Privacy Policy — Ondjila AI

Ondjila AI ("we", "us", "our") is a product of Unqo Digital Solutions CC, registered in Namibia (CC/2025/04516). We are committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, how we store and protect it, and your rights as a user.

By using our website at ondjila.ai or any of our services, you agree to this policy.

1. Who We Are

Ondjila AI is an Africa-first AI education platform providing practical, industry-specific AI training to professionals worldwide. We are co-founded by Monika Clarke (CEO) and Kauko Denzel Karupa (CTO), and built by Unqo Digital Solutions CC, Windhoek, Namibia.

2. Information We Collect

We collect information in the following ways:

a) Information you provide directly

Name and email address when joining our waitlist
Industry or profession when joining our waitlist
Name, email, subject, and message when using our contact form
Account credentials (email and password) when you create an account (coming soon)
Payment information when purchasing a course or subscription (processed securely by third-party payment providers — we do not store card details)
Organisation name, size, and billing details for business accounts
Profile information such as job title, country, and bio (optional)

b) Information collected automatically

IP address and approximate geographic location
Browser type and version
Device type and operating system
Pages visited, time spent, and navigation patterns
Referral source (how you found us)
Course progress, completion rates, and assessment results
Cookies and similar tracking technologies (see Section 7)

c) Information from third parties

If you sign in via Google, LinkedIn, or another OAuth provider, we receive your name, email, and profile picture from that provider
Payment processors may share transaction metadata with us (not card numbers)

3. How We Use Your Information

We use your data to:

Operate and improve the Ondjila AI platform
Send you your waitlist confirmation and launch invitation
Respond to contact form enquiries
Create and manage your user account
Process course purchases and subscriptions
Track and display your course progress and certificates
Send transactional emails (receipts, password resets, course updates)
Send marketing and product update emails (only with your consent, and you can unsubscribe at any time)
Analyse platform usage to improve content and user experience
Comply with legal obligations
Prevent fraud and abuse

We will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your data on the following legal grounds:

Consent — when you join the waitlist, submit a form, or opt in to marketing emails
Contract performance — when you purchase a course or create an account, we process data necessary to deliver the service
Legitimate interests — to improve our platform, detect fraud, and communicate service updates
Legal obligation — where we are required to retain or disclose data by law

5. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL), hosted on infrastructure compliant with industry security standards. Email communications are handled via Resend. Payment processing is handled by third-party PCI-compliant providers.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include:

Row-level security (RLS) on our database
HTTPS encryption on all data in transit
Encrypted storage for sensitive fields
Access controls limiting who on our team can access user data
Regular security reviews

No system is 100% secure. If a data breach occurs that affects your rights, we will notify you as required by applicable law.

6. Data Retention

We retain your data for as long as necessary to provide our services or as required by law:

Waitlist entries: retained until the platform launches and you are onboarded, or until you request deletion
Account data: retained for the lifetime of your account, plus up to 90 days after deletion
Course progress and certificates: retained indefinitely unless you request deletion
Contact form submissions: retained for up to 2 years
Payment records: retained for 7 years as required by Namibian tax law

7. Cookies

We use cookies and similar technologies to operate the platform and improve your experience. For full details, see our Cookie Policy.

8. Third-Party Services

We use the following third-party services that may process your data:

Supabase — database and authentication
Resend — transactional email delivery
Vercel — hosting and deployment
Stripe / PayToday / DPO Pay — payment processing (when payments go live)
Google / LinkedIn — OAuth sign-in (when auth goes live)
Analytics provider — usage analytics (to be confirmed)

Each of these providers has their own privacy policy. We only share the minimum data necessary for each service to function.

9. International Data Transfers

Ondjila AI is based in Namibia and serves users globally. Your data may be processed and stored on servers outside Namibia, including in the United States and European Union, through our infrastructure providers. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our platform is intended for professionals and students aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your data ("right to be forgotten")
Portability — request your data in a machine-readable format
Objection — object to processing based on legitimate interests
Withdrawal of consent — withdraw consent at any time where processing is based on consent
Complaint — lodge a complaint with a relevant data protection authority

To exercise any of these rights, email us at hello@ondjila.ai. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests:

Email: hello@ondjila.ai
Contact form: ondjila.ai/contact
Company: Unqo Digital Solutions CC, Windhoek, Namibia (CC/2025/04516)