Privacy Policy

The Short Version

• Your books are yours. We keep them so you can use them on any device, and we do not sell them, rent them or use them for advertising.
• We collect what the app needs to work: your sign-in details, your business profile and the records you enter.
• Your records are saved on your device first, then copied to our servers in Frankfurt, Germany, when you are online.
• There are no adverts, no tracking cookies and no analytics tools in OgaBooks or on this website.
• To see, correct or delete your data, write to Henry Nwabuikwu, contact@ogabooks.ng.

Who We Are

OgaBooks is bookkeeping software for traders and small businesses. The details at the top of this page say who runs it and how to reach us. Our data protection contact handles every privacy question and request.

Our Two Roles

For your own account, we decide how your data is used. In data protection law that makes us the controller of it. This policy is mainly about that data.

For the records you keep about your customers and suppliers, you decide what goes in and why. You are the controller and we are your processor: we store and sync those records only to provide OgaBooks to you, and we follow your instructions. Our Terms of Service set out what we promise you as your processor.

What We Collect

• Your account: your email address and password. Your password is stored only as a scrambled verifier that cannot be turned back into the password. If you sign in with Google, Google tells us your email address, name and profile picture.
• Your business profile: business and trading name, address, phone, tax number, currency, financial year, logo, and the bank details you choose to print on invoices.
• Your team: the names, email addresses, phone numbers and roles of people you add to your business.
• Your books: everything you enter, such as customers, suppliers, items, invoices, bills, payments, expenses, stock and reports. These may include your customers’ and suppliers’ names, phone numbers, email and postal addresses and tax numbers.
• Receipt photos you take for expenses, compressed before they are stored.
• Your subscription: your plan, the periods you paid for, invoice and receipt numbers and the payment reference. Paystack collects your card or bank details directly. We never see or store a full card number.
• Messages you send us, such as support requests.
• Technical records: when you sign in, our hosting providers log your IP address, browser and the time, to keep the service secure.

We do not collect your location, your contacts list, your photos other than the receipts you choose, or anything for advertising.

Why We Use It, and on What Legal Basis

• To provide OgaBooks to you: create your account, sign you in, store and sync your books, print your documents, and let your team work together. Legal basis: our contract with you.
• To charge for the service and send receipts and renewal reminders. Legal basis: our contract with you.
• To keep the service secure, prevent abuse and fix faults. Legal basis: our legitimate interest in running a safe service.
• To keep accounting and tax records of what you paid us. Legal basis: our legal obligations.
• To answer you when you write to us. Legal basis: our contract with you, or our legitimate interest in helping you.

We do not make decisions about you by automated means alone, and we do not build profiles of you.

Where Your Data Is Kept

On your device. OgaBooks works offline, so your books are saved in your browser’s own storage on each phone or computer you use. Anyone who can unlock that device and open your browser may be able to see them, so keep your device locked.

On our servers. When you are online, your records are copied to our database, provided by Supabase in Frankfurt, Germany, in the European Union. That is how your books reach your other devices and your team, and how they survive if a phone is lost.

Transfers out of Nigeria, Ghana and Kenya. Storing your data in the European Union means it leaves your country. The European Union’s data protection law gives protection substantially similar to the Nigeria Data Protection Act. Some of our providers are based in the United States; data reaches them only where it is needed to provide the service you signed up for, under their contractual safeguards.

Who We Share It With

Only the companies that help us run OgaBooks, and only what each one needs:

• Supabase: database, sign-in and file storage. Servers in Frankfurt, Germany.
• Vercel: hosts this website and the app. Sees request logs only.
• Paystack: takes your subscription payments. Flutterwave may be used as a backup payment provider.
• Resend and Supabase’s email service: send account, invitation and renewal emails.
• Google: only if you choose to sign in with Google.

We never sell your data. We disclose data to the authorities only when the law requires it, and we tell you first unless the law forbids it. If OgaBooks is ever sold or merged, your data moves with the service under this policy, and we will tell you before it does.

How Long We Keep It

• Your account and your books: for as long as your account is open. If your subscription ends, we do not delete anything: your books stay readable and exportable, and you can pick up where you left off when you pay.
• When you ask us to delete your business or account: we remove it from our live systems within 30 days. Copies in our providers’ backups are overwritten as those backups cycle.
• Records of what you paid us: for as long as tax and accounting law requires, even after your account is deleted.
• Technical logs: for the limited period our hosting providers keep them.
• On your device: until you clear your browser’s data for OgaBooks. Signing out clears unsaved drafts; your saved books stay on the device so they work offline.

How We Protect It

• Every connection to OgaBooks is encrypted.
• Each business’s data is walled off on the server, so a user sees only the businesses they belong to.
• Passwords are never stored in readable form, and are never part of the data that syncs between devices.
• Payments are confirmed with Paystack on our server before anything is activated.
• Only a small number of named people at OgaBooks can reach the server, and what they do there is logged.

No system is perfectly secure. If something goes wrong, we will tell you, as described below.

Your Rights

Under the Nigeria Data Protection Act 2023, Ghana’s Data Protection Act 2012 and Kenya’s Data Protection Act 2019, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data, unless the law requires us to keep it;
• stop or limit using it, or object to how we use it;
• give you your data in a common, machine-readable format, or send it to another service;
• withdraw any consent you gave, at any time.

How: write to Henry Nwabuikwu, contact@ogabooks.ng, from the email address on your account. We reply within 30 days, and it costs nothing. There is no delete button in the app yet, so a request by email is the way to close your account and delete your data. Before we delete anything, we remind you to export what you want to keep: every list and report in OgaBooks can be exported.

If you are unhappy with our answer, you can complain to the regulator: in Nigeria, the Nigeria Data Protection Commission at ndpc.gov.ng; in Ghana, the Data Protection Commission at dpc.gov.gh; in Kenya, the Office of the Data Protection Commissioner at odpc.go.ke.

If You Are a Trader’s Customer or Supplier

A business that uses OgaBooks may keep your name and contact details in its books. That business decides what it keeps, so please ask it first about your data. If you cannot reach it, write to Henry Nwabuikwu, contact@ogabooks.ng and we will pass your request on and help the business answer it.

If There Is a Data Breach

If a breach puts your data at risk, we report it to the Nigeria Data Protection Commission within 72 hours of learning of it, and to any other regulator the law requires. If the risk to you is high, we tell you straight away, in plain words, with what you can do to protect yourself. Where the breach affects records you keep about your customers, we tell you without delay so you can meet your own duties.

Children

OgaBooks is for businesses. You must be 18 or older to create an account. We do not knowingly collect data from children; if you think a child has given us data, write to us and we will delete it.

Cookies and Storage on Your Device

This website sets no cookies and stores nothing on your device. The app stores, in your browser only: your books, your sign-in session, a random device number that keeps two devices’ changes apart, and your preferences such as theme and screen layout. None of this is used for tracking or advertising, and there are no third-party cookies.

Changes to This Policy

If we change this policy in a way that matters, we tell you by email or in the app at least 30 days before the change takes effect. The date it was last updated is at the top of this page.

Contact

Privacy questions and requests: Henry Nwabuikwu, contact@ogabooks.ng. Anything else: support@ogabooks.ng.