Ojailu Privacy Policy

Ojailu Limited (“Ojailu,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, share and protect personal data when you use our digital marketplace platform, mobile applications, and related services (collectively, the “Platform”). The platform uniquely combines listing aggregation from social media platforms with AI-enhanced presentation, making this Policy especially important for understanding how we handle both user data and listing content. By using the Platform, you agree to the terms of this Privacy Policy and confirm that you are over 18 years of age or you have had your parent or guardian read and agree to the terms of this Privacy Policy on your behalf . If you do not agree, please discontinue use of our services immediately.

 

1. PERSONAL DATA CONTROLLER

Ojailu Online Company Ltd, a company registered in the Federal Republic of Nigeria, is the controller of your personal data. We determine the purposes and means of processing your personal data in compliance with applicable data protection laws.

 

2. CATEGORIES OF PERSONAL DATA WE COLLECT

   We collect personal data from various sources, including direct user input, automated tracking technologies, and third-party integrations. The information we collect falls into different categories based on its purpose and sensitivity.

   a) Personal Data
     We collect personal data necessary for user identification, account management, and service functionality. This includes a user’s name, email address, phone number, profile photo, home or business address, and IP address. Additionally, we collect payment information to facilitate transactions on our platform.
   b) Listings and Transaction Data
    When users post listings or engage in transactions, we collect relevant data such as ad descriptions, images, videos, transaction history, and payment details. This ensures seamless platform operations and provides users with an optimized experience.
   c) Sensitive Data
For security and verification purposes, we collect government-issued identification, and Certificate of registration particularly for seller verification. This ensures compliance with regulatory requirements and enhances fraud prevention.
   d) Communication Data
To improve customer support and facilitate seamless interactions, we collect messages exchanged through our platform, user inquiries, and customer service communications. This helps us address concerns effectively and maintain service quality.
   e) Device and Usage Data
To enhance platform security and user experience, we automatically collect technical data such as IP addresses, browser types, device models, operating systems, and user activity patterns. Location data may also be collected with user consent to improve service personalization.
   f) Candidate Data
  • For job applicants, we collect information related to recruitment and employment evaluation. This includes resumes, employment history, educational background, professional qualifications, references, interview notes, and assessments. Where applicable, background checks may also be conducted to verify the credibility of candidates.
  • All collected data is handled with strict security measures to ensure confidentiality and compliance with applicable data protection laws.
  • You should carefully consider risks associated with the fact that you make certain information publicly available. In particular, your phone number, address, photos, passport, government issued IDs and financial details or exact location.
2.2. Third-Party Data Collection
      Ojailu may receive personal data from third-party platforms and services when users choose to connect their accounts or use external authentication providers. This data helps streamline user registration, enhance security, and improve user experience on our Platform. Additionally, we aggregate and process publicly available listing data from social media platforms to enhance marketplace visibility and functionality.
   a) Social Media and Authentication Services
When you log in or connect your account using social media platforms such as Meta, Google, Apple, Youtube or Vimeo we may receive personal data that includes: 
  • Meta (Facebook, Instagram, Threads): Profile name, email address, profile picture, Meta ID, and other public information. Additional data such as date of birth, gender and location may also be collected if permitted by your Meta privacy settings. We may also aggregate publicly available listings, including original content, descriptions, images, pricing details, and seller profile information. Users can manage their Meta data-sharing preferences via their Meta account settings. Users are bound by the Facebook Terms of Service, Instagram Terms of Use, Threads Terms of Service, when using these connected features.
  • Google: Name, email address, profile picture, Google ID, and other publicly shared details from your Google account. Users can adjust data-sharing preferences through their Google account settings. Users are bound by the Google Terms of Service when using this connection.
  • Apple: Apple ID, name, and email address. If you use Apple’s “Hide My Email” feature, a randomly generated email address will be used to forward communications from Ojailu to your personal email. Users can revoke access through Apple’s account settings. Users are bound by the Apple Terms of Service when using this connection.
  • X (Twitter) & TikTok: Public profile data, username, posted content, engagement metrics, and other available information based on user privacy settings will be collected. Users are bound by the , X (Twitter) Terms of Service and the TikTok Terms of Service when using these social media features.
  • We also integrate with Vimeo, a video hosting and sharing service, to facilitate the display of multimedia listings. When users link or share video content from Vimeo, we may collect public metadata such as video titles, thumbnails, and viewing statistics, subject to Vimeo’s data policies. Users are bound by the Vimeo Terms of Service when using this integration.
  •  We use the YouTube API Services to access, display, and enhance video content from publicly available listings. We may collect limited public metadata such as video titles, thumbnails, and channel information solely for the purpose of content aggregation and display. Users interacting with YouTube content on our platform are bound by the YouTube Terms of Service and the Google Privacy Policy, you can find out more here https://policies.google.com/privacy. YouTube data is used solely for displaying or enhancing listings and is not stored or shared with any internal or external parties without user consent. Video metadata is refreshed every 30 days, and videos associated with or linked to expired or sold listings are deleted within 90 days. All YouTube data is permanently deleted after 180 days of listing inactivity. Users may also request immediate deletion of their associated videos at any time. YouTube data is handled in accordance with our YouTube Data Use Policy described above.
   b) Social Media Listing

