Privacy notice

1. Who we are

Udozo is owned and operated by De-Golojan Technologies Ltd (RC 1606658) ("Udozo", "we", "us").

This notice covers udozo.com, resellers' stores hosted by Udozo (on udozo.com addresses and their own domains), Seller HQ (shq.udozo.com), Udozo Connect (connect.udozo.com) and Udozo Verify (verify.udozo.com). We decide how your personal data is used: we are its controller. Write to us at legal@udozo.com.

2. What we keep

• Your account: name, email address, country, password (only as a one-way hash), your mobile number (confirmed later with a code we text it, where we can text numbers in your country), when you signed in, failed sign-ins, and the codes we email or text you (only as hashes).
• About you, from your profile: the area you live in and, if you give them, your date of birth and your sex (or that you would rather not say). Only you and Udozo's team see them, never buyers, sellers or stores, and you can change them at any time.
• Your listings: title, description, features, price and its changes, condition, category, the area you chose, photos and video, how you deliver, and how many people contacted you. Live listings are public, with your first name and the first letter of your last name and your badges. If you choose a username, it is public too: it is your seller page's address and shows with your listings. We remove the hidden details phones add to photos and videos, and keep a one-way fingerprint of each photo to spot photos copied from another listing.
• Chats: messages, photos (encrypted, in private storage, seen only by the two of you), offers, when each side read them, blocks, and how fast sellers reply. A moderator reads a chat only when one of you reports it, or when it matters to a UdozoPay dispute, and each reading is recorded.
• Interest in listings: the listings you save, and that you started a chat, asked for a seller's contact details or a call back, or called a seller.
• Contact requests and call backs: who asked whom, about which listing, the note written (numbers and links hidden) and the answer. When a seller shares their contact, the buyers they shared it with.
• Purchases and reviews: each completed purchase (what was bought, from whom and when) as the right to review it; your reviews, the parts you marked, their earlier versions, your replies in reviews' conversations (contact details and links hidden), the reports you make about reviews and what moderators decided. Reviews and replies are public with your first name and initial and your photo if you have one.
• Private ratings of sellers: the scores, tags and note you give a seller after being in touch about a listing, with how you were in touch (a chat, call, call back or contact request). The seller sees only an anonymous summary of five or more ratings; only Udozo's team sees who rated whom and the notes.
• Seller scores: figures worked out each night from your activity as a seller (replies, answers to buyers, prices, completed sales, reviews and private ratings), kept with monthly snapshots for 24 months. A short summary may be written from them by our AI assistant through our AI provider, which is sent only those figures: never your name, messages, reviews' words or prices.
• Buy orders: who asked to buy which listing, the price asked and any price the seller offered back, how many, the notes and meeting place written (numbers and links hidden), each step and when it was taken (accepted, cancelled, marked sold, said bought, said not bought, and why), and when deadlines were reminded. Each step also shows in your chat with the other person.
• Calls: who called whom, about which listing, when it rang, was answered and ended, and how. The connection details the two browsers swap are deleted when the call ends. Calls are not recorded. While you have udozo.com open signed in, when you last had it open, so buyers can see you are there.
• Reports and safety: reports you make or that are made about you, our checks and reviews of listings, strikes and any suspension, with its reason.
• Your wallet and payments: top-ups, purchases, refunds and payouts. You pay on our payment partner's page; we never receive your full card number, card security code or mobile money PIN.
• UdozoPay orders: the item, price, both fees, the hand-over, the delivery address (encrypted, shown only to the seller once the buyer has paid), the release code (encrypted, shown only to the buyer), the seller's dispatch photos (encrypted, in private storage), the courier and tracking, the deadlines, and who ended the order and why.
• Orders on a reseller's store: what is kept for a UdozoPay order, plus the store, the price figures each side is paid, your confirmed phone number when you bought (encrypted), the listing and the store's note as you saw them, the order's chat with the store, and the supplier and reseller's own thread about it. We record each time your details are opened.
• Disputes: the reason, everyone's messages and photos (encrypted, in private storage), our decision and, on a store's order, whose fault an upheld dispute was.
• Reports of a reseller's store: who reported it, the store, the reason, what was written, the order, and our decision. Only Udozo sees who made a report.
• Payout accounts: the bank (account name, and the number kept encrypted) or mobile money number, when it was added, and each payout's amount, status and reference.
