Privacy Policy

We collect information you provide directly to us when you create an account and use the platform, including:

• Name and email address
• Profile information (bio, avatar, skills, portfolio)
• Event registrations and ticket purchases
• Opportunity applications and submissions
• Community memberships, posts, and interactions
• Vendor service listings, bookings, quotes, and invoices
• Wallet and payout details for organizers and vendors (e.g. bank account for withdrawals)
• Payment information (processed securely by Paystack; we do not store card details)
• Usage data such as device information, log data, and how you interact with the platform

We use your information to:

• Provide and maintain our platform services
• Process event registrations, ticket purchases, product orders, and vendor bookings
• Send confirmations, reminders, and service updates
• Facilitate community connections and networking
• Process opportunity applications and manage cohorts
• Match you with relevant opportunities, events, and communities, including through AI-powered features (see Section 4)
• Process payments, wallet balances, and withdrawals
• Improve our services and user experience
• Communicate important service updates
• Send marketing communications only on an opt-in basis: with your consent, or where you are an existing customer and the marketing relates to similar services (in which case every message includes an unsubscribe option), as required by section 69 of POPIA

We do not sell your personal information. We also do not sell, license, or share your personal information or content with third parties for the purpose of training artificial intelligence models.

We share your information only in these circumstances:

• With Event Organizers: when you register for an event or purchase a ticket, the organizer receives your name and email to manage attendance and check-in
• With Opportunity Providers: when you apply to an opportunity, the provider receives your application, submission materials, and profile information needed to assess it
• With Vendors and Clients: when you book a vendor service (or offer one), the other party receives the details needed to fulfil the booking, including contact information, quotes, and invoices
• Within Communities: your profile information and posts are visible to other members of communities you join
• Organizer Communications: organizers of communities and events you belong to can send you newsletters and announcements through the platform; you can unsubscribe at any time
• Loading service providers…

We use AI to power search, opportunity matching, and content-generation tools on the platform. This means your profile, skills, and activity may be processed to recommend opportunities, events, and communities to you. These recommendations do not produce legal effects; final decisions on applications are always made by the relevant opportunity provider, not by automated systems. Your data is not used to train third-party AI models.

We implement appropriate technical and organisational measures to protect your personal information. Payment card data is handled by Paystack and never stored on our servers. However, no internet transmission is 100% secure, and we cannot promise absolute security. If a data breach affecting your information occurs, we will notify the Information Regulator and affected users as required by law.

We keep your personal information for as long as your account is active or as needed to provide the platform. When you delete your account, it is deactivated immediately and your personal information is deleted or de-identified within 90 days, except where we must retain it for legal, tax, accounting, or dispute-resolution purposes (for example, payment and transaction records). Detailed periods per data category are in our Data Retention Policy.

You have the right to:

• Access the personal information we hold about you
• Correct or update your information
• Delete your account and personal information
• Object to processing based on legitimate interests
• Opt out of marketing communications (via the unsubscribe link or your settings)
• Export your data in a portable format

To exercise any of these rights, email hello@oncrco.com. We will respond within 30 days. You also have the right to lodge a complaint with the South African Information Regulator (inforeg.org.za) or your local data protection authority.

We use cookies and similar technologies to maintain sessions, remember preferences, and analyze platform usage. You can control cookies through your browser settings; disabling some cookies may affect platform functionality.

The platform is not intended for children under 18. We do not knowingly process the personal information of children without the consent of a parent or guardian as required by POPIA. If you believe we have collected a child's information without such consent, contact us immediately and we will delete it.

Your information may be transferred to and processed in countries other than your own, including where our service providers operate. In line with section 72 of POPIA, we only transfer personal information across borders where one of the following applies: the recipient is subject to laws, binding agreements, or binding corporate rules providing protection substantially similar to POPIA; you have consented to the transfer; or the transfer is necessary to perform our contract with you (for example, processing a payment through Paystack). Where we rely on agreements, we include data protection clauses in our contracts with the recipient.

We may update this policy from time to time. The "Last Updated" date above reflects the current version. We will notify you of material changes via email or platform notification before they take effect.

For privacy-related questions or requests, contact us at hello@oncrco.com or write to: