Privacy Policy
This policy covers personal data we hold as a controller — that is, about you as our customer or as a visitor to this site. Personal data inside your own instance is different: there you are the controller and we act on your instructions. That relationship is described in the Data Processing Agreement.
What we collect
| Data | Why | Basis |
|---|---|---|
| Name, email, phone, company, country | To create your account, contact you, and issue invoices | Performance of a contract |
| Billing details and payment records | To take payment and meet accounting obligations | Contract and legal obligation |
| Login times, IP address, browser | To secure the account and investigate abuse | Legitimate interest |
| Support correspondence | To answer you and improve the service | Contract and legitimate interest |
| Marketing consent, where given | To send product news you asked for | Consent |
Marketing consent is recorded separately from your acceptance of these terms, and withdrawing it does not affect your account.
What we do not do
We do not sell personal data. We do not use the contents of your instance for analytics, training, profiling or advertising. We do not access your instance's data except where you ask us to, or where we must to restore service or investigate a security incident — and such access is logged.
Who we share it with
Only with the suppliers needed to run the service — hosting, email delivery, payment processing — each under a contract that limits them to our instructions. The current list is published as Sub-processors.
Where it is held
Account data is held on infrastructure in the region shown on your subscription. Where a supplier processes data outside Ghana, we rely on contractual safeguards with that supplier. You can ask us where a particular category of data sits.
How long we keep it
- Account and contact data — while you are a customer, then two years.
- Invoices and accounting records — six years, as tax law requires.
- Access and security logs — twelve months.
- Support correspondence — three years.
Your rights
Under the Data Protection Act, 2012 (Act 843) you may ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to have it provided in a portable form. Write to the contact below; we answer within thirty days and will tell you if we need longer and why.
If you are not satisfied you may complain to the Data Protection Commission of Ghana.
Contact
Write to us using the details in the site footer, marking your message for the attention of the Data Protection point of contact.