Privacy Policy

1. Who is responsible for your information

One Ocean, which is run by its founder while company registration is completed. To contact us about your information, email support@oneocean.com.ng.

2. What we collect

• Your account: your name, email, phone, state and local government area, profile picture, and whether you are a buyer or seller. If you sign in with Google, we also receive the profile details Google shares.
• Seller verification: sellers give their NIN, ID photos (front and back) and a selfie, and may give business details such as a CAC or tax number and business address. We use these to verify sellers and prevent fraud.
• Orders: what you buy or sell, amounts, payment references, delivery details, shipment status, disputes (including the messages and photos you add to them), refunds, reviews, support requests, reports you make about listings, and notifications.
• Payments: you enter your card or bank details on Paystack's page, and we do not collect them. For sellers, we keep the bank name, account number and account name we pay into, and records of payment events from Paystack.
• Technical: cookies and browser storage that keep you signed in and remember your display choices (see our Cookie Policy), and our hosting provider's ordinary server logs. We do not use an analytics tool.
• AI features: if you use the AI search or the AI listing assistant, the text you type or the product photos you upload are sent to Google's Gemini service. We do not send your name or email with them.

3. Why we use it

To run accounts and orders, take payments, make refunds and payouts, verify sellers, prevent fraud and keep One Ocean secure, give you support, decide disputes, keep the records the law requires, and send you service emails about your orders and account. We do not send marketing emails today. If we ever do, we will ask you first.

4. Who receives it

• The other side of an order. A seller sees the buyer's name, phone and delivery address to deliver the order. A store can show its contact details to buyers.
• Our service providers: Paystack (payments), Supabase (database and file storage), Vercel (hosting), Resend (emails we send), Google (sign-in and the AI features) and ImprovMX (forwarding the emails you send to our support address).
• Authorities, when the law requires it.

Some of our providers process information outside Nigeria. For example, our database is hosted in the United States.

5. How long we keep it

We keep information only as long as we need it for the purposes above and as the law requires. Records of payments and orders may have to be kept even after an account is closed. Messages and photos added to a dispute are kept with the order record.

6. Security

Access to our data tables is restricted by rules, and payments are checked on our servers. No system is perfectly secure, and we cannot promise that a breach will never happen. If one affects you, we will tell you as the law requires.

7. Your rights

You can ask to see your information, get a copy, correct it, delete it, limit how we use it, or object to a use. You can also withdraw any consent you gave. You can delete your account yourself in Settings. Email support@oneocean.com.ng and we will answer without undue delay. You may also complain to the Nigeria Data Protection Commission.

8. Children

One Ocean is for adults. You must be 18 or older. If we find an account belonging to someone under 18, we will close it.

9. Changes

If we make a material change to this policy, we will tell you by email and in the app before it takes effect.