Privacy and security

When you search and browse

You do not need an account, and FindOja does not ask for your name, email or phone number. To understand what is useful, it records simple usage events:

• the words you search for (up to 200 characters) and which results were shown;
• which business pages are opened and when “Visit Storefront” is selected;
• a random identifier that exists only for that browser tab and is gone when you close it. It is not linked to you, your device or any account.

Please do not put personal details in the search box. Events are deleted automatically after 90 days. FindOja has no advertising trackers and shares nothing with advertisers.

What is stored on your device

• Customers: no cookies. Your browser keeps the temporary tab identifier above, and, if you dismiss the “Install FindOja” card, the date you did so, to avoid asking again for 14 days. If you use “Save” or browse business pages, your browser also keeps the web addresses of those businesses (a saved list and a short recently viewed list) so you can find them again. These lists stay on your device and you can clear them from the Saved page. To show them, your browser asks FindOja for the current details of those businesses, which means the web addresses in the list are sent with that request. FindOja does not store the list or link it to you or your device.
• Businesses: signing in to list a business sets one secure cookie that is sent only to FindOja’s sign-in pages, lasts up to an hour, and is removed when you sign out.

For businesses that list on FindOja

• Sign-in. You use your OlaOrder login. Your credentials go to OlaOrder to be checked; FindOja does not store your password.
• What we keep. A record that your business joined (its identifier, the date, who joined it and the version of the consent shown), so we can honour your choice.
• What visitors see. Only your published storefront information: name, logo, tagline, about text, areas served, active offerings with prices and photos, ratings and verification. Never your phone number, email, WhatsApp number or address.
• Your results. The numbers on your listing page show how many times your page was opened and how often “Visit Storefront” was selected in the last 30 days. They are totals only; FindOja does not record who visited.
• Email. If email is switched on, we send one confirmation to your sign-in address when you join or leave. We use the address from your session for that message only and do not store it.
• Leaving. You can leave at any time from the “List your business” page; it takes effect within about a minute and does not change your OlaOrder shop.

How we protect it

• Connections are encrypted, and the site only runs over HTTPS.
• FindOja reads OlaOrder with a read-only, public-data key and never touches private seller data such as contact details, plans or billing.
• Usage data sits in a separate database with access limited by default; only the services that need it can read it.
• Administrator access is separate, checked on every request, and limited to named platform administrators.

No system is perfectly secure, so we keep the amount of data small on purpose.

When something breaks

If a page fails, FindOja may record a short error message, the page address (without anything after a “?”) and an error code so we can fix it. It does not include your IP address, device details, search words or any account information.

Who processes it

FindOja runs on hosting and database providers that process data on our behalf to run the service. We do not sell personal information.

Questions, requests and security reports

Write to security@afolaola.com with any privacy question or to report a security concern. We read every message. For how FindOja and the businesses on it work together, see the marketplace disclaimer.