Privacy Policy

1. Information We Collect

At OPNMRT, we believe in radical transparency regarding the data we collect. We only gather what is necessary to operate our multi-tenant commerce engine, process transactions securely, and optimize your experience.

• Account Information: Name, email address, phone number, and billing details provided during registration.
• Merchant Data: Store configurations, product catalogs, customer data (processed on behalf of merchants), and transactional records.
• Technical Data: IP addresses, browser types, device identifiers, and telemetry data required for security and performance monitoring.
• Payment Information: We do not store full credit card numbers. All payment processing is handled securely via our tokenized integrated gateways (e.g., Paystack, Flutterwave).

2. How We Use Your Data

The primary purpose of collecting data is to provide seamless, scalable commerce infrastructure. Specifically, we use your information to:

• Provision and maintain your isolated tenant environment.
• Authenticate access across our ecosystem, including the Dashboard, API, and Hub Portals.
• Analyze system performance, prevent fraud, and enforce our Acceptable Use Policy.
• Communicate critical platform updates, billing notices, and security advisories.

3. Data Storage & Security

OPNMRT employs multi-layered security architecture. Data is encrypted both in transit (TLS 1.3) and at rest (AES-256). As a multi-tenant platform, we enforce logical isolation at the database layer to ensure merchant data is completely segregated.

Should a data breach ever occur, we are committed to notifying all affected parties within 72 hours, in accordance with global data protection standards (including GDPR and NDPR).

4. Merchant Responsibilities

Because OPNMRT operates as a white-labeled infrastructure provider, Merchants are the primary Data Controllers for their end-customers' data. Merchants using our platform are required to:

• Provide their own transparent Privacy Policies on their storefronts.
• Obtain lawful consent from their customers before processing personal data.
• Comply with all applicable local and international data protection laws.