Privacy Policy

1. Who we are

Oppovia is owned and operated by Osabox Limited. Osabox Limited is the controller responsible for the personal data described in this policy. You can contact us about privacy at privacy@oppovia.com.

We handle personal data in line with the data protection laws that apply to us and to our users. Depending on where you live, these may include the Data Protection Act No. 3 of 2021 of Zambia, the UK and EU General Data Protection Regulation, the Kenya Data Protection Act 2019, the Nigeria Data Protection Act 2023 and South Africa's Protection of Personal Information Act.

2. Information we collect

Information you give us

• Account details: name, email address, password, and optionally phone number, country, city, timezone, profile photo and bio. We store passwords only as a secure one-way hash.
• Presenter applications: full name, display name, email, phone, country and city, photo, bio, interests, preferred categories and time slots, broadcasting experience, social media links and your reasons for applying.
• Presenter activity: your public profile, shows, cover images, schedule requests, check-in times, broadcast start and end times, attendance records, cautions, warnings, suspensions and Presenter Score.
• Payout details: for presenters, the payout method you add, such as a mobile money number, bank account number or PayPal email and the account holder's name, together with wallet balances, transactions and payout requests.
• Things you post: comments, poll votes, song, shout-out and other requests, tip messages and reports you make.
• Messages to us: anything you send when you contact support, appeal a decision or make a request.

Information collected when you use Oppovia

• Listening and engagement: which broadcasts you join, when, and roughly how long you listen; presenters you follow and unfollow; reminders you set; shares; tips you send and receive.
• Live audio: when a presenter goes live, their microphone audio is transmitted in real time to listeners through our streaming provider. We only access a presenter's microphone after they allow it in their browser, and only while they use the studio. Listeners only transmit audio if a presenter invites them on stage and they choose to join: their microphone is then used only while they are on the stage, and everyone listening hears their voice and sees their display name and profile picture. Leaving the stage, or being taken off it by the presenter, stops their microphone. Live broadcasts, including audience speakers, are not recorded by default.
• Technical and security data: IP address, browser and device information, login attempts, error logs, and records of administrative actions. We also store a random listening session identifier on your device, as described in our Cookie Policy.

Information from others

If you sign up or log in with Google, Google shares your name, email address, profile photo and a Google account identifier with us, so we can create or find your account. We never receive your Google password.

We may also receive information about you when other users report content or conduct, when a presenter mentions you in a request or comment response, or from payment providers when they process a transaction.

3. How we use your information

4. What other people can see

• Presenters: presenter profiles, display names, photos, bios, shows, schedules, follower counts and live status are public.
• Comments and requests: your display name, profile photo and what you post are visible to the presenter and to others in the live room.
• Tips: the presenter can see who tipped and any message. Recent tips in a live room show your name unless you choose to tip anonymously.
• Followers: presenters can see the display names and photos of the people who follow them.
• Listening: your listening history is private to you. Listener numbers are shown only as totals.

5. Who we share your information with

We do not sell your personal data. We share it only as follows:

• Service providers who process data on our behalf under contract, including hosting providers, our real-time audio streaming provider (which receives the audio of presenters and audience speakers and connection data such as IP addresses and participant display names), payment and payout providers such as mobile money operators, banks and PayPal, and providers of email or text messaging if we use them.
• Content delivery networks that serve fonts and software libraries used by our pages. They receive your IP address and browser information when your device loads those files.
• Presenters and other users, to the extent described in section 4.
• Advertisers and sponsors, who receive only aggregated audience statistics that do not identify you.
• Authorities and others where the law requires it, or where it is necessary to protect the safety, rights or property of our users, Osabox Limited or the public.
• A buyer or successor if Osabox Limited or Oppovia is involved in a merger, acquisition or reorganisation, subject to this policy.

6. International transfers

Oppovia is used around the world, and our service providers may process data in countries other than yours. When we transfer personal data across borders, we take the steps required by applicable law, such as contractual safeguards, to protect it.

7. How long we keep your information

• Account and profile data: for as long as your account is open. When you close your account, we delete or anonymise it within a reasonable period, except where we must keep some information for the reasons below.
• Financial records such as tips, revenue events, wallet transactions and payouts: for as long as tax, accounting and anti-fraud laws require.
• Presenter applications: while needed to review the application and any re-application. You can ask us to delete a declined application.
• Login attempt records: deleted automatically after 24 hours.
• Notifications you have read: deleted automatically after 90 days.
• Security, moderation and audit records: for as long as needed to protect the platform, handle appeals and resolve disputes.

8. Security

We use technical and organisational measures to protect your information. These include encrypted connections, hashed passwords, role-based access for staff, protection against cross-site request forgery, login attempt limits, rate limiting and audit logs of administrative actions. No system is completely secure. If a personal data breach occurs that the law requires us to report, we will notify the relevant authority and affected users.

9. Your rights

Depending on the law that applies to you, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data, much of which you can edit in your account;
• ask us to delete your data;
• object to or ask us to restrict certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on consent; and
• complain to a data protection authority, such as the Office of the Data Protection Commissioner in Zambia, the Information Commissioner's Office in the UK, the Office of the Data Protection Commissioner in Kenya, the Nigeria Data Protection Commission or the Information Regulator in South Africa.

To make a request, email privacy@oppovia.com. We may need to confirm your identity. We will respond within the time the law requires. Some rights have limits, for example where we must keep records by law.

10. Children

Oppovia is not intended for children under 13. Users under 18 need permission from a parent or guardian, and presenters must be at least 18. If we learn that we hold personal data about a child under 13 without appropriate consent, we will delete it. If you believe this has happened, contact privacy@oppovia.com.

11. Cookies

We use only the cookies and browser storage needed to run Oppovia. Our Cookie Policy lists them.

12. Changes to this policy

We may update this policy as Oppovia changes. The effective date at the top of the page shows when it last changed. If we make material changes, we will let you know through the platform or by email before they take effect.

13. Contact us