• Shop assistants: your questions, the answers, the listings it showed and what it looked up, your ratings and reports of answers. To limit questions from one place each day, a one-way code of your IP address that changes every day.
• Help: your chats and questions with our team, and, if you chat without signing in, the name and email address you give. Messages sent with our Contact us form: what it is about, your name, email address, the phone number if you give one, your message, the country you were browsing and, if you were signed in, your account; our replies (emailed to you) and our team's notes on it.
• Sellers we invite: the business contact details you have made public (your or your store's name, phone number, area and what you sell), or the email address you or someone else gave us, so our team can invite you to sell on Udozo. We keep our messages to you, your replies and feedback, whether you opened your invite link and, if you sign up with it or with that phone number or email, which account it led to.
• Sellers on Seller HQ: your business's details and checks, your team, your stores, what you publish on them, your wallets, invoices and payouts, your API keys (only as hashes) and webhooks, and for domains you buy, the registrant details you give.
• Notifications: what we told you in your account (about your listings, chats, requests, orders, reviews, payouts and account), when, and whether you have read it.
• Devices: on udozo.com, Seller HQ and for our team, the browsers where you turned on notifications (the browser's push address and keys, encrypted, and a label such as "Chrome on Android"), and which notifications you chose to have sent to them.
• Signing up: each step you take to create an account on udozo.com or Seller HQ (entering your email, the emailed and texted codes, your mobile number, your password, signing in with Google, Facebook or WhatsApp), when you took it, whether it went through or why not (for example a wrong or expired code), the country you chose, and the kind of device and browser (such as "Chrome on Android"), never your codes or password. Our team uses it to see where people get stuck signing up, and may contact you to help. We also count how many times the sign-up pages are opened each day, without anything about who opened them.
• Posting an ad: each step you take from pressing Sell to your ad going live (where you pressed Sell, which step of Post an ad you reached, what a step still needed, whether posting went through or why not), how a moderator's review ended and why, and when your ad first got a view, a chat, a call or a lead, and sold, with the kind of device and browser, never anything you typed or uploaded. Our team uses it to see where sellers get stuck posting, and may contact you to help. If you leave an ad unfinished, or finished but not posted, we may remind you in your account and by email (once for an unfinished ad, up to three times for one ready to post); deleting the draft stops them. We also count how many times Post an ad is opened each day, by where Sell was pressed, without anything about who opened it.
• Technical data: your IP address, used for rate limits and security, and the requests your browser makes, in our server logs.
• Listing views: how many times each listing's page was opened, each day, shown to its seller and used to rank Trending. Nothing about who viewed it is kept: so one visitor counts once, a one-way code of their IP address, browser and the listing is held in memory for half an hour, then forgotten.
• Where visits come from: each time someone arrives on udozo.com from another site, an ad, a campaign link or by typing the address, we count it for the day by where it came from (for example Facebook, a Google search, an ad's campaign name or another website's name), the kind of page they landed on and the market. We read the linking site's name and the campaign tags and ad click markers in the address (such as utm_campaign or fbclid) to do this, and keep only those daily counts: never the address, the click marker, the visitor's IP address or anything that could identify them. If you chose Accept all on our cookie banner, the optional udz_src cookie also remembers where your latest visit came from for 30 days, and if you then create an account, we keep that source (such as "Facebook ad, campaign tv_week") with your account so we can tell which of our ads bring people to Udozo. It is never shared with advertisers or used to show you ads.
• What you look at, to personalise what you see (section 5): signed in, or if you are not signed in and chose Accept all on our cookie banner, the listings you open, how long you read them, how many photos you open and how far down you read; what you search for (the words, with phone numbers, emails, long numbers and codes taken out) and the filters you use; which listings you click, share or mark Not interested, and where on the page they were; and, from your account, the listings you save, contact, call, make offers on or buy. Each visit has a random ID kept only in the page while it is open. If you are not signed in, a random ID in the optional udz_vid cookie links your visits; we keep only a one-way code of it. From this we keep a short profile of your interests (categories, brands, models, areas, price ranges and condition, which fade over time), your last searches and the listings you viewed.

