Privacy policy

Last updated 8 Nov 2026

Oya Invoice (“we”, “us”) provides invoicing and receipt software at oyainvoice.com.ng. This policy explains what we collect, why, and your rights under the Nigeria Data Protection Act 2023.

What we collect

• Your account: your name, business name, email, phone number and a scrambled (hashed) password. We never store your password in readable form.
• Your business records: customers, items, prices, invoices, receipts, payments, expenses, your logo and bank details you choose to show on invoices.
• Proof-of-payment pictures your customers upload on your invoice links.
• Payments: when you pay for Pro, Paystack processes your card or bank details — we never see or store your full card number. We keep the payment reference, amount, the last 4 digits and type of your card, and (if you choose auto-renew) a Paystack card token, encrypted, so we can renew your plan.
• Your Paystack keys, if you connect your own Paystack to collect from customers. They are stored encrypted and only used to create and confirm payments on your invoices.
• Basic technical data: IP address and login times, used for security (for example to stop password guessing).

How we use it

• To run the service: create and share your invoices, sync your data, and send sign-up and password codes.
• To keep accounts safe and prevent abuse.
• We do not sell your data or your customers' data, and we do not use it for advertising.

Who can see it

Your business data is visible only to you and the staff you add. Customers can see an invoice or statement only through the private link you send them. A small number of Oya Invoice administrators can access accounts for support, security and billing. Email is delivered through the email provider we use for that purpose. Payments are handled by Paystack under its own privacy policy; when your customer pays your invoice online, the payment goes to your Paystack account and Paystack shares the payment details with you.

Where it is kept

Data is stored on our server, sent over encrypted HTTPS, and backed up daily. The app may also keep copies of screens and unsent forms on your phone so it works offline; logging out removes the saved screens.

How long we keep it

We keep your data while your account is open. Sign-ups that are never verified are deleted after 1 hour. When you delete your account, your business data is removed from the live system immediately and from backups within 14 days.

Your rights

You can see and correct your data in the app, download it any time (Reports → Download for Excel), and delete your account (Settings → Delete account). You may also contact us to object to processing or to complain, and you may complain to the Nigeria Data Protection Commission.

Contact

Email the address shown on our website or reply to any email from Oya Invoice.