OyaLinkupOyaLinkupGrow from where you are.

Privacy Policy

Last updated: 11 August 2026·OyaLinkup Ltd

1. Scope of This Policy

This Privacy Policy explains how OYALINKUP LIMITED (“OyaLinkup”, “we”, “our”, or “us”) processes personal data when you use the OyaLinkup small-business platform, its websites, its opt-in business community, and Daily Cashbook.

This policy does not govern direct use of separately branded AfroLocation services or Smart Ward pilots unless their own notice expressly incorporates this policy. Those services require their own product or pilot-specific privacy notice.

We process personal data in accordance with the Nigeria Data Protection Act 2023 and other applicable Nigerian laws. We do not sell your personal data or your business records.

2. Who We Are

Operator and data controller: OYALINKUP LIMITED (RC 9488622)

Address: No. 1, Bawalane Centre Igboro, Ilorin, Kwara State, Nigeria

Privacy contact: OyaLinkup Privacy Team at privacy@notify.oyalinkup.com

3. Data We Collect

3.1 Registration and Sign-In Data

  • Phone or WhatsApp number when you register or sign in
  • Google account identifier, email, first name, and last name when you choose Google sign-in
  • Account creation date, sign-in method, last sign-in time, and sign-in count
  • Temporary authentication codes and tokens

3.2 Profile and Business Data

  • First name, last name, and display name
  • Phone number and verified email address
  • Profile photograph
  • Gender, including the option to prefer not to say
  • Business name
  • State, local government area, ward, and map pin you choose to provide
  • Device location when you grant permission and request a location-based feature
  • How you heard about OyaLinkup
  • Whether you confirm that you are 18 or older and, where applicable, guardian authorisation details

3.3 Community and Third-Party Data

  • Business profile, enquiry, review, or community information you choose to publish or submit
  • Names, phone numbers, addresses, and notes you choose to enter about customers, suppliers, or other people

Only enter another person's data when you have a lawful business reason to do so. Do not enter unnecessary sensitive information, passwords, PINs, card details, or banking credentials.

3.4 Daily Cashbook Records

  • Whether an entry is a sale or expense
  • Total amount, amount paid, outstanding amount, and who owes the balance
  • Category, transaction date, notes, and optional customer or supplier name
  • Settlement amounts and dates
  • Reports, summaries, and PDF exports generated from your records

Your records are stored locally in your browser for offline use and synchronized to our servers when a connection is available.

3.5 Security, Device, and Session Data

  • A randomly generated Cashbook device identifier
  • Access and refresh tokens stored locally
  • A functional authentication cookie
  • A one-way hash of your four-digit Cashbook PIN stored on your device
  • IP address and server request logs

We do not store your PIN in plain text.

3.6 Notifications

  • Whether daily business reports are enabled and your preferred notification hour
  • Notification content, delivery status, and read status
  • Push-subscription endpoint and browser encryption keys when you enable push notifications

3.7 Trial, Subscription, and Payment Data

  • Trial start and end dates
  • Selected plan, subscription status, and billing interval
  • Paystack transaction references
  • Payment amount, status, and next payment date

Paystack processes your payment credentials. OyaLinkup does not receive or store your card number, PIN, CVV, or banking credentials.

4. How We Use Data

  • Create, authenticate, secure, and support your account
  • Store and synchronize your business records
  • Calculate summaries and generate reports and exports
  • Send daily reports, service messages, and subscription notices
  • Process subscriptions and manage payments and refunds
  • Provide customer support and respond to privacy requests
  • Detect fraud, abuse, and technical problems
  • Comply with applicable law and enforce our Terms of Use

5. Lawful Bases

  • Contract: to create your account and provide Daily Cashbook features
  • Consent: for optional profile data, notifications, and optional communications
  • Legitimate interests: to secure, support, measure, and improve the service
  • Legal obligation: where required by Nigerian law or a valid legal request

