Last updated 5 September 2026 · Ojawa.app, Lagos, Nigeria
This Privacy Policy explains how Ojawa.app (“Ojawa,” “we,” “us”) collects, uses, and protects your personal data when you use our marketplace. It’s written with the Nigeria Data Protection Act 2023 (NDPA) in mind, and applies to every visitor, buyer, seller, and advertiser on the platform.
Account information: phone number (verified by one-time code), or email and password / Google account if you sign up that way; display name; profile avatar initials; general area (e.g. “Yaba, Lagos”), not precise GPS.
Marketplace activity: listings you post (title, description, photos, price, category), messages and offers you send in chat, bids you place, saved listings and saved searches, reviews you write or receive.
Deal verification: your Deal Code (stored as an irreversible hash, never in plain text once a deal is confirmed) and the timeline of a deal (agreed, verified, confirmed, or expired).
Payment metadata: if you buy a boost or ad campaign, Paystack processes the charge and shares with us only what we need to activate the feature and issue a receipt (amount, reference, status) — we never see or store your full card number.
Optional identity verification: if you choose to complete NIN/BVN-based “Verified Trader” verification once that feature launches, we’ll collect only what’s needed to confirm your identity through our verification provider.
Communications data: if Ojawa sends you a WhatsApp/SMS message (via Twilio) for OTP codes or notification fallbacks, or an email, we retain a record that the message was sent and its delivery status.
Technical data: standard web request logs (IP address, device/browser type, pages visited) collected by our hosting provider for security and performance.
We do not sell your personal data to third parties, and we do not use your chat messages or listing content to serve you third-party ads.
We keep your account data for as long as your account is active. If you delete your account, we mark it for removal (a “soft delete”) so it stops appearing to other users immediately, and permanently erase personal data after a limited retention window — kept only as long as needed to resolve open disputes, meet legal/accounting obligations, or prevent fraud (for example, a banned account’s identifiers may be retained longer to stop it from re-registering).
Under the NDPA, you have the right to:
To exercise any of these, email privacy@ojawa.app. We’ll respond within the timeframe required by law.
Deal Codes and one-time verification codes are stored as one-way hashes, never in plain text once used. Traffic to Ojawa is encrypted in transit. Access to production data is restricted to authorized team members. No system is 100% secure, and we can’t guarantee absolute security — if we become aware of a breach affecting your personal data, we’ll notify you and the relevant regulator as required by law.
Ojawa is intended for users 18 and older. We do not knowingly collect personal data from anyone under 18.
Some of our service providers (see Section 4) operate infrastructure outside Nigeria. Where your data is processed abroad, we take steps to ensure it receives a comparable level of protection, as required by the NDPA.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated date at the top of this page, and, where appropriate, an in-app notice.
Questions about this policy or your data? Email privacy@ojawa.app.