   Ojailu processes publicly available listing data from social platforms such as Facebook, Instagram, Threads, X (Twitter), TikTok, YouTube and Vimeo. This includes original listing content and descriptions, associated media, original pricing information, seller profiles, and product metadata to ensure accurate categorization and enhanced discovery. Users can request removal or modification of aggregated listing data by contacting our support team.

Our integration with social media and external listing sources involves Application Programming Interface i.e. API-based data collection, content synchronization, automated extraction, and regular updates to ensure data accuracy and completeness. We follow strict privacy considerations, ensuring compliance with platform policies, maintaining data protection standards, and securely handling user information with transparency. 

   c) Managing Third-Party Data Sharing

Users have control over what data is shared with Ojailu from third-party services. You may review and manage these permissions through the respective third-party account settings. If you wish to unlink your account or remove previously shared data, you can do so by adjusting settings on the third-party platform or by contacting us at support@ojailu.com

 

3. AI PROCESSING AND LISTING ENHANCEMENT

Our platform leverages advanced AI technology to refine and optimize listings while preserving their accuracy and authenticity. This includes extracting and standardizing listing details, enhancing visual presentation, improving readability, and generating optimized descriptions. Our cross-platform data management system ensures consistent handling of listing information across different social media sources. AI-driven enhancements do not alter core information such as pricing or seller details but instead improve content structure for better comparison and user experience. We prioritize transparency by clearly marking enhanced listings, attributing original sources, and allowing sellers to verify modifications. Additionally, users may request access to original listing data, ensuring that enhancements remain traceable and aligned with the integrity of the platform.

    As part of our listing enhancement and content integration process, Ojailu may interact with third-party APIs including YouTube, Google, Meta (Facebook, Instagram, Threads), X (Twitter), TikTok and Vimeo. Users acknowledge that any data, videos, or media extracted from or linked through these platforms are subject to their respective Terms of Service and data use policies.

4. DATA PROTECTION PRINCIPLES

    Ojailu is committed to protecting personal data by ensuring it is processed lawfully, fairly, and transparently. We collect data for specified, and legitimate purposes, keeping it accurate, up to date, and retaining it only as necessary. To prevent unauthorized access or loss, we implement strict security measures, including encryption and access controls.

5. HOW WE USE YOUR INFORMATION

   We process personal data for various purposes to ensure seamless service delivery, user security, and platform functionality.

5.1. Service Provision

    We use collected data to facilitate account creation, manage user profiles, and enable smooth transactions between buyers and sellers. Our platform relies on this information to process payments securely, provide customer support, and enhance overall functionality. Additionally, we use personal data for fraud detection, identity verification, and ensuring compliance with security protocols.

5.2. Personalization and Optimization

    To improve user experience, we analyze user activity and preferences to offer personalized content recommendations, optimized services, and targeted search results. This includes AI-powered listing transformation and aggregation, allowing us to enhance and streamline user-generated content. Market research and data analytics also help us refine platform performance and introduce relevant features.

5.3. Communication and Notifications

    We use personal data to send service-related updates, important platform notifications, and marketing communications where users have provided consent. Additionally, we use this data to respond to inquiries, provide customer support, and issue legal or regulatory notices when required.

5.4. Legal Compliance and Enforcement

    In certain cases, we process personal data to meet legal and regulatory requirements, such as tax, anti-fraud, and anti-money laundering obligations. We also use this data to enforce our Terms of Use, investigate violations, and take necessary action against policy breaches. All data processing activities are conducted in compliance with applicable data protection laws and industry best practices.

 

6. UNDER WHAT LEGAL BASIS WE PROCESS YOUR PERSONAL DATA

    Ojailu processes personal data under the following legal grounds:

  • User Consent : User consent is obtained when individuals agree to specific data processing activities, such as the use of cookies as outlined in our Cookies Policy Section below.
  • Contractual Necessity : For the performance of a contract, fulfilling agreements with users and ensuring that we can provide and manage our services effectively
  • Legitimate Interest : We rely on legitimate interests to enhance user experience, improve platform functionality, conduct research and analysis, personalize advertisements, send marketing communications, and communicate service relate updates, such as notifications about unread messages. We also process data under this basis to prevent fraud, enforce our Terms of Use, and maintain security.
  • Legal Compliance : we process personal data to fulfill legal and regulatory obligations, ensuring compliance with applicable laws.
 

