Obit Market & SafePay Privacy Notice
This pilot notice describes the intended data architecture. Final production wording will reflect signed data-sharing/processing agreements and approved providers.
Who operates what
Obit Technologies Limited operates the Obit Market and SafePay technology infrastructure. Obit Technologies Multipurpose Cooperative Society Limited manages its cooperative membership, governance and member programmes. Their precise controller/processor roles depend on the purpose for which particular personal data is processed and will be documented before production.
Data used by the marketplace
The platform may process account and membership identifiers, contact details, marketplace listings, orders, transaction references, delivery evidence, dispute records, security logs and audit records. Payment or identity providers may process additional information directly under their own terms.
Shopping accounts and quote requests
Email sign-in codes are sent through our configured email delivery provider. Codes expire after 10 minutes; expired challenge records are removed during subsequent code requests after 24 hours. Shopping account sessions expire after four hours. Your saved bag, delivery details and quote requests are stored on the marketplace server. During the quote stage, sellers receive only their requested product items and your delivery town and state; your exact address and phone number are not included in their quote inbox. Quote requests do not collect payment or reserve stock.
Unpaid order records
When you accept a quote, the platform stores the products, prices, delivery estimate, delivery address snapshot, reservation deadline, cancellation reasons and order events. Sellers see only their order items, delivery town and state, totals and cancellation information. Their unpaid-order inbox does not receive your exact address, phone number or email address. Staff order summaries show references, totals, town, state and status. No payment or courier booking is created by accepting a quote.
Payment integration records
During authorised integration testing, the platform can store payment references, amount, currency, provider status and verification events. Test checkout sends the test customer email and order total to the configured provider. Payment entry is hosted by Monnify. Obit does not collect card details through this checkout. Live marketplace collection remains disabled.
Pickup choices and tracking
A pickup quote stores a snapshot of the published location address, opening hours and review version. Sellers receive these public pickup details with the quote. Home addresses and phone numbers remain private in seller quote and unpaid-order views. Authenticated buyers, their sellers and authorised staff can see tracking notes for their own orders. Tracking in this release is a simulation after a verified test payment. No customer data is sent to a courier and no funds are released by receipt confirmation.
Why data is processed
Data may be used to authenticate users, verify eligibility, operate listings and orders, prevent fraud, support protected transactions, resolve complaints and disputes, maintain audit/security records, comply with legal obligations and improve platform reliability.
Financial and identity data
The platform should minimize sensitive identity and financial data. SafePay does not create an Obit-held stored-value balance. Payment custody and settlement data required for live transactions will be exchanged only with the approved financial provider as necessary for the transaction.
Product videos
Seller video links, descriptions and review records are stored with listings. Only approved videos appear publicly. Videos do not load until you choose to watch. Playing a YouTube video loads the YouTube privacy-enhanced player. Playing an MP4 loads the seller’s video host. These services receive connection information such as your IP address and may process playback information under their own policies. Obit does not send your shopping account, bag or address to these video hosts.
Service providers
Approved KYC, communications, hosting, payment and security providers may process data where required. Appropriate written contracts, security review and data-protection safeguards are required before production use.
Retention and security
Records will be retained only for documented operational, dispute, audit and legal purposes. Access controls, audit logging and security safeguards are part of the production design. Production retention periods will be documented before launch.
Your rights
Applicable data-protection rights may include access, correction, objection, restriction, portability, erasure where legally available, and complaint rights. A production contact and rights-request process will be published before live launch.
Cross-border processing
Any cross-border transfer or remote processing of personal data must be assessed and documented under applicable Nigerian data-protection requirements before production.