Privacy Policy

This Privacy Policy explains how 404-Not-Null ("Groveh", "we", "us", or "our") collects, uses, shares, stores, and protects personal data when you use the Groveh website, mobile applications, and related services (together, the "Service").

We are the controller of the personal data described in this policy. If you have questions or want to exercise a privacy right, contact us at support@groveh.app.

Data we collect

We collect data in the following categories:

• Account and identity data. Name, email address, phone number, profile photo, login identifiers, and authentication data handled through our identity provider.
• Vendor and storefront data. Business name, description, contact details, location, listings, prices, availability, images, and other content you publish.
• Order and booking data. Items, quantities, prices, contact details, delivery or service preferences, order status, and messages needed to fulfil or discuss a transaction.
• Verification data. If you apply for vendor verification, we collect the identity and payout-account details you submit, including your Ghana Card number, a selfie, and mobile-money account details. We use identity-verification and payment providers to check these details.
• Usage and device data. IP address, device and browser information, pages and features used, approximate location derived from your connection, referral information, and analytics events.
• Communications and support data. Messages you send to us, support requests, and records of how we resolved them.
• Cookies and similar technologies. We use essential storage and, where available, analytics technologies to keep you signed in, remember preferences, measure usage, and improve the Service.

How we use personal data

• Provide, operate, maintain, and secure the Service.
• Create and manage accounts and authenticate users.
• Publish storefronts and listings and connect buyers with vendors.
• Support orders, bookings, and communication between users.
• Verify vendor identity and payout-account details where required.
• Respond to support requests and resolve disputes.
• Monitor usage, diagnose problems, and improve features and safety.
• Send service messages, security alerts, and notifications you request.
• Prevent fraud, abuse, and violations of our Terms or applicable law.
• Comply with legal obligations and enforce our rights.

Legal bases

We process personal data under the Ghana Data Protection Act, 2012 (Act 843) and other applicable law. Depending on the context, we rely on your consent, the need to perform a contract with you, our legitimate interests in operating and protecting the Service, and legal obligations that apply to us.

What is public

Groveh is a discovery platform. The business name, description, listings, images, and contact details a vendor chooses to publish are visible to other users and may be indexed by search engines. Do not publish information you want to keep private.

When you place an order or booking, we share the details needed to fulfil it with the relevant vendor. We do not make your private account data public.

How we share personal data

We may share personal data with:

• Service providers. Companies that help us with authentication, hosting, databases, file storage, analytics, notifications, identity verification, and payment-account checks. These providers process data on our behalf under contractual safeguards.
• Other users. Vendors receive the information needed to respond to an order or booking. Buyers see the storefront information a vendor publishes.
• Professional and legal advisers. Where needed to obtain legal, accounting, or compliance advice.
• Authorities and other parties. When required by law, to protect rights or safety, to investigate fraud or abuse, or as part of a merger, acquisition, financing, or sale of assets.

We do not sell your personal data.

International transfers

Some of our service providers may process data outside Ghana. Where that happens, we take reasonable steps to ensure the transfer is protected by appropriate safeguards and is consistent with applicable data-protection law.

Retention

We keep personal data for as long as needed to provide the Service, satisfy legal, tax, accounting, or audit requirements, resolve disputes, and enforce our agreements. When data is no longer needed, we delete it or anonymise it. Verification applications are retained as an audit record; sensitive identity fields are scrubbed when they are no longer needed for the verification decision.

Security

We use technical and organisational measures designed to protect personal data, including access controls, encryption in transit, and restricted access to sensitive records. No system is completely secure, so we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to withdraw consent where we rely on it. You may also have the right to complain to the Data Protection Commission of Ghana.

To exercise a right, email support@groveh.app. We may need to verify your identity before acting on a request. Some data may be retained where the law requires it or where we have a legitimate reason that overrides the request.

Children

Groveh is not intended for children under 13. If you are under 18, use Groveh only with the involvement of a parent or guardian. Vendor accounts are limited to people who are at least 18.

Changes to this policy

We may update this Privacy Policy as the Service or the law changes. If a change is material, we will take reasonable steps to notify you. The "Last updated" date at the top shows when this policy was last revised.

Contact

Privacy questions or requests: support@groveh.app.