Privacy Policy

Who we are and our role

Ataja is run by Delka Engineering Ltd. “Ataja”, “we” and “us” mean Delka Engineering Ltd, which operates getataja.com and the Ataja apps. We follow the Nigeria Data Protection Act 2023.

• For sellers and their staff, we decide how account data is used, so we are responsible for it.
• For a seller’s customers, the seller decides what to collect and how to use it. We process that data for the seller. If you bought from a store on Ataja, contact that seller first about your data. We’ll help them respond.

What we collect

• Your account: name, email, phone number, a scrambled (hashed) version of your password and your two-step login settings.
• Your business: business name, address, registration details if you add them, bank account details shown on invoices, logo, products, staff and settings.
• Your customers and sales: names, phone numbers, emails, social handles, delivery addresses, notes, orders, invoices, receipts and transfer screenshots.
• Customer chats, if you use Sales Agent: connected Instagram, Facebook or WhatsApp accounts, messages with your customers, and the replies and actions of the agent.
• Technical data: IP address, device and browser details, login sessions and logs that keep the service secure and working.

Why we use it

• To run the service you asked for, such as stores, orders, invoices and the till (contract).
• To send codes, password resets, staff invites, receipts and service messages (contract).
• To keep accounts safe, prevent abuse, fix problems and improve Ataja (legitimate interests).
• To keep records and respond to authorities where the law requires it (legal obligation).
• To send marketing or use anything else that needs your consent, which you can withdraw at any time (consent).

We don’t sell personal data. We don’t use your customers’ data to train our own AI models.

Sales Agent and AI

If a seller turns on Sales Agent, customer messages and the store details needed to answer them go to OpenAI to draft replies, and messages travel through Zernio and the messaging platform. By default the seller approves each reply; a seller can choose to let the agent send replies itself. Sellers are responsible for telling their customers they use automated replies where required.

Who we share it with

We share data only with the providers that help us run Ataja:

• Railway: application hosting and databases.
• Vercel: website hosting and privacy-friendly site analytics.
• Cloudflare: storage for images and uploaded files.
• Resend: sending email.
• OpenAI and Zernio: only for sellers who use Sales Agent.

A small number of the Ataja team can see account data when needed for support or security. We may also share data if the law requires it, to protect people or the service, or as part of a sale or merger of the business. A store’s public pages, invoices and receipts can be seen by anyone who has the link, so share those links with care.

Data stored outside Nigeria

Some of our providers store or process data outside Nigeria. When data leaves Nigeria we rely on the safeguards the Nigeria Data Protection Act allows, such as contracts with those providers.

How long we keep it

We keep your data while your account is open. After you ask us to delete it, we delete or anonymise it within 30 days, except records we must keep by law or to settle disputes. Copies in backups are removed as those backups expire. Sellers decide how long their customers’ data stays in their account. Files customers send in chats, such as photos and voice notes, are deleted automatically after 12 months.

How we protect it

Connections are encrypted, passwords are hashed, each business’s data is kept apart and two-step login is available. No system is perfectly secure, so if a breach puts you at risk we’ll tell you and the regulator as the law requires.

Your rights

You can ask to see, correct, delete or get a copy of your data, object to or limit how we use it, and withdraw consent. Email hello@getataja.com and we’ll respond within 30 days. You can also complain to the Nigeria Data Protection Commission.

How to delete your data

Email hello@getataja.com from the address on your account, with the subject “Delete my data”, and name the business if you own one. We’ll confirm it’s you, then delete or anonymise your data within 30 days as described above.

If you messaged a store through Instagram, Facebook or WhatsApp, or bought from one, ask that seller or email us with the store’s name and your phone number or social handle.

Browser storage and analytics

We don’t use advertising cookies. The dashboard keeps your login, and the till and store keep your cart and offline sales, in your browser’s storage so they work. Our site analytics count visits without cookies.

Children

Ataja is for people aged 18 or over. We don’t knowingly collect children’s data.

Changes to this policy

If we make an important change, we’ll update the date above and tell account holders by email or in the dashboard.