Privacy Policy

Okoh Technologies (“we”, “us”, “our”) operates Nhyiaye (the “Platform”). This Privacy Policy explains what personal data we collect, why, and what you can do about it. It applies to everyone who uses the Platform — buyers, organizers, and door staff.

1. What we collect

• Account details — your name, email address and phone number, whether you sign up directly or through Google sign-in (in which case Google shares your name, email and profile photo with us).
• Order details — the events and tickets you buy, the name and contact details you check out with, and your order history.
• Payment information — handled by our payment partner, Paystack. We receive confirmation that a payment succeeded and its amount, but we never see or store your full card number, card PIN, or Mobile Money PIN.
• Organizer verification documents — if you apply to sell tickets, your business registration certificate, Ghana Card, tax clearance certificate, bank statement, and payout account details (Mobile Money number or bank account). These are stored in access-controlled storage and only ever shared with you via short-lived, signed links, or viewed by staff reviewing your application.
• Security and audit records — sign-in activity and a record of sensitive actions taken on the Platform (for example, an admin approving a payout), kept so we can investigate fraud or abuse and can’t be edited, even by us.
• Device and usage information — standard technical data your browser sends to any website (like your browser type and IP address, seen by our hosting and security infrastructure) so the Platform works and stays secure. We don’t use third-party advertising or analytics trackers. See our Cookie Policy for what we store in your browser directly.

2. Why we collect it

• To create and run your account, process your orders, and issue and verify your tickets.
• To send you transactional emails — order confirmations, door-staff invites, sign-in and password-reset links — through our email provider, Resend.
• To verify organizers before they can sell tickets, and to pay out organizers correctly.
• To detect and prevent fraud, and to keep the Platform, its buyers and its organizers safe.
• To meet our legal and tax obligations, and to respond to lawful requests from authorities.

3. Who we share it with

We don’t sell your personal data. We share it only where it’s needed to run the Platform:

• Paystack — to process your payment or an organizer’s payout.
• Resend — to deliver transactional emails on our behalf.
• Supabase — our database, authentication and file storage provider, which hosts the data described above on our behalf under its own security commitments.
• Google — only if you choose to sign in with Google, to confirm your identity.
• Event organizers — an organizer can see the name, and contact details you provide when buying a ticket to one of their events, and door staff they’ve authorized can see enough to check your ticket in at the door.
• Authorities — where we’re legally required to, or to protect the rights, property or safety of Nhyiaye, our users, or the public.

4. How long we keep it

We keep your data for as long as your account is active, and afterward for as long as reasonably needed for legal, tax, dispute, and fraud-prevention purposes (for example, financial and audit records are generally kept longer than a few years to meet accounting and tax requirements). You can ask us to delete your account as described in section 6 below.

5. How we protect it

Data is encrypted in transit. Access to the database is restricted by row-level security so people can only reach the data their role needs; organizer verification documents are only reachable through short-lived signed links; ticket QR codes are cryptographically signed so they can’t be forged; and a tamper-evident audit log records sensitive account and payment actions.

6. Your rights

You can ask us to access, correct, or delete your personal data, or ask us what we hold about you, by emailing okohtechnologies@gmail.com. We’ll respond as required by law. Some data — for example, financial records tied to a completed order — may need to be kept even after a deletion request, to meet our legal and tax obligations; where that applies, we’ll tell you what we’re keeping and why.

7. Children

The Platform isn’t directed at children, and you must be at least 18 to create an account.

8. International processing

Some of the providers we use to run the Platform (described in section 3) may process data on servers outside Ghana. Where that happens, we rely on their own security and data-protection commitments to keep your data safe.

9. Data Protection Commission

We’re committed to complying with Ghana’s Data Protection Act, 2012 (Act 843), including registering with the Data Protection Commission as a data controller. If you have a data protection concern we haven’t resolved, you’re entitled to raise it with the Commission directly.

10. Changes to this policy

We may update this Privacy Policy as the Platform changes. We’ll update the date at the top of this page whenever we do.

11. Contact

Questions about this policy, or a request about your data? Email okohtechnologies@gmail.com.