Privacy Policy

What we collect

Only what a service you use actually needs.

• To open an account: your phone number, your name, and an email address if you give one. Your PIN is stored in a form we cannot read back.
• To verify your identity: a government-issued ID document, a photograph of yourself, and the details on the document. Verification is required before you can invest, and it raises the limit on what your wallet may hold.
• When money moves: the amount, when, which of your accounts, and who the other party was. We keep this because it is the record of what happened to your money — it is the thing that lets either of us prove what took place.
• If you run a shop: the business details you give us, any registration certificate you upload, and your branches and catalogue.
• When you contact us: what you send, so we can answer it.
• Technical: device and connection information, used to keep your account secure and to find faults.

What we do with it

Run the services you asked for; keep your account secure; meet the record-keeping obligations that apply to handling payments; and answer you when you get in touch.

We do not sell your personal data, and we do not share it for anyone else's advertising.

Who else sees it

• Paystack — processes card and mobile money payments. They receive what a payment requires; we never see or store your full card details.
• Arkesel — delivers the SMS we send you, and receives your phone number to do it.
• Amazon Web Services — stores uploaded files, including identity documents and product photographs.
• Where the law requires it — a lawful request from a regulator, or a court order.

How long we keep it

Transaction records are kept for as long as financial record-keeping requires, which is longer than the life of your account — a ledger with holes in it cannot answer questions about money that moved. Identity documents are kept while your account is open and for the retention period that applies afterwards. Messages you send us are kept while they are useful for supporting you.

Your rights

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete data we are not required to keep. Transaction records generally cannot be deleted while retention obligations apply.
• Withdraw consent for anything you gave it for, such as marketing messages.
• Complain — to us first, through our complaints process, and to the Data Protection Commission of Ghana if we do not resolve it.

Ask through our contact form and we will tell you what we hold and what we can act on.

Security

Connections are encrypted in transit. Your PIN is stored hashed and cannot be read back by us or recovered — only reset. Access to production data by staff is restricted, and administrative actions on the platform are recorded with who did them and when.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever discover a breach affecting your data, we will tell you.

Children

PesewaPay is not for people under 18, and we do not knowingly collect their data.

Changes

When this changes materially we will tell you in the app rather than quietly updating the page.