Privacy Policy

Personal data: name, email address, phone number, BVN/NIN, and other identification information required for KYC compliance (and CAC registration details for businesses).

Payment information: bank account details, card information (processed via secure third-party payment gateways), and transaction history.

Usage data: IP address, browser type, device information, operating system, log data, cookies, and usage patterns. See our Cookie Policy for details.

Campaign data: campaign descriptions, media uploads, donor interactions, comments, and any other content you provide through the platform.

• To verify your identity and prevent fraud
• To process payments, withdrawals, and other financial transactions
• To operate, maintain, personalize, and improve our services
• To communicate with you about your account and our services
• To comply with regulatory obligations (NDPR, GDPR, CBN requirements)
• To detect, prevent, and address technical issues and security risks
• For analytics and business intelligence to enhance user experience

We may share your personal data with:

• Payment processors: secure third-party payment gateways and financial institutions necessary to process transactions.
• Regulatory bodies: when required by law, we may share information with government agencies such as the Central Bank of Nigeria (CBN), the Economic and Financial Crimes Commission (EFCC), or other regulatory authorities.
• Service providers: trusted third parties who provide hosting, analytics, customer support, and marketing services, under strict confidentiality agreements.
• Legal requirements: when necessary to comply with legal obligations, protect our rights, or respond to lawful requests from public authorities.

We do not sell your personal information to advertisers.

Under applicable data protection laws (including NDPR and GDPR where applicable), you have the right to:

• Access a copy of your personal data we hold
• Correct inaccurate or incomplete data
• Delete your data, subject to legal requirements
• Restrict processing in certain circumstances
• Port your data to another service provider
• Object to certain types of processing
• Withdraw previously given consent at any time

To exercise these rights, contact us at hello@owave.co.

We retain your personal data only for as long as necessary to fulfill the purposes it was collected for, comply with legal obligations (tax, accounting, anti-money laundering), resolve disputes, and maintain business records for audit purposes.

We typically retain transaction data for 7 years after account closure to comply with financial regulations, and other personal data for 3 years after your last activity, unless a longer period is required by law.

We implement robust security measures to protect your data, including end-to-end encryption for sensitive data in transit, secure servers with firewalls and intrusion detection, strict access controls, regular security audits, and staff training on data protection.

While we implement these measures, no system is 100% secure. We cannot guarantee absolute security, but we commit to promptly investigating and addressing any security incidents.

Owave is not intended for anyone under 18, and we do not knowingly collect information from children.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or a prominent notice on the platform. Continued use after such changes constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your personal data, email hello@owave.co.