The short version
- We collect only what we need to deliver your orders, take payment and keep in touch.
- We never ask for your social media passwords, and we never see your Mobile Money PIN.
- We don't sell your data, and we don't use it for advertising.
- We use cookies only to keep you signed in. There are no advertising or tracking cookies.
- You can ask to see, correct or delete your data at any time.
01Who we are
Akoto Creative Boost is run by Akoto Creative in Ghana. We are the data controller for the personal data described here, which means we decide how it's used and we're responsible for protecting it. See section 14 for how to reach us.
02What we collect
When you sign in with Google
Your name, email address, profile picture and Google account ID. We don't receive your Google password, contacts, files or anything else from your Google account.
When you place an order
The service, quantity and price; the link or username of the page or post you want promoted; your WhatsApp number; and your name if you give it.
When you pay or add money to your wallet
The amount, the Mobile Money network, the transaction ID and the sending number you enter for a top-up sent by hand. For payments through Moolre, we receive the payment reference, its status, the amount paid and the paying number that Moolre reports. Your Mobile Money PIN stays with your network; we never see or store it.
When you message us
Your WhatsApp or Telegram name and number, and what you write to us, so we can answer and handle your order. If you use the Send us a message form on our website, we receive the name, email address, phone number and message you enter. The message goes to our team's private inbox, and a copy is kept on this website in case the inbox is unavailable.
Automatically, when you use the website
Your IP address, which we use to protect sign-in and payments from abuse and to limit repeated payment attempts, and the basic technical logs our hosting provider keeps to run the website. See section 7 for cookies and storage on your device.
03How we use your data
- To deliver your orders, refill drops and send you updates by SMS or WhatsApp.
- To take payments, run your wallet, pay refunds and give you a receipt for each paid order. Receipts open from a private link; your phone number and email are partly hidden on them.
- To show you your orders and balance in My orders.
- To answer your messages and help with problems.
- To prevent fraud, abuse and payment mistakes, and to keep the website secure.
- To keep the business records the law requires, such as accounting records.
We'll only send you marketing messages if you've agreed to receive them, and you can tell us to stop at any time.
04Our legal grounds
Under the Data Protection Act, 2012 (Act 843), we process your data because:
- it's needed to carry out the order or wallet service you asked for;
- you've agreed to it, for example when you sign in with Google or ask to receive offers;
- the law requires it, for example for tax and accounting records;
- we have a legitimate interest in running a safe, working service, such as preventing fraud, and that interest doesn't override your rights.
06Google sign-in data
When you sign in with Google, we ask only for your basic profile (name, email address and profile picture). We use it only to create your account, show your orders and wallet, and contact you about your orders. We don't use it for advertising, we don't sell it, and we don't share it with anyone except as described in section 5. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
You can remove our access at any time on your Google Account's third-party connections page. That stops future sign-ins; to delete what we already hold, see section 11.
08How long we keep your data
- Your account (name, email, picture, WhatsApp number): for as long as you have an account with us.
- Orders, payments, wallet history and refunds: for as long as we offer refills on the order, and for as long as Ghana's tax and accounting rules require us to keep business records.
- Sign-in sessions: deleted automatically when they expire.
- Unfinished Mobile Money payments: closed after 24 hours and kept with our payment records.
- Messages from the contact form: kept until we've answered them and no longer need them. Ask us to delete yours at any time.
- Security counters for failed sign-ins: cleared within 24 hours.
09Keeping your data safe
The website only works over an encrypted connection (HTTPS). Sign-in sessions are stored in a scrambled (hashed) form, the admin dashboard is protected by a password with limits on repeated attempts, and only our team can see customer details. Our payment provider's secret keys are never sent to anyone's browser.
No system is perfectly secure. If a breach ever puts your data at risk, we'll tell you and the Data Protection Commission as soon as reasonably possible, as Act 843 requires, and take steps to fix it.
10Where your data is stored
Our website and database are hosted by Netlify, on servers that may be outside Ghana. Google, WhatsApp and Telegram also process data in other countries. We choose established providers that protect the data they hold for us, and we never sell or hand over your data to anyone else.
11Your rights
Under the Data Protection Act, 2012 (Act 843), you can:
- ask what personal data we hold about you and get a copy;
- ask us to correct anything that's wrong or out of date;
- ask us to delete your data. We'll delete your account and everything we don't need to keep, but we may keep order and payment records for refills, refunds, fraud prevention and the law;
- object to how we use your data, or withdraw your consent, including for marketing;
- complain to the Data Protection Commission of Ghana if you're unhappy with how we've handled your data.
To make a request, message us on WhatsApp or Telegram from the number on your order, or tell us the email address you sign in with. We may ask you to confirm it's you before we act. We aim to reply within 14 days.
12Children
Our service is for people aged 18 and over, or younger people with a parent's or guardian's permission. We don't knowingly collect data from children under 13. If you believe a child has given us their data, message us and we'll delete it.
13Changes to this policy
We'll update this policy if we change how we use your data. The date at the top shows when it last changed. If a change matters to you, we'll also tell you on the website or by message.
14Contact us
For any question or request about your data: