Privacy
How ODMOP handles personal information
This page describes what the website and the ODMOP product do today. It is written to be read, not to be skimmed past. Formal terms are agreed in writing with each organisation before it is activated.
Who runs it
ODMOP is built and operated by AFOLAOLA. AFOLAOLA runs the service and keeps accounts and the audit history; each organisation decides what else it records about its own people and work.
This website
- It sets no cookies, runs no analytics or advertising tools, loads nothing from other sites, and has no forms.
- The e-mail links on it open your own e-mail program. What you write is sent to us by your e-mail provider; the website never sees it.
- Like any web host, the hosting service may keep ordinary technical logs of requests (such as the time and IP address). We add no tracking to this site.
What ODMOP stores when you use Sandbox or Live
- Your account
- Your name, e-mail address and a hashed form of your password. We never store the password itself. If you turn on two-step verification, the authenticator secret and recovery codes (also hashed) are stored.
- Your organisation
- The organisation's profile and settings, its members and their roles, invitations and in-app notifications.
- The audit history
- A record of each change: who made it, what changed, when, and the network address and request reference it came from. It is append-only by design, so entries cannot be edited or deleted.
- Sessions
- A session record for each sign-in, so you can see and end your sessions. Sessions end after at most seven days.
The application sets one cookie, which keeps you signed in. It is strictly necessary, cannot be read by scripts on the page and is only sent over a secure connection. There are no advertising or analytics cookies.
E-mail we send
ODMOP sends invitations, address verification, password resets and account notices. Each environment uses its own sending identity. The Sandbox only sends to recipients that were approved beforehand, and prefixes its subjects with [Sandbox].
Sandbox: synthetic data only
Do not enter real people, real organisations or real finances in the Sandbox. Evaluations are time-limited: when one ends the organisation becomes read-only, and it may later be reset or purged. A purge removes the working data and anonymises accounts, but the audit history cannot be edited, so audit entries remain, and an entry for an invitation can include the invited e-mail address.
Live: your organisation's data
Your organisation decides what it records. Nothing is copied from the Sandbox into Live. At this stage ODMOP has no case management for individual beneficiaries, and it has not been built for health information or other special categories of personal data, so please do not record them.
Where data is kept
Sandbox and Live each use their own separate database, and one organisation's data is isolated from another's both in the application and inside the database. The hosting region is chosen when an environment is set up; we do not limit ODMOP to one country. Because the region and the e-mail provider are not yet fixed for every environment, we will state them in your agreement before your organisation is activated.
Your requests
To ask what we hold about you, to correct it or to have it removed, write to privacy@afolaola.com from the address on your account. If you use ODMOP through an organisation, that organisation decides what it records about you, and we may refer you to it. A standard retention schedule has not been published yet; retention and deletion for Live are agreed with each organisation.
What this page is not
It is a description of current behaviour, not a legal privacy policy or a data-processing agreement, and it makes no statement of compliance with any particular law. For contracts and legal terms write to legal@afolaola.com.
Last reviewed 1 November 2026. We update this page when the way ODMOP handles personal information changes. See also Security and Support.