We do not collect your precise location: "Use my location" on udozo.com finds the nearest area in your browser, and your position is never sent to us. We use no advertising or third-party tracking cookies. Our two optional cookies are set only if you choose Accept all: udz_vid, to personalise what you see, and udz_src, to know which link or ad brought you to an account you create.

Personalisation never uses your date of birth (except to leave out anyone under 18, who gets no profile), your sex, what you write in messages or chats, or your phone number. It is never used for advertising, never sold and never shown to sellers: they see only how many people viewed and contacted their listings. One person in ten, chosen at random, sees the usual popular order in For you instead, so we can measure whether personalising helps.

3. Identity checks

Before you sell with UdozoPay, are paid out, or run stores, Udozo Verify (verify.udozo.com) checks your identity: your name, date of birth, your ID document's type, number and photos, a selfie, and short photos taken by your camera while you follow on-screen steps. A registered business also gives its registration documents.

Comparing your face with your ID uses biometric data, so we ask for your explicit consent first. Without it we cannot check you, and you cannot use what needs the check.

Photos are stripped of hidden data, such as location, encrypted, and stored privately in the United States. A person on Udozo's team reviews them. ID numbers are encrypted, and a keyed fingerprint of them shows our reviewers when the same ID is used on another account. We keep the outcome, your verified name and your document's country.

4. AI providers

A shop assistant's answers are written by Anthropic, OpenAI or DeepSeek, whichever runs that assistant. We send it your question and the conversation so far, Udozo's own information for your country, and the public details of the listings it looks up. Signed in, it can also look up your own listings, your UdozoPay orders (never codes) and which of your chats are waiting for a reply (never their messages).

We send more only when you ask: a seller's own listing and its photos when they ask it to fill in a listing from its photos (only to Anthropic or OpenAI: DeepSeek is never sent photos), and the latest messages of a chat when a seller asks it to suggest a reply. Before anything is sent, numbers that look like phone, card or account numbers, codes and passwords are hidden, and we never send your email address, phone number, delivery address or payment details.

4a. WhatsApp and wanted requests

If you use Udozo on WhatsApp, Meta (WhatsApp) carries the messages between you and Udozo's number, and we keep your WhatsApp number, your WhatsApp profile name, which Udozo account it is connected to, when you opted in or sent STOP, and a record of each message in and out (its kind and whether it was delivered and read; never what it said beyond what goes into a listing chat). What you write in a chat is kept as a chat message on Udozo, as section 2 says. Photos you send are fetched from Meta and kept as chat or listing photos. Udozo's own number relays chats, so the other person never sees your number, unless you are a seller who chose Let buyers WhatsApp me directly: then a signed-in buyer who taps Contact seller gets your first name and initial and your connected WhatsApp number, and we keep who got it, about which listing and when (for 12 months) and tell you. You can also make your Udozo account there, or sign in to udozo.com with it: you give your first and last name and your email (confirmed with a code we email you), the WhatsApp number becomes your account's confirmed mobile and its country your account's, and a sign-in on udozo.com waits until you approve it from that WhatsApp (we keep the request, with the kind of browser that asked, for a day). A code to confirm your mobile number may be sent to it on WhatsApp, when you ask for that or a text cannot reach you: Meta carries it, and we keep only that it was sent, never the code. Questions you ask the shop assistant there are sent to it and kept as assistant conversations, as section 4 says; if your number is not connected to an account, it is recognised by a code made from your number, never the number itself.

When you post a wanted request, we keep what you wrote, its category, place, budget and condition, which sellers we told and who answered. Sellers we tell see what you wrote and your first name and initial.

4b. Connect Centre applications

If you apply to run a Udozo Connect Centre we keep what you tell us about your business and office (its address, map position, opening hours, phone, capacity and the person in charge), the photos of your office, which version of the Connect Centre agreement you accepted, the deposit you paid, and our team's notes: what we asked you to change, the visit (who visited, when, and their report) and our decision. Your identity check is kept as section 3 says.

Our team and the person who visits your office see your application. Once your centre is approved, its name, address, opening hours, phone and photos are shown to buyers and sellers who choose it.

We keep an application while your centre runs and for two years after it closes; one that is rejected or withdrawn, for two years after it ends.

