Privacy Policy

Dashchecker is operated by Kewry Limited (the "Company", "we", "us", or "our"). For personal data where we decide why and how it is processed, Kewry Limited is the data controller.

This Privacy Policy applies to the Dashchecker website, public agent storefronts, web checkout, buyer recovery tools, agent workspace, and support services. It applies to Dashchecker buyers, agents, and people who browse the website.

USSD is not part of the current public MVP. If Dashchecker introduces a USSD channel, we will update this policy before using personal data through that channel.

This policy should be read with ourTerms of Service and any notices shown at the point where information is collected. Our practices are intended to follow the Data Protection Act, 2012 (Act 843) and guidance from theGhana Data Protection Commission.

We collect information that is reasonably necessary for the purpose explained at the time of collection. The information we collect depends on whether you are an Agent, a Buyer, a visitor, or someone contacting support.

From Agents

• Account information: your name, registered Ghana phone number, account status, OTP challenge metadata, and account timestamps.
• Storefront information: your permanent sales link, store name, tagline, logo or banner you choose to upload, pricing settings, announcement text, theme selection, and any WhatsApp contact number you choose to display.
• Earnings and payout information: sales, margins, Wallet ledger entries, withdrawal requests, registered Mobile Money number and network, payout status, transaction references, and related audit records.
• Security information: sign-in and withdrawal events, session metadata, recovery evidence, and records needed to investigate abuse or disputes.

From Buyers

• Delivery information: the required phone number for SMS delivery and the optional email address you provide for additional delivery.
• Order information: order reference, storefront attribution, product, quantity, price, payment status, delivery status, and checker allocation records.
• Recovery and support information: information you provide when recovering a purchase, reporting a delivery problem, or asking us to investigate a dispute.

From visitors and devices

• Technical data: IP address, browser and device type, operating system, language, timestamps, referring page, and basic security signals.
• Operational logs: page and checkout events, failed requests, error details, rate-limit events, and other information needed to keep the Platform available and secure.

Information from providers

We receive payment references, status events, transfer results, and other limited transaction metadata from Paystack. We may also receive delivery status and provider message references from SMS or email providers. These providers may collect additional information directly under their own privacy notices.

We use personal data for the following purposes:

• Provide the Platform: create and secure Agent accounts, publish storefronts, attribute sales, maintain the Wallet ledger, and operate buyer recovery.
• Complete purchases: create orders, confirm payment, allocate checkers, and deliver them to the destination confirmed at checkout.
• Process withdrawals: verify requests, apply holds and fees, process Paystack transfers, record manual payouts, and maintain an auditable payout history.
• Communicate: send sign-in and withdrawal OTPs, order and delivery notifications, recovery messages, security alerts, and important Platform updates.
• Support and disputes: locate orders, investigate failed delivery, resolve payment disputes, and assess replacement or refund requests without exposing checker secrets unnecessarily.
• Security and fraud prevention: detect abuse, protect accounts and payment flows, investigate suspicious activity, and enforce our Terms.
• Legal and operational obligations: maintain accounting, tax, audit, compliance, and business records, and respond to lawful requests.
• Improve the Platform: understand aggregate usage, troubleshoot errors, improve reliability, and evaluate product performance. We do not use buyer contact details for advertising by default.

We do not sell, rent, or trade personal data. We share only the information needed for the purpose described below and require service providers to handle it under appropriate instructions and safeguards.

• Payment and transfer providers: Paystack for hosted checkout, payment verification, and eligible Agent transfers.
• Messaging providers: SMS and email providers for OTPs, checker delivery, recovery, and transactional notices.
• Infrastructure providers: hosting, databases, encrypted object storage, monitoring, security, and support tools that help us operate the Platform.
• Professional advisers: auditors, accountants, lawyers, insurers, or other advisers where access is necessary and appropriately restricted.
• Authorities and other parties: courts, regulators, law-enforcement bodies, or other parties where disclosure is required by law, legal process, or necessary to protect people, property, or the Platform.
• Business changes: a successor or adviser in a merger, acquisition, financing, restructuring, or sale of part of the business, subject to applicable confidentiality obligations.

We do not share checker serials or PINs in ordinary logs, analytics, URLs, or routine support views. Access to sensitive voucher data is limited and audited.

Dashchecker uses Paystack's hosted payment collection. Paystack may collect the payer's Mobile Money or other payment details directly in its checkout and processes them under its own privacy terms. Dashchecker does not ask for or store Mobile Money PINs, card numbers, CVVs, or full payment credentials.

