OKO-TO is a protected payment link product for WhatsApp and Instagram sellers in Nigeria. We are currently in early access. This policy explains what information we collect, how we use it, how we protect it, and what rights you have. When we say "OKO-TO," "we," or "us," we mean the team building this product.
When you join the waitlist, we collect: your name, your WhatsApp phone number, your business category, and your Instagram handle if you choose to share it. This is the only information we collect from people who have not yet used the product.
For sellers and buyers participating in early access transactions, we collect: order details as specified in the payment link, payment confirmation records, delivery information and documentation submitted by the seller, dispute evidence submitted by either party, and communication records relevant to the transaction.
When you use this website, we may collect standard technical data such as your browser type and general device information. We do not use advertising pixels or behaviour-tracking scripts on this site.
We use your information to:
OKO-TO uses a small number of external services to operate. These fall into the following categories.
Waitlist submissions and transaction records are stored in Supabase, a cloud database provider. Supabase operates on secure infrastructure and complies with standard data protection practices. Data is stored in the EU West region (London).
Payments processed through OKO-TO are handled by regulated third-party payment processors. These providers handle card and bank transfer processing and comply with applicable financial regulations. We do not store full payment card details on OKO-TO systems.
We use WhatsApp to communicate with sellers during the waitlist and early access period. WhatsApp is subject to Meta's own privacy policy. We use it only for direct, product-relevant communication.
If we use website analytics tools, we will update this section to name them and describe what data they process. We do not currently use any third-party analytics tools that track individual users across sites.
We do not use vague "trusted partners" language. If a service has access to your data, we name the category and describe why.
We take security seriously in a practical sense, not just as a statement. The specific practices we apply include:
No system is completely immune to security risks. We work to reduce risk and respond quickly when issues arise.
We retain waitlist information for as long as the waitlist is active and for a reasonable period after the product launches. If you ask us to remove your details before or after launch, we will do so promptly.
We retain transaction records and dispute evidence for fraud prevention, legal compliance, and operational security. These records are kept for a minimum period after the transaction closes to allow for any late dispute or fraud review. Specific retention periods will be defined and published when the full product launches.
When a user requests deletion of their account or data, we will remove personally identifiable information from active systems. Some records may be retained in anonymised or aggregated form for fraud detection and platform integrity purposes.
If a security incident occurs that significantly affects your personal data, we will notify affected users as quickly as reasonably possible and in accordance with applicable laws. Notification will be sent through the contact information we hold for you, typically via WhatsApp or the email address associated with your account if one is provided.
We will describe what happened, what data was affected, what we have done to address it, and what steps you can take to protect yourself.
You have the right to:
To exercise any of these rights, send us a message on WhatsApp or Instagram. We respond directly and will action your request within a few days.
OKO-TO is intended for adults engaging in commercial activity. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has submitted information through our platform, contact us and we will remove it promptly.
As OKO-TO grows and the product develops, this policy will be updated. The date at the top of this page shows when it was last changed. If we make significant changes that affect how we use your data, we will notify waitlist members directly via WhatsApp before the changes take effect.
Questions about this policy or how your information is handled can be sent through our Instagram page or via WhatsApp. You will get a direct response from the team, not an automated reply.