Privacy Policy
1. Introduction
Ojamaker ("we," "us," or "our") operates a software-as-a-service (SaaS) eCommerce platform that enables merchants ("Store Owners") to create and manage online stores, and allows customers ("Shoppers") to purchase products from those stores. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform at ojamaker.com or any of our associated store subdomains.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when you: • Create an account (email address, name, phone number, password) • Set up a store (business name, logo, branding preferences, contact details) • Make a purchase (shipping address, billing address, payment details) • Contact customer support (communication history) • Subscribe to marketing communications (email address, preferences)
2.2 Information Collected Automatically
When you access our platform, we automatically collect: • Device information (browser type, operating system, device type) • Log data (IP address, access times, pages viewed, referring URL) • Analytics data (page interactions, clicks, scroll depth) • Location data (country, city based on IP address)
2.3 Information from Third Parties
We may receive information from: • Payment processors (transaction status, payment method type - we never receive or store full card numbers) • Social login providers (Google - name, email, profile picture if you sign in via Google) • Domain registrars (domain registration status)
3. How We Use Your Information
We use the information we collect to: • Provide, maintain, and improve our platform and services • Process transactions and send related information (confirmations, invoices) • Send promotional communications (with your consent) • Respond to your comments, questions, and support requests • Monitor and analyze usage patterns and trends • Detect, investigate, and prevent fraudulent transactions and abuse • Comply with legal obligations • Personalize your experience and provide AI-powered recommendations
4. How We Share Your Information
4.1 With Store Owners
When you make a purchase from a store on our platform, we share your order information (name, email, shipping address, order details) with the Store Owner to fulfill your order. Store Owners are independent merchants responsible for their own privacy practices.
4.2 With Service Providers
We share information with third-party service providers who perform services on our behalf: • Payment Processors: Paystack, Flutterwave, and Stripe for payment processing • Email Services: SendGrid for transactional and marketing emails • AI Services: OpenAI for our AI Sales Agent and visual search features • Domain Services: Namecheap for custom domain registration • Error Tracking: Sentry for monitoring and improving platform stability • Communication: Twilio for WhatsApp notifications
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
4.4 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically: • Account information: Retained while your account is active and for 2 years after deletion • Transaction records: Retained for 7 years for tax and legal compliance • Analytics data: Aggregated and anonymized after 24 months • Support communications: Retained for 3 years after resolution
6. Your Rights and Choices
Depending on your location, you may have the following rights: • Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate or incomplete information • Deletion: Request deletion of your personal information (subject to legal requirements) • Portability: Request a copy of your data in a structured, machine-readable format • Opt-out: Unsubscribe from marketing communications at any time • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time To exercise these rights, please contact us at privacy@ojamaker.com.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including: • Encryption of data in transit (TLS/SSL) and at rest • Secure password hashing • Regular security assessments and penetration testing • Access controls and authentication requirements • Employee training on data protection However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
9. Children's Privacy
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to: • Keep you logged in to your account • Remember your preferences and settings • Analyze platform usage and improve our services • Deliver relevant content and features You can control cookies through your browser settings. Disabling cookies may affect some platform functionality.
11. Nigerian Data Protection Regulation (NDPR) Compliance
For users in Nigeria, we comply with the Nigerian Data Protection Regulation (NDPR). This includes: • Processing data lawfully, fairly, and transparently • Collecting data for specified, explicit, and legitimate purposes • Ensuring data is adequate, relevant, and limited to what is necessary • Maintaining accurate and up-to-date records • Implementing appropriate security measures • Notifying the relevant authority of data breaches within 72 hours Our Data Protection Officer can be contacted at dpo@ojamaker.com.
12. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us or email us at privacy@ojamaker.com.
Ojamaker
Lagos, Nigeria
Email: privacy@ojamaker.com
Last updated: February 2026