6. Who We Share Data With

We do not sell or rent personal data. We use service providers only as needed to operate OyaLinkup and Daily Cashbook:

  • Amazon Web Services: application hosting in the Africa (Cape Town) region, file storage, and backups
  • Cloudflare: DNS, network security, content delivery, and R2 storage for map tiles used by AfroLocation-powered location features
  • Cloudinary: image and media delivery, including related domain configuration
  • Resend: delivery of verification codes and service emails
  • Google: Google account authentication
  • Paystack: payment processing and refunds
  • Browser push providers: delivery of notifications

We may also disclose information where required by law, to protect a person or the service, or as part of a corporate transaction subject to appropriate safeguards. We require service providers to process personal data only for authorised purposes.

7. Local Storage and Cookies

Daily Cashbook uses browser storage to provide offline access and maintain your session:

  • Cashbook records and settlements stored for offline use
  • Access and refresh tokens
  • The hashed Cashbook PIN
  • The Cashbook device identifier and user preferences
  • A functional authentication cookie

Removing browser storage may sign you out or remove records that have not yet synchronized.

8. Retention and Account Deletion

We keep personal data only for as long as needed for the purpose for which it was collected, to provide the service, resolve disputes, maintain security, and meet legal obligations. Our standard retention periods are:

  • Account, profile, community, and Cashbook data are retained while your account is active
  • Account access, active sessions, and push subscriptions are revoked when account closure is confirmed
  • Eligible profile data and uploaded media are deleted or anonymised within 30 days after account closure
  • Payment, refund, tax, accounting, and related administrator audit records may be retained for at least six years where required for compliance, disputes, or fraud prevention
  • Support records are normally retained for three years after a case closes, or up to six years when connected to payment or legal issues
  • Security and server access logs are normally retained for up to 12 months
  • Encrypted backup copies expire through our backup cycle within 90 days after deletion from active systems
  • Temporary authentication codes expire after their security period

A legal hold, regulatory request, fraud investigation, unresolved dispute, or another legal obligation may require us to keep limited information for longer. When retention ends, we delete or anonymise the information. Records stored only on your device are controlled by that device and may be removed when you clear app data or uninstall the app.

9. Your Rights

Subject to the Nigeria Data Protection Act 2023, you may have the right to:

  • Be informed about how your personal data is processed
  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete data
  • Request deletion or restriction of eligible data
  • Object to certain processing
  • Withdraw consent without affecting earlier lawful processing
  • Receive portable data where applicable
  • Complain to the Nigeria Data Protection Commission

Send requests to privacy@notify.oyalinkup.com. We may need to verify your identity before completing a request.

10. Security

We use access controls, encryption in transit, restricted production access, session revocation, and other safeguards. Cashbook PINs are stored as one-way hashes.

No storage or transmission method is completely secure. Protect your phone, do not share your PIN, and contact support if you suspect unauthorized access.

11. Young Business Owners

OyaLinkup supports young people who operate lawful small businesses. A user under 18 may use the service only through a guardian-supported account authorised and supervised by a parent or legal guardian.

Where consent is the lawful basis for processing a young user's personal data, we obtain consent from the parent or legal guardian and may take reasonable steps to verify age and guardian authority. A guardian may contact the OyaLinkup Privacy Team to review, correct, or request deletion of eligible data connected to the young user.

12. International Data Transfers

Some providers may process or support data from countries outside Nigeria. Where personal data is transferred internationally, we use the safeguards required by applicable data protection law, such as an adequate legal basis, contractual protections, access controls, and transfer risk assessment where appropriate.

13. Policy Updates

We will update this policy as OyaLinkup introduces new tools or materially different data uses, and will provide reasonable notice of material changes. The effective version is identified by the “Last updated” date shown with the document.

14. Contact and Complaints

Contact the OyaLinkup Privacy Team at privacy@notify.oyalinkup.com for questions or requests.

You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.