Last Updated: June 8, 2026

1. Introduction & Statutory Authority

Ojahmi Limited ("Ojahmi", "we", "us", or "our") respects your privacy and is fully committed to safeguarding the personal data of our platform users. This Privacy Policy outlines our strict protocols regarding the collection, storage, processing, transmission, and protection of personal data across our web dashboards, mobile applications, and payment ecosystems.

This policy is formulated in strict compliance with the Nigeria Data Protection Act (NDPA), the Kenya Data Protection Act, the South African Protection of Personal Information Act (POPIA), the Ghana Data Protection Act, and global data residency standards. By registering an account on Ojahmi, you explicitly consent to the data practices described herein.

2. The Dual Role of Ojahmi: Data Controller vs. Data Processor

To understand your rights, it is legally necessary to differentiate how Ojahmi handles data flows across our infrastructure:

• Ojahmi as a Data Controller: We act as a Data Controller for the personal information collected directly from our Merchants (e.g., your registration details, corporate filings, and payment history). We determine why and how this data is processed to manage your subscription and platform experience.

• Ojahmi as a Data Processor: We act strictly as a Data Processor regarding the information collected from your End-Consumers/Buyers (e.g., names, shipping addresses, phone numbers, and cart data inputted into your store). The Merchant remains the ultimate Data Controller of their own customers' data. Ojahmi merely provides the secure database hosting infrastructure to process this information on the merchant's behalf.

3. Categories of Data Collected

We collect information required to deliver stable, high-performance e-commerce infrastructure.

3.1 Information Provided Voluntarily by Merchants

• Identity and Onboarding Data: Full legal name, corporate business name, CAC registration number, tax identifiers, national identification numbers, physical corporate address, active email address, and telephone profiles.

• Financial Credentials: Bank verification markers, account numbers, and mobile money routing numbers needed to clear payouts via OjahmiPay.

3.2 Information Collected Automatically via System Usage

• Technical Logs: Internet Protocol (IP) addresses, device hardware identifiers, operating system versions, browser types, mobile application crash logs, and localized time-zone parameters.

• Transaction Metrics: Order counts, velocity charts, success/failure payment frequencies, and geometric log locations of buyers accessing your store nodes.

4. How We Utilize Your Data

Ojahmi processes your personal and operational data strictly for the following legitimate business purposes:

• Constructing, maintaining, and deploying your digital storefront architecture.

• Settling marketplace finances and processing instant payouts through OjahmiPay.

• Preventing server abuses, cross-site scripting (XSS) injections, systemic fraud, and money laundering.

• Transmitting automated system update s, critical billing notifications, and response updates via email or our integrated WhatsApp business channels.

• Fulfilling statutory data retention laws mandated by regional central banks and national security agencies.

5. Data Security, Storage, & Retention Limits

Ojahmi deploys bank-grade technological safeguards to insulate data blocks from unauthorized access, breach, alteration, or unlawful erasure.

• Encryption Protocols: All data moving across our networks is wrapped in Transport Layer Security (TLS) encryption in transit and anchored with advanced standard encryption blocks at rest within our cloud servers. Financial pathways are fully tokenized.

• Data Retention Timelines: We retain personal and corporate metadata for as long as your merchant account remains active. Upon voluntary account deletion, financial logs, transaction records, and KYC archives are legally retained for a minimum mandatory period of six (6) years to satisfy local Anti-Money Laundering (AML) and fiscal auditing statutes before permanent purging.

6. Information Sharing & Third-Party Disclosures

Ojahmi does not, under any circumstances, sell, rent, lease, or trade your personal or business data to third-party data brokers or marketing aggregators. Information is shared strictly with downstream entities necessary to run your storefront infrastructure:

• Financial Integration Partners: Licensed switching networks, payment settlement gateways, and partner commercial banks facilitating OjahmiPay payouts.

• Integrated Delivery Frameworks: Independent logistics companies or riders if you explicitly route shipments through our native "Ojahmi Logistics" switch.

• Statutory Law Enforcement: Competent local courts, data protection bureaus (such as the NDPC), or financial intelligence units when presented with a valid sub-poena or official legal decree.

7. Data Subject Rights

Under active data protection laws, both Merchants and End-Consumers (via their respective stores) possess non-negotiable legal rights regarding their digital footprints. You can execute these actions directly from your Ojahmi admin panel or by opening a technical support ticket:

• Right to Access & Portability: Requesting a comprehensive CSV structural download of all data points stored under your profile.

• Right to Rectification: Modifying or updating inaccurate or outdated profile metrics immediately.

• Right to Restriction or Erasure: Requesting the complete deletion of your profile history (subject to the legal statutory financial retention clauses outlined in Section 5).

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Ojahmi

info@ojahmi.com