Privacy Policy
Last Updated: August 2026 • OyaPlan Technologies Limited
1. Introduction & Compliance
At OyaPlan Technologies Limited ("OyaPlan", "we", "our", or "us"), we respect your privacy and are committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and international data privacy principles. This policy explains how we collect, use, and protect your information across oyaplan.com and our beta services.
2. Information We Collect
We collect only data necessary to deliver verified outing plans and secure account access:
- Account Identity Data: Email address and display name created during sign-in via Supabase Authentication.
- Planning Inputs: Anonymous criteria entered into the planner, including starting location, squad size, budget range, and vibe selections.
- Beta Feedback & Spend Intelligence: Voluntary actual spend submissions and venue reviews submitted to calibrate transport and menu pricing accuracy.
- Technical Logs: IP address, device type, browser user-agent, and request timestamps to prevent abuse, enforce rate limits, and secure our network.
No Data Selling Promise
We never sell, rent, or trade your personal information or squad outing plans to third parties or advertising networks.
3. Cookies & Session Storage
We use essential HTTP cookies and browser session storage strictly to maintain authenticated sessions, preserve planning selections between screens, and protect forms against cross-site request forgery.
4. Third-Party Infrastructure
Your data is processed using secure cloud service providers:
- Supabase Inc.: Encrypted cloud database and authentication provider.
- Vercel Inc.: Hosting infrastructure and global edge network.
- Sentry: Anonymous runtime error reporting.
5. Data Retention & Your NDPA Rights
Under the Nigeria Data Protection Act, you have the right to:
- Access all personal data stored under your account.
- Request correction of inaccurate information.
- Request complete erasure of your account and associated profile data.
- Object to processing or request data portability.
Account deletion requests are processed within 30 days of email verification.
6. Contact Us
For privacy inquiries or data rights requests, contact our compliance team:
OyaPlan Technologies Limited • Lagos, Nigeria