4c. Udozo auctions

If you bid at an auction on Udozo we keep each bid (the amount and when you made it), whether you were offered it and paid, and, for an item Udozo sells, when you collected it. Other bidders and the seller see your bids beside your first name and the initial of your last name, never your account, email or phone; the seller then sees the winner as for any UdozoPay order.

If you sell by auction we keep your starting price, reserve (never shown to bidders) and length, and how the auction ended.

If your item was abandoned at a Connect Centre and auctioned, we keep what the sale raised, what it paid of the storage you owed, what was left over for you and your claim for it.

We keep auction records for six years, as we keep payment records.

5. Why we use it

Some decisions are made automatically: refusing a listing that uses a word for an item that may never be sold, refusing store pages that claim to own the items, refusing a UdozoPay order whose buyer and seller our checks show are the same person, limits, and pausing a seller or store at the strike limit. A person on Udozo's team reviews them if you ask.

Personalisation is automated too: it chooses the order of listings in For you and the other rows made for you. It decides nothing about you beyond that order: it never stops you seeing, buying or selling anything, and search with words still shows the best matches first. Turn it off, remove single items or clear your history at any time under Account, Privacy (signed in), or with Necessary only in Cookie settings (not signed in).

6. Who sees it

• The public: live listings and each seller's page (first name and initial, username if they chose one, profile photo and cover, badges, when they joined, their live listings and figures), including in search engines and in previews when a link is shared.
• The other person in a chat: your first name and initial, your messages and offers. The other person in a buy order: your first name and initial, the price, notes and meeting place written, and each step. A seller sees a UdozoPay buyer's delivery address once they have paid. A seller sees a buyer's name, confirmed mobile number and email when the buyer asks for a call back, and a buyer sees a seller's confirmed phone number and email once the seller shares them. Neither sees the other's number in a call. On a reseller's store, the supplier and the reseller see the buyer's name, phone number, email and address once the supplier accepts, and the courier the seller chooses receives the delivery address.
• Udozo's team, as their work needs.
• Service providers working for us: Neon (database, United States), DigitalOcean (servers and file storage, United States), Upstash (cache and rate limits), Vercel (hosting our sites, and the registrar for domains sellers buy, which receives the registrant's details), Cloudflare (our domain's DNS, the network in front of our API, and relaying calls between buyers and sellers: the call passes through it, encrypted, and is not recorded), Resend and MailerSend (email), Termii and Africa's Talking (text messages), our payment partners Paystack, Flutterwave, pawaPay and Stripe (payments, refunds and payouts, depending on your country and method), Anthropic, OpenAI and DeepSeek (shop assistants, as section 4 says; DeepSeek processes what it is sent in China), Meta (WhatsApp: carrying messages between you and Udozo's number, when you use Udozo on WhatsApp), Google (signing up and in with Google on udozo.com and Seller HQ: Google tells us your name, email and that it confirmed it; we keep your Google account's ID to recognise it, never your Google password), Meta (signing up and in with Facebook on udozo.com and Seller HQ: Facebook tells us your name and email, which we then confirm with our own emailed code; we keep the ID Facebook gives Udozo for your account to recognise it, never your Facebook password, and we ask for nothing else from Facebook), and browser push services (Google, Mozilla, Apple, Microsoft) for notifications on udozo.com and Seller HQ: they carry each notification to your device encrypted, so they cannot read it.
• Authorities, where the law requires it.

We do not sell your personal data, and we do not use it for advertising.

7. Where it is stored

Your data is stored in the United States. What a shop assistant run by DeepSeek is sent (section 4) is processed in China. Where it leaves your country, we use the safeguards your country's law requires.

8. How long we keep it

9. Your rights

Depending on where you live, you can ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, to move it, and to withdraw consent (for identity checks, before the check is decided). Email legal@udozo.com; we answer within a month. Some data must be kept by law even if you ask us to delete it.

You can complain to your country's data protection authority, for example Nigeria's Data Protection Commission (NDPC), Ghana's Data Protection Commission (DPC) or Kenya's Office of the Data Protection Commissioner (ODPC).

10. Children

Udozo is for adults only. We do not knowingly keep data about anyone under 18; we close such accounts when we find them. Nobody under 18, by the date of birth on their profile, gets a personalisation profile.

11. Changes

We update this notice when what we do changes, and tell you of important changes before they apply.