Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated through your use of our platform:

• Account Information: Business name, registration details, contact information (email, phone number), and authorized representative details provided during onboarding.
• Payment Data: Transaction amounts, payment methods used, transaction references, and settlement details. We do not store card numbers or sensitive authentication credentials.
• Usage Data: Device information, IP addresses, browser type, pages visited, and interaction patterns within the platform for analytics and service improvement.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process Payments: Execute, verify, and reconcile transactions on your behalf. This includes communicating with mobile money providers, banks, and card networks.
• Improve Our Service: Analyse usage patterns to enhance platform performance, develop new features, and improve user experience.
• Communicate: Send transaction confirmations, security alerts, service updates, and respond to your support requests. We may also send marketing communications with your consent.

3. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

• Payment Partners: We share necessary transaction data with mobile money providers, banks, and card processors to facilitate payments.
• Legal Requirements: We may disclose information when required by law, regulation, or a valid legal process, including requests from the Bank of Ghana or other regulatory authorities.
• Service Providers: We work with trusted third-party providers for hosting, analytics, and communication services. These providers are contractually obligated to protect your data.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access sensitive data.
• Regular Audits: We conduct periodic security audits and vulnerability assessments to maintain the integrity of our systems.

5. Data Retention

We retain transaction records for a minimum of 6 years in compliance with the Anti-Money Laundering Act, 2020 (Act 1044) of Ghana. Account data is retained for as long as your account is active and for a reasonable period after closure to fulfil legal obligations and resolve disputes.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention requirements (including the 6-year AML requirement).

7. Cookies

We use essential cookies only, which are necessary for the platform to function correctly. These include session authentication tokens and security cookies. We do not use advertising or third-party tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at privacy@paygabo.com.