7. WITH WHOM WE SHARE YOUR PERSONAL DATA

    We may share personal data with:
  • Service providers for payment processing, analytics, and hosting services
  • Law enforcement authorities if required by law and to prevent fraud or illegal activities.
  • Social media platforms for listing extraction and aggregation.
  • Business partners for marketing with user consent.
  • Affiliates and subsidiaries to facilitate business operations.
 

8. COOKIE POLICY

8.1. What Are Cookies
   Cookies are small text files stored on your device that help websites remember
information about your visit. They enable functionality, improve user experience, and
assist in analytics and marketing efforts.
 
8.2. Types of Cookies We Use and How We Use Them
  •    Session Cookies: Session cookies are temporary files that are placed on your browser for the duration of your visit to the Platform. They are essential for basic navigation and for facilitating uninterrupted access to various features. These cookies enable session continuity by remembering page-to-page navigation within the same session, ensuring that, for instance, items placed in your ad-posting workflow or session-specific filters remain accessible. Once you close your browser, these cookies automatically expire and are removed from your device.
  • Persistent Cookies: Unlike session cookies, persistent cookies remain stored on your device even after you close your browser. They serve the purpose of remembering your login credentials, previously selected preferences, device identifiers, language selections, and certain user behaviors across sessions. Persistent cookies enhance user convenience by minimizing repetitive input and customizing the Platform interface according to your historical usage. These cookies remain active for a predetermined duration or until manually deleted by the user through browser settings.
  • Analytics Cookies: Analytics cookies, sometimes referred to as performance cookies, are deployed to gather aggregate information on how users interact with the Platform. These cookies do not collect identifiable personal data but allow Ojailu to monitor traffic sources, session duration, click paths, bounce rates, page load performance, scroll behaviour, and feature engagement. The information collected is used strictly for statistical and diagnostic purposes aimed at understanding user engagement patterns, identifying technical bottlenecks, enhancing design responsiveness, and prioritizing platform improvements.
  • Third-Party Cookies: These cookies are not set directly by Ojailu but by authorized third-party service providers whose services are integrated into our Platform. These may include, but are not limited to, cookies from social media platforms (used in the listing extraction process), advertisement networks (used to deliver tailored marketing messages), payment gateways (used to process and secure financial transactions), and analytics partners (used to evaluate site metrics). While Ojailu endeavours to partner only with reputable third-party providers, we do not control the data collection or processing practices of these entities and encourage users to review their respective privacy policies.
8.3. Cookie Management
    You have control over how cookies are used on your device through your browser settings. You can choose to accept or decline cookies, delete existing cookies, or customize your preferences for non-essential cookies. Users may also opt out of certain tracking technologies while still accessing core platform features.
 
 

9. CANDIDATE PRIVACY POLICY

    This section applies to individuals applying for jobs at Ojailu. We collect and process candidate data for recruitment purposes, including evaluating qualifications, conducting background checks, and making hiring decisions. If a candidate is not selected, we may retain their profile for future openings, subject to their consent. Candidates may request access, correction, or deletion of their data by contacting support@ojailu.com
 
9.1. Candidate Data Collection
   We collect candidate information through application forms, resumes/CVs, interviews, assessment tests, and reference checks.
 
9.2. Use of Candidate Information
   Candidate data is used to assess qualifications, schedule interviews, verify backgrounds, communicate application status, and comply with employment laws.
 
9.3. Retention of Candidate Data
  • For active applications, data is retained throughout the recruitment process.
  • For successful candidates, data is transferred to employee records.
  • For unsuccessful candidates, data is retained for future opportunities with consent.
 

10. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS

   As a data subject engaging with the Ojailu Platform, you possess a suite of rights under applicable data protection regulations designed to safeguard your autonomy and grant you meaningful control over how your personal data is collected, processed, stored, and shared. Ojailu is firmly committed to upholding these rights and ensuring transparency and accessibility in their exercise.
 
   Accordingly, you may exercise the following rights at any time, subject to applicable laws and the specific context of your interaction with our Platform. You have full control over your personal data and may:
 
   (a) Right of Access and Rectification
     You have the right to request confirmation as to whether we are processing your personal data and, where that is the case, to access such data. This includes the right to obtain a copy of your personal data in our possession, as well as supplementary information regarding the categories of data collected, the purposes for which it is being used, and any third parties with whom it has been shared. Furthermore, you have the right to request the correction or updating of inaccurate, outdated, or incomplete information via the account settings panel or by contacting us directly.
 
   (b) Right to Erasure (“Right to Be Forgotten”)
      You may request that we permanently delete your personal data where the data is no longer necessary in relation to the purposes for which it was collected, where you withdraw your consent (and no other legal ground exists for processing), or where the data has been unlawfully processed. Please note that this right is subject to certain limitations, such as our obligation to retain transactional records for legal or regulatory compliance.
 
