OKA234 Engine

This Privacy Policy explains how OKA234 ("we," "us," or "our") collects, uses, and protects your personal data when you use the OKA234 marketplace platform (the "Platform"). By using the Platform, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

1.1 Information You Provide

Account information: email address, password (hashed), name, phone number, country, and state
Business information: company name, business type, and verification documents (for business/wholesale accounts)
Transaction information: order details, shipping addresses, payment method information, and escrow records
Profile information: seller store names, agent bios, product listings, and reviews
Communications: messages sent through the Platform, support inquiries, and dispute correspondence
KYC documents: identity verification documents submitted by sellers and agents

1.2 Information Collected Automatically

Usage data: pages visited, features used, search queries, and interaction patterns on the Platform
Device information: browser type, operating system, device type, and screen resolution
Log data: IP address, access times, referring URLs, and error logs
Cookies and similar technologies: session cookies, authentication tokens, and analytics cookies as described in Section 6 below

1.3 Information from Third Parties

Payment providers: transaction confirmations and fraud signals from Stripe, Paystack, Flutterwave, and PandaScrow
Referral data: agent referral codes and attribution information

2. How We Use Your Information

We use your information to:

Provide, operate, and maintain the Platform
Process transactions and manage escrow payments
Facilitate communication between buyers, sellers, and agents
Process QC inspection requests and deliver reports
Detect and prevent fraud, abuse, and security incidents
Send transactional emails (order confirmations, shipping updates, verification links)
Send marketing communications (only with your consent; you can unsubscribe at any time)
Improve the Platform through analytics and user research
Comply with legal obligations and enforce our terms
Record terms acceptance (timestamp, IP address, and agreement version) for legal enforceability

3. How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances:

With other users as necessary for transactions: when a buyer places an order, the seller receives the buyer's name, shipping address, and order details. When a QC inspection is booked, the agent receives the inspection location.
With service providers: payment processors (Stripe, Paystack, Flutterwave, PandaScrow), email delivery services, cloud hosting providers, and analytics tools. These providers are contractually obligated to protect your data.
For legal compliance: when required by law, regulation, legal process, or governmental request.
Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
With your consent: when you explicitly authorize sharing.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Platform. Specific retention periods:

Account data: retained for the lifetime of your account, plus two (2) years after deletion for dispute resolution and legal compliance
Transaction records: retained for seven (7) years as required by Nigerian tax and financial regulations
Terms acceptance records: retained for the lifetime of the account to evidence binding agreement
KYC documents: retained for the lifetime of the seller/agent account plus one (1) year after deletion
Marketing preferences: retained until you unsubscribe

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit (TLS/SSL) and at rest
Secure password hashing (bcrypt)
Regular security audits and vulnerability assessments
Access controls and authentication mechanisms
Rate limiting and fraud detection systems

However, no method of transmission over the Internet or electronic storage is one hundred percent secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Cookies and Tracking Technologies

We use the following types of cookies:

Essential cookies: required for authentication, session management, and security. These cannot be disabled.
Analytics cookies: help us understand how users interact with the Platform. We use privacy-respecting analytics that do not track users across sites.
Preference cookies: remember your settings such as currency, language, and theme preferences.

You can control cookies through your browser settings. Disabling essential cookies may impair the functionality of the Platform.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you
Rectification: request correction of inaccurate or incomplete data
Deletion: request deletion of your personal data, subject to legal retention requirements
Portability: request a copy of your data in a structured, machine-readable format
Objection: object to processing of your personal data for certain purposes
Withdraw consent: withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at [email protected].

8. International Data Transfers

Your data may be processed in countries other than your own. We ensure that any international transfers are protected by appropriate safeguards, including standard contractual clauses where required by applicable data protection laws.

9. Children's Privacy

The Platform is not intended for users under the age of eighteen (18). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

11. California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you with additional rights regarding your personal information:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, and the purposes.
Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell your personal information as defined by the CCPA. We do not share your personal information for cross-context behavioral advertising. If this practice changes, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at [email protected]. We will verify your identity before processing your request.

12. AI and Automated Processing

We use artificial intelligence technologies to enhance your experience on the Platform. Specifically:

Product search and recommendations: AI-powered search helps you find relevant products more quickly.
Image processing: We use AI for background removal and image optimization on product listings.
Content generation: Sellers may use AI to generate product descriptions. This is clearly labeled as AI-generated content.

AI is not used to make automated decisions that produce legal or similarly significant effects on users. Human review is involved in all significant platform decisions (account approval, dispute resolution, KYC verification).

13. Subprocessors

We engage the following third-party subprocessors to provide our services. Each subprocessor is contractually obligated to protect your data:

Stripe — payment processing
Paystack — payment processing (Africa)
Flutterwave — payment processing (Africa)
PandaScrow — escrow services
Cloudinary — image hosting and optimization
Resend — transactional email delivery
OpenAI — AI-powered search and content generation
serper.dev — web search for agent lead finder
Tawk.to — live chat widget
Cloudflare Turnstile — bot protection on sign-in and registration (Turnstile Privacy Notice)
Vercel / Docker host — application hosting
PostgreSQL — database hosting

This list may be updated from time to time. Material changes will be communicated via email or Platform notice.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Platform or via email at least thirty (30) days before taking effect. The "Effective Date" at the top of this page indicates when this policy was last revised.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
General support: [email protected]