Review status: draft
Privacy Policy
Explain what personal information the current system stores and the request path available to account holders.
Information collected
The account stores an email address, a display name when one is entered, a password hash, and the time email verification succeeds. Seller setup stores a legal name, an optional trading name, a country code, a seller classification, and an optional description. Buyers can store delivery addresses. Orders store the buyer, the items, the amounts, and the shipping address copied onto the order.
Identity documents are not collected. Payment card numbers are not stored by ITOJARA. Card payment is handed to the configured payment provider.
Purpose
The information is used to create the account, verify email, sign the person in, operate organizations, show products, take orders, record payment status, fulfil paid orders, and record settlement accruals. Security events record the action type and a short result. They are not a marketing profile.
Processing, sharing, and providers
People in the same organization can see the organization records their role allows. A seller sees complaint and order information for that seller's organization. A platform administrator with the required permission and a privileged session can review privacy requests, complaints, and retention settings.
Paystack is the payment provider integrated for checkout. Email delivery can use a configured email provider when that worker is enabled. Customer-facing AI model calls are not enabled. This draft does not name a hosting contract, a backup vendor, or a transfer country beyond the fact that the operator chooses the infrastructure.
Retention, rights, and security
Retention periods are not set. Categories exist so an approved period can be recorded later. A privacy request can ask for access, correction, export, deletion, or can make a privacy complaint. Deletion is a request. It does not automatically erase orders, payments, or settlement records.
Passwords are stored as Argon2id hashes. Session cookies are HttpOnly. State-changing requests after sign-in require a matching CSRF token. No privacy officer, registered address, or regulatory registration number is published because none has been supplied.
Questions can be sent to info@itojara.com. This draft will be replaced only by a later version. The software asks for acceptance of that later version and does not copy an old acceptance forward.
Privacy requests
Submit a privacy request after you sign in. If you cannot sign in, email info@itojara.com. Sending a request does not erase orders or payment records by itself.