1. Who we are
No Ojoro (“we”, “us”, “our”) is a token-controlled event and hospitality operations platform used by caterers, venues, event planners, staff, celebrants, and guests in Nigeria and beyond. This Privacy Policy explains what personal data we process when you visit www.noojoro.com or use our web and related services.
Contact: hello@noojoro.com · 08032607244 · Lagos, Nigeria
2. Scope
This policy covers data processed for:
- Account registration and authentication
- Event, venue, menu, table, seat, and token management
- Guest ordering (QR / web), staff delivery confirmation, and live dashboards
- Payments and token activation
- Referral and commission features
- Celebrant photos, guest presence photos, and event crew contacts
- Support and site communications
3. Information we collect
3.1 Account holders (caterers, venues, planners, admins)
- Name, email address, and phone number (including country / dial-code details where provided)
- Password (stored as a secure hash; we do not store your password in plain text)
- Role and account settings (including admin / training-related flags where applicable)
- Referral codes and referral network relationships
- Email verification and password-reset tokens (temporary)
3.2 Events and venues
- Event and venue details (name, date, time, location, layout, menus, inventory)
- Table / canopy / seat configuration and VIP settings
- Staff assignments (names, PIN credentials, roles such as waiter or supervisor, table or canopy ranges, menu restrictions)
- Planner access credentials for live operations
- Celebrant access password and celebrant message / slideshow photos uploaded by the organiser
- Event crew / vendor contacts you choose to publish (role, name, business phone), including any members marked for display on guest confirmation
- Optional social links and branding / style settings
3.3 Guests
- Token / seat identifiers used to open the guest order page (we do not require a guest account for catering token ordering)
- Orders placed (items, quantities, order numbers, table / seat, status, timing, guest session where reactivation is used)
- Waiter request activity from a token
- Optional presence photos (selfie / group photo) uploaded after ordering, only after guest consent that everyone in the photo agrees to upload to the private event gallery
3.4 Staff
- Event code and staff PIN used to sign in
- Delivery confirmation actions (scan or PIN), including who confirmed service and related order / seat data
- Supervisor actions such as seat token reactivation, where enabled
- Session tokens stored locally on the staff device for staying signed in
3.5 Payments
- Payment amount, currency, status, provider reference, and related discount information for token activation and similar purchases
- Payments are processed by Paystack. Card and bank details are handled by Paystack under their terms; we receive payment status and references needed to activate tokens and keep records
3.6 Technical and usage data
- Device / browser information needed to run the web app securely
- Authentication tokens and similar session data stored in your browser (for example local storage) to keep you signed in
- Operational logs (including security and delivery audit trails) to run, protect, and improve the service
- Public marketing site settings such as social media URLs configured by administrators
4. How we use information
- Create and manage accounts, events, venues, menus, tokens, and staff access
- Enable guests to order and staff to confirm deliveries with full traceability
- Show live operational dashboards to organisers, planners, and celebrants
- Process payments and activate paid tokens
- Operate referral / commission features where applicable
- Display guest presence photos to the celebrant for a limited time in a private gallery
- Show selected event crew contacts to guests after they place an order
- Provide support, prevent fraud / abuse, and improve reliability and security
- Comply with legal obligations
5. Legal bases (where applicable)
We process personal data where needed to:
- Perform our contract with account holders (provide the platform)
- Pursue legitimate interests in operating secure, fraud-resistant events
- Obtain consent where required (for example guest presence photo uploads)
- Comply with applicable law (including Nigeria’s NDPR principles where they apply)
6. Sharing of information
We share data only as needed to run the service, including with:
- Event parties: organisers and authorised staff / planners see operational data for their events; celebrants may see live serving information and the private presence gallery for their event
- Guests: may see menu, order status, and crew contacts the organiser chooses to publish
- Payment provider: Paystack, for payment processing
- Infrastructure providers: hosting, database, file storage (for example object storage for photos), and related cloud services that process data on our behalf
- Authorities: when required by law or to protect rights, safety, and security
We do not sell your personal data.
7. Photos and media
- Celebrant / event photos uploaded by organisers may be shown on guest order experiences (for example slideshow or background) for that event
- Presence photos uploaded by guests go to a private celebrant gallery, require consent at upload, and are intended for short-term access (about 72 hours), after which they expire from the gallery workflow
- Training or demo environments may display stronger watermarks on media
8. Retention
We keep account, event, order, payment, and audit data for as long as needed to operate the service, resolve disputes, meet accounting / legal requirements, and maintain security. Presence photos are designed for short-lived gallery access. When you delete an event or close an account where the product supports it, we remove or de-identify related data according to our retention and backup practices.
9. Security
We use industry-standard measures such as hashed passwords, authenticated API access, role-based permissions, and secure payment verification. No method of transmission or storage is 100% secure; please protect your PINs, passwords, and event codes.
10. Your choices and rights
Depending on applicable law, you may request to:
- Access or correct personal data we hold about you
- Request deletion or restriction, where available
- Withdraw consent for optional features (such as presence photo uploads)
- Object to certain processing where the law allows
Account holders can update many details in the dashboard. For other requests, contact hello@noojoro.com.
11. Children
No Ojoro is built for business and event operations. We do not knowingly collect personal data from children for marketing accounts. Event organisers are responsible for how guests (including minors) use tokens and upload photos at their events.
12. International transfers
Our service and providers may process data in Nigeria and other countries. Where data is transferred, we take steps appropriate to the providers and applicable law to protect it.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of No Ojoro after an update means you accept the revised policy, where permitted by law.
14. Contact
Questions about privacy: hello@noojoro.com · Contact page
Permanent URL for this policy: /privacy (on production: https://www.noojoro.com/privacy)