To initialize and reconcile a payment, Dashchecker may send Paystack the order amount, currency, reference, and a provider contact value. For guest web checkout, the provider email can be a synthetic merchant-controlled value generated from the normalized delivery phone; it is not treated as the Buyer's email address.

Dashchecker receives and retains limited payment and transfer metadata, such as references, status, amount, currency, provider identifiers, and timestamps. We use this information to verify transactions, fulfill orders, reconcile transfers, and investigate disputes.

We use reasonable technical and organisational measures appropriate to the sensitivity of the information and the risks of processing. These measures include, where applicable:

• HTTPS and encrypted network connections;
• encryption and protected handling for sensitive contact and voucher data;
• one-way OTP verification records rather than storing raw OTP values;
• server-side payment verification, idempotency, rate limits, and abuse controls;
• access controls, least-privilege support tools, and audit trails for sensitive actions; and
• monitoring, incident response, secret management, and backup protection appropriate to the service.

No internet service can be guaranteed completely secure. Protect your phone, sessions, OTPs, and recovery information, and contact us immediately if you suspect unauthorised access.

We retain personal data only for as long as it is reasonably needed for the purpose collected, including to provide the Platform, resolve disputes, protect against fraud, maintain financial records, meet legal obligations, and enforce agreements.

• Agent records: kept while the account is active and afterward where needed for sales, Wallet, payout, tax, audit, security, or legal records.
• Buyer records: order, delivery, payment, and recovery records kept for fulfillment, support, disputes, reconciliation, and required record keeping.
• Security records: OTP challenge metadata, audit events, and operational logs retained for periods appropriate to security investigations and compliance.
• Support evidence: retained only as long as needed to resolve the issue, document the decision, or meet a legal or audit requirement.

When data is no longer needed, we delete it, anonymise it, or place it beyond ordinary operational use, subject to lawful retention requirements and technical backup cycles.

Some providers that help us operate Dashchecker may process personal data outside Ghana. Where this happens, we share only what is necessary for the service and use appropriate contractual, organisational, and technical safeguards required by applicable law. Provider privacy notices may explain their own locations and processing practices in more detail.

Dashchecker may use strictly necessary cookies or similar storage for session continuity, security, fraud prevention, and basic site preferences such as theme settings. These technologies help the Platform work and are not used to sell your information.

We may use limited, aggregated operational measurement to understand reliability and improve the experience. If we introduce optional analytics or marketing technologies that require a separate choice, we will provide the relevant notice and controls before using them.

You can manage cookies through your browser settings. Blocking strictly necessary cookies may prevent sign-in, checkout, recovery, or other parts of the Platform from working correctly.

Subject to the Data Protection Act, 2012 (Act 843), you may have the right to:

• Access: ask whether we process your personal data, what we hold, why we use it, and the recipients or categories of recipients who may receive it.
• Correct: ask us to update inaccurate or incomplete information.
• Object or restrict: ask us to stop or limit a particular use where the law gives you that right.
• Withdraw optional consent: change your choice for optional communications or processing based on consent. Critical transactional and security messages may still be sent when needed to provide the service.
• Request deletion: ask us to delete information where it is no longer needed or where the law permits, subject to legal, accounting, security, and dispute-retention obligations.
• Complain: contact the Ghana Data Protection Commission if you believe your data has been mishandled.

To make a request, emailsupport@dashchecker.comwith the subject "Privacy request". We may ask for information needed to verify your identity and protect another person's data. We will respond within the timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.

Agent accounts are intended for people who are at least 18 years old or otherwise have the legal capacity required to use the service. Dashchecker may be used to purchase education-related checkers for a student by a parent, guardian, school, or other authorised adult.

If you believe a child has provided personal data to Dashchecker without appropriate authorisation, contact us atsupport@dashchecker.comso we can review the situation and take appropriate action.

If we discover a security compromise involving personal data, we will investigate, contain, and remediate it. Where required by applicable law, we will notify the Ghana Data Protection Commission and affected data subjects, and we may also notify relevant providers or authorities.

We may contact you using the contact details associated with the affected account or order. Keep those details current and do not include OTPs or checker PINs when reporting an incident.

We may update this policy when our data practices, Platform features, providers, or legal requirements change. We will update the date at the top of this page and publish the new version here. If a change materially affects how we use personal data, we may also notify Agents through the Platform or by SMS and provide any additional choice required by law.

For privacy questions, access or correction requests, deletion requests, or concerns about how we handle your data, contact:

You may also contact theGhana Data Protection Commissionif you believe your rights under Act 843 have been infringed.