Waroja: Your all-in-one commerce and work platform in Nigeria

Privacy Policy

This Privacy Policy explains what personal information Waroja collects, why, and how it is protected. Waroja processes personal data in line with the Nigeria Data Protection Act (NDPA/NDPR).

1. Information we collect

  • Account details you provide: name, username, email, phone number, password (stored as a salted hash, never in plain text).
  • KYC/verification details where required for wallet limits, including your BVN, which is used solely to verify your identity with our banking partner and is never displayed to other users or sold to third parties.
  • Transaction data: wallet funding, withdrawals, orders, VTU purchases, and savings activity, needed to operate your wallet and provide support.
  • Content you post: listings, service offers, chat messages, reviews, and social posts/reels.
  • Technical data: IP address and device information, used for security (fraud prevention, rate-limiting) and to keep you signed in.

2. How we use your information

To operate your wallet and process transactions; to verify your identity for KYC/anti-fraud purposes; to provide customer support; to send you transactional notifications (order updates, OTP codes, wallet activity); and, where you have not opted out, to show you relevant marketplace/service recommendations.

3. Cookies and advertising

Waroja uses cookies required for you to stay signed in and for basic site functionality. Where enabled, our blog and public pages may show advertising served by Google AdSense, which uses cookies to personalize ads. Visitors in the EEA, UK, and Switzerland are shown a consent prompt before any personalized advertising cookie is set. You can manage ad personalization directly through Google's Ads Settings.

4. Who we share data with

We share the minimum necessary data with: our banking partner (UBA) to operate your virtual account; our VTU provider to fulfil airtime/data/cable/electricity purchases; and law enforcement or regulators where legally required. We do not sell your personal data to third parties.

5. Data retention

We retain account and transaction data for as long as your account is active, and for a reasonable period afterward as required for legal, tax, and fraud-prevention purposes.

6. Your rights

You can request a copy of the personal data we hold about you, ask us to correct inaccurate data, or request account deletion by contacting us via the Contact Us page. Some data (e.g. transaction records) may be retained after account deletion where required by law.

7. Contact

Questions about this Privacy Policy or how your data is handled can be sent via our Contact Us page.