercial use of popular tracks is otherwise restricted.

Advertising claims are the second. Nigerian advertising is regulated, and claims about health, weight loss, financial returns or guaranteed results carry real risk — for the business and for whoever wrote the post. The rule is simple: do not write a claim the business cannot substantiate, and be especially careful with anything medical or financial. 'Helps support' is not the same as 'cures', and the difference matters legally.

Disclosure is the third. Paid partnerships and sponsored content must be disclosed; presenting an advertisement as an independent opinion is deceptive and platforms provide the label for exactly this reason. Personal data is the fourth: customer names, phone numbers and order details shared in a screenshot or a testimonial without consent is a breach of trust and, under Nigeria's data protection framework, potentially a legal one. Blur or obtain consent. Finally, honesty about results — never buy followers or engagement, and never fabricate a testimonial. Both are detectable, both destroy the account's credibility, and neither is worth a fee.

A crisis is a moment when a business's reputation is publicly at risk: a product failure affecting several customers, an offensive post, an accusation, a leaked conversation, or a viral complaint. The accounts that survive handle it by a prepared method rather than by instinct, and the method has four steps. Respond fast, but not fast enough to be wrong — acknowledge within the hour, and buy time honestly rather than guessing. Take responsibility where it is due, without qualifiers; 'we are sorry you feel that way' is not an apology and everyone recognises it as one.

The third step is state the specific fix and the timeframe, because a complaint is really a request for evidence that the business will put it right. The fourth is follow up publicly when it is resolved, so the audience sees an ending rather than an open wound. What you never do is delete the complaint, argue with the complainant, blame a customer, or go silent — each of these turns a contained problem into a larger one, and silence in particular is read as indifference.

Prepare this before you need it. A short crisis statement template, a list of who must be informed and how fast, and an agreed line on the three or four scenarios most likely to arise for that specific business. When something happens at nine on a Saturday evening, having the template means the first response is calm and correct rather than defensive and improvised — and the first response is the one everyone remembers.

A simple written agreement protects both sides and takes an hour. It should cover: what you will deliver — number of posts per week, which platforms, whether it includes replies and how fast, whether it includes shooting or only posting; what the client must provide — product information, prices, photographs, approval turnaround, and who has authority to approve; the fee and payment terms — amount, when it is due, and what happens if it is late; the revision and approval process; the term and how either side ends it; and who owns the content afterwards.

The clauses that prevent the most trouble are the practical ones. An approval turnaround — 'feedback within 48 hours, otherwise the post goes out as drafted' — prevents the situation where a client's silence delays a month of content and then blames the schedule. A deposit or first month in advance establishes that the work is real. A clear scope stops the quiet expansion from three posts a week to daily posting plus video plus WhatsApp replies at the same fee. And stating who owns the content avoids an argument later, particularly if the client took the photographs.

You do not need a lawyer for a straightforward retainer, but you do need it in writing, dated, and signed or at least explicitly agreed by message. In practice most disputes in this work arise not from bad faith but from two people who genuinely remembered the arrangement differently, and a page of writing prevents almost all of that.

The deliverable is a complete social media management package for a real business, and it has six parts. The audit and foundation — the profile audit with fixes applied, the audience definition, the positioning sentence, the platform choice with reasoning, and four content pillars. The month plan — a calendar mapping posts to pillars, with the ratio stated. The content — one batched week of posts, each with its format, hook, caption, keywords and tags, plus one edited reel. The community system — greeting and away messages, ten quick replies, the voice guide, and the complaint and troll scripts.

The fifth part is the security and legal checklist — two-factor confirmed, password manager in use, no unknown third-party apps, owner holding admin access, and a note on copyright, disclosure and claim limits for this specific business. The sixth is the report template — the two-page structure with the enquiries headline, ready to be filled in at the end of the first real month.

Present it as a case study rather than as loose files: what the business is, what the goal was, what you built, and what you expect it to produce. Then price it as a monthly retainer rather than per post, because the value is continuity — a page that is consistently managed compounds, and a bundle of posts does not. This package is what you attach to every future enquiry, and it is the artefact that lets you charge a monthly fee instead of a per-post one.