Legal
Privacy
Policy.
ONARU LIMITED respects your privacy. This policy explains what information we collect through our corporate website and ONARU OS, why we collect it, how we protect it, and the rights you have over it.
Who we are
The organisation responsible for your information.
- Data controller
- ONARU LIMITED, Lagos, Nigeria.
- Applies to
- The ONARU corporate website (onaru.app), ONARU OS, and related corporate digital properties.
- Separate policies
- Individual ONARU companies and products — such as TRYSA, YOFA, and Playbaaq — may maintain product-specific privacy policies that apply when you use those products directly.
- Contact
- For any privacy question or request, contact the ONARU corporate team through the contact page.
What we collect
Information we collect and why.
Contact enquiries
Name, email address, phone number, company, and the content of your message when you contact us or submit a partnership enquiry. Used only to respond to and manage your enquiry.
ONARU OS accounts
For staff and authorised users: name, work email, access credentials, role, and company membership. Used to provide access, apply permissions, and operate the platform.
Employment records
For ONARU team members: onboarding, compensation, payroll, and bank details. Access is restricted to the individual, the CEO, and the COO. Never visible to other staff.
Operational data
Tasks, approvals, messages, and business records created inside ONARU OS. Used solely to operate the businesses they belong to, under role-based access controls.
Technical data
Basic device, browser, and usage information needed to keep the website and app secure, fast, and reliable. We do not sell or rent any personal information.
Communications
Emails sent to or from ONARU mailboxes, and notification preferences. Used to deliver correspondence and keep records of business communication.
How we use it
Clear purposes, no surprises.
We use personal information only for the purposes it was collected for: responding to enquiries, providing and securing access to ONARU OS, operating our businesses, meeting legal and financial obligations, and improving our services.
We do not use your personal information for advertising, we do not sell it, and we do not share it with third parties except the service providers that help us operate — such as cloud hosting, email delivery, and authentication — each bound to handle it only on our instructions.
AI features inside ONARU OS process business data to support the company's own operations. AI systems act only within defined permissions and never receive access beyond what the requesting user is authorised to see.
How we protect it
Security and access control.
Access to information inside ONARU OS is governed by role-based permissions and company-level isolation: each business sees only its own data, and sensitive records such as salaries and bank details are restricted to the employee, the CEO, and the COO.
Credentials are never stored in plain text, sensitive actions require approval, and significant activity is recorded in an audit trail. Our infrastructure is hosted on managed cloud services with encryption in transit and at rest.
No system is perfectly secure. If a incident ever affects your personal information, we will investigate promptly and notify affected parties where required by law.
Your rights
Control over your information.
Under the Nigeria Data Protection Act and other applicable law, you may request access to your personal information, ask us to correct or delete it, object to or restrict certain processing, and withdraw consent where processing is based on consent.
To exercise any of these rights, contact the ONARU corporate team. We will respond within a reasonable timeframe and in line with applicable law.
Access
Request a copy of the personal information we hold about you.
Correction
Ask us to correct inaccurate or incomplete information.
Deletion
Ask us to delete information we no longer need to keep.
Objection
Object to processing based on legitimate interests.
Restriction
Ask us to limit how we use your information.
Complaint
Raise a concern with us or with the Nigeria Data Protection Commission.
Cookies & retention
How long we keep information.
Our website uses only the cookies and local storage needed to keep you signed in, remember preferences, and make the installed app work offline. We do not use advertising trackers.
We retain personal information only for as long as it is needed for the purpose it was collected, or as required by law, accounting, or legitimate business record-keeping. When it is no longer needed, it is deleted or anonymised.