   (c) Right to Restrict Processing
      You have the right to request that we restrict the processing of your data in circumstances where:
  •  the accuracy of the data is contested;
  • the processing is unlawful but you oppose erasure;
  • we no longer need the data but you require it for legal claims; or
  • you have objected to processing and verification is pending.
    (d) Right to Object to Processing
      You may object at any time to the processing of your personal data for purposes of direct marketing, including profiling to the extent that it relates to such marketing. Additionally, where we process data on the basis of a legitimate interest, you may object to such processing unless we demonstrate compelling legitimate grounds
which override your interests, rights, and freedoms.
 
    (e) Right to Data Portability
      Where data is processed by automated means based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance. Where technically feasible, you may request that such transmission be carried out directly by Ojailu.
     (f) Right to Withdraw Consent
       Where processing is based on your explicit consent, you retain the right to withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.
 
     (g) Right to Lodge a Complaint
        If you believe that your data protection rights have been infringed or that Ojailu has failed to handle your data in accordance with applicable laws, we encourage you to contact us first to allow us the opportunity to address your concerns amicably and expeditiously. If you have a concern that Ojailu has not properly addressed your
issue, you have the right to lodge a formal complaint with the relevant data protection supervisory authority in your jurisdiction.
 
 To exercise any of these rights, contact us at support@ojailu.com
 
 

11. AVAILABLE REMEDIES

      If a data breach occurs that poses a risk to individuals’ rights and freedoms, we will notify the relevant supervisory authority where required by law. In cases where the risk is deemed high, affected individuals will also be informed without undue delay. The timing of such notifications will depend on the number of individuals impacted and the time needed to gather the necessary contact details. If you believe that the measures taken to address a breach do not resolve your concerns, you have the right to file a complaint with the appropriate supervisory authority or seek resolution through arbitration in accordance with applicable dispute resolution procedures. If you suspect unauthorized data use,
contact us at support@ojailu.com with email subject containing ‘DATA PROTECTION’.
 
 

12. NO LIMITATION CLAUSE

       Ojailu affirms its commitment to maintaining the highest standards of data protection in line with applicable legal and regulatory requirements. We recognize that certain obligations, such as those set out in Section 4 of this Policy concerning lawful, fair, and secure processing of personal data are fundamental and non-negotiable. Accordingly, nothing in this Privacy Policy shall be construed as excluding or limiting the responsibilities that may arise under applicable data protection laws. Where such obligations exist by operation of law, Ojailu will act in accordance with prevailing statutory
requirements and industry standards to ensure continued compliance.
 
 

13. AGE LIMITATION

     Our Services are not directed to children under 18 and users under the age of 18 must have parental or legal guardian consent to use the Platform. Ojailu cares about the safety of our community. We understand that in the age of technology, young people are increasingly active online and may be interested in items listed on our platform. While we strive to
create an accessible marketplace, we also recognize the serious responsibilities involved with online transactions, especially those involving properties, vehicles, and other high value items. For safety and legal reasons, to use our Platform, you must:
         (a) Be at least 18 years of age
         (b) Have the legal capacity to enter into binding contracts
         (c) Not be prohibited from using our services under applicable laws
         (d) Be able to form legally binding agreements
 
      Minors (persons under 18 years) can only access the Platform:
         (a) Through an account created and managed by a parent or legal guardian
         (b) Under direct supervision of said parent or legal guardian
         (c) With all transactions conducted by the responsible adult
         (d) In compliance with all applicable age-related restrictions
 
     We do not knowingly collect personal information from children. If we become aware that we have collected children’s personal information, we will take steps to delete it immediately. Additionally, If you learn that anyone younger than 18 has provided us with personal data, please contact us at support@ojailu.com.
 
 

14. INTERNATIONAL DATA TRANSFERS 

      We may transfer and store user data outside Nigeria for cloud hosting and processing. When we do, we ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs), data processing agreements, adequacy decisions and other legal mechanisms.
 
 

15. DATA RETENTION

      We retain personal data as follows:
  •  Active accounts: Data is retained while the account is active.
  • Deleted accounts: Data is retained for 30 days post-deletion before being permanently removed.
  • Transaction records: Data is retained for 7 years for legal compliance
  • Candidate data: As specified in Section 9.3
  • Legal requirements: As required by applicable laws
 

16. CHANGES TO THIS PRIVACY POLICY

      We may update this Privacy Policy to reflect changes in operations or regulations. Significant changes will be communicated via the Platform or the last updated date would be reflected below.
 
 

17. CONTACT INFORMATION

       For more inquiries regarding this Privacy Policy or our privacy practices, users may contact us at support@ojailu.com 
 
 For urgent privacy concerns or to report a data breach, please contact our Data Protection Officer at support@ojailu.com with email subject containing ‘DATA PROTECTION’.
 

Last Updated : November 17, 2025