Privacy Policy

This Privacy Policy explains what information PeerAid collects, how we use it, and your rights regarding that information. It applies to all users of the PeerAid platform.

1. Data Controller

The data controller is PEERAID ENT ("PeerAid", "we", "us") a branch of ESSYS GLOBAL HELP LIMITED, registered in GHANA under CS201732018 of the Companies Act 1963 (Act 179) Ghana , with its registered office at 3 ALLOTEI BULLEY RD DANSOMAN ACCRA. We comply with the Ghana Data Protection Act, 2012 (Act 843) and are not yet registered with the Data Protection Commission under any registration number XXX.

2. Information We Collect

When you register or use PeerAid, we collect:

• Account information — username, phone number, account type, hashed password, optional email
• Financial information — mobile money number and name (for payouts), transaction records, wallet history
• Business information (StoreOwners and Suppliers) — store name, description, logo, WhatsApp contact, product listings, images
• Order information — buyer phone, delivery address or custom fields, order reference, payment reference
• Verification information — phone numbers you provide for verification, and one-time passcodes (stored hashed)
• Technical information — IP address, user agent, hashed session tokens, pages visited

3. How We Use Your Information

We use your information to:

• •Create and manage your account
• •Process orders and payments
• •Deliver products via mobile networks and fulfilment providers
• •Calculate and pay commissions
• •Send order, verification, and security SMS notifications
• •Prevent fraud, abuse, and unauthorized access
• •Comply with legal and regulatory obligations

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We share your information with the following service providers as necessary to operate the Platform:

• Mobile money providers (MTN, Telecel, AirtelTigo) — to process payments
• Integration providers (Tsk, DHN, Muviin) — to fulfil digital products
• SMS provider (Arkesel) — to send verification, order, and security SMS
• Payment providers (Muviin Pay) — to collect payments from buyers
• Infrastructure providers — to host and operate the Platform

Each provider processes your information under its own privacy policy. We share only the minimum information necessary to provide the relevant service.

5. Data Retention

We retain your information for as long as your account is active or as necessary to comply with legal obligations. Specific retention periods:

• •Sessions expire after 24 hours
• •Level 0 accounts are deleted after 3 days
• •Expired or unconfirmed orders are deleted after 7 days
• •Product view and alert records are deleted after 30 days
• •Old logs, OTP codes, and rate-limit records are purged after 90 days
• •Wallet transaction history is retained indefinitely for accounting and audit

6. Data Security

We protect your information using:

• •PBKDF2-HMAC-SHA256 password hashing (600,000 iterations)
• •HTTPS encryption in transit
• •HttpOnly, Secure session cookies
• •Rate limiting on authentication and sensitive operations
• •Server-side session validation with revocation

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

7. Your Rights

Under the Ghana Data Protection Act, you have the right to:

• •Access the personal information we hold about you
• •Correct inaccurate information
• •Request deletion of your account and associated data
• •Object to certain processing
• •Lodge a complaint with the Data Protection Commission

To exercise these rights, contact peeraid.netfundgh@gmail.com. Note: some data may be retained even after deletion for legal, tax, and fraud-prevention purposes.

8. Cookies and Similar Technologies

PeerAid uses the following cookies:

• peeraid_session — session authentication, 24-hour lifetime, HttpOnly, Secure
• pa_share_src — buyer attribution from shared links, 30-day lifetime
• peeraid_theme — user theme preference, indefinite lifetime

We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

PeerAid is not intended for anyone under 18. We do not knowingly collect information from children. If we become aware that a child has registered, we will delete the account.

10. International Transfers

Where your information is transferred outside Ghana (for example, to our integration providers or infrastructure hosts), we ensure appropriate safeguards are in place as required by the Ghana Data Protection Act.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Platform. Continued use of the Platform after an update constitutes acceptance of the revised policy.

12. Contact / Data Protection Officer

For privacy questions, contact our Data Protection Officer:

• Email: peeraid.netfundgh@gmail.com
• Address: 3 ALLOTEI BULLEY RD DANSOMAN ACCRA