This Privacy Policy explains how Orisun Cooperative & Empowerment Scheme (“Orisun”, “we”, “us”) collects, uses, stores, and shares personal information when you use our mobile apps and website (the “Services”).
1. Who we are
Orisun is a cooperative thrift and mutual-support platform for market traders and members. Contact us at privacy@orisun.ng or support@orisun.ng.
2. Information we collect
- Account details: full name, phone number, password (stored as a hash), business type, coordinating area, and account role/status.
- Financial activity: Owó inú (wallet) balances and top-ups, Àjọ thrift settings and history, Owó ọ̀sẹ̀ (Friday membership) records, Àtìlẹ́yìn requests and repayments, empowerment requests, and related ledger notes/references.
- Payment data: when you pay with Paystack we receive payment status, references, and (if you save a card) limited card metadata such as last four digits, brand/bank, and a reusable authorization token. We do not store full card numbers or CVV.
- Identity verification: if you request Àtìlẹ́yìn we may process BVN or NIN through our verification provider (e.g. Dojah) and keep a masked ID, name match fields, and verification timestamp.
- Device & notifications: push notification tokens and platform (iOS/Android) so we can send meeting and account alerts you enable.
- Usage: basic technical logs needed to secure and operate the Services (e.g. API errors, authentication events).
3. How we use information
- Create and secure your member account
- Process thrift, membership fees, top-ups, and support requests
- Charge linked cards for Àjọ, Owó ọ̀sẹ̀, and agreed verification fees
- Coordinate Friday meetings and attendance with area coordinators/admins
- Send optional reminders and important account notices
- Prevent fraud, abuse, and unauthorized access
- Comply with legal and cooperative record-keeping needs
4. Sharing
We share data only as needed to run Orisun:
- Paystack — payment processing and card authorization
- Identity providers (e.g. Dojah) — BVN/NIN verification when you request it
- Firebase / Apple / Google — delivery of push notifications
- Coordinators and admins — limited member info needed for meetings, collection, and support reviews
- Legal authorities — when required by law
We do not sell your personal information.
5. Retention
We keep account and financial records while your membership is active and for a reasonable period afterward as needed for cooperative audits, dispute resolution, and legal obligations. You may request account deletion at any time (see below).
6. Your choices & rights
- Update profile details in the app or web dashboard
- Turn off optional notifications in Settings
- Remove a saved payment card
- Delete your account in-app (Me → Legal & privacy → Delete account) or follow Delete Account / Data Deletion
- Email privacy@orisun.ng for access or correction requests
7. Children
Orisun is intended for adults participating in the cooperative. We do not knowingly collect data from children under 13 (or the age required by local law).
8. Security
We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access controls. No system is perfectly secure; please use a strong password and keep your phone locked.
9. International transfers
Some processors (payments, notifications, identity) may process data outside Nigeria. We select providers with appropriate safeguards for that processing.
10. Changes
We may update this policy. We will revise the “Last updated” date and, for material changes, provide additional notice in the app or by other reasonable means.
11. Contact
Privacy questions: privacy@orisun.ng
General support: support@orisun.ng
Website: https://orisun.ng
