Privacy Policy

This policy explains what personal data CardSwap GH collects, why, and your rights. We aim to comply with Ghana's Data Protection Act, 2012 (Act 843).

What we collect

• Account details: username, email address, phone number (if you use phone login), and your theme preference.
• Trades: card type, country, value, the card photo you upload, and the card code. Card codes are stored encrypted and are only decrypted by authorised staff to redeem the card; every such access is logged.
• Payouts: mobile money numbers and bank account numbers with the account names you save, and your withdrawal history.
• ID verification: ID type and number, the name on your ID, a photo of the ID and a selfie. These are stored privately and only viewed by our review team.
• Support: messages you send to the support assistant and any tickets. Anything that looks like a card code is removed automatically before it is stored.
• Security data: a random device identifier stored in a cookie, your browser type, and timestamps, used to prevent fraud and reward abuse.

Why we use it

• To run the service: review and pay for cards, process withdrawals and keep your wallet balance.
• To prevent fraud and meet legal obligations: duplicate-card and photo checks, risk scoring, ID checks, and checks for multiple accounts.
• To provide support, including AI-assisted answers.
• To run rewards such as referrals, challenges and the weekly leaderboard. The leaderboard and activity feed only show masked usernames (for example “am***k”).

Who we share it with

• Service providers that host and operate the app: Supabase (database, login and file storage), Netlify (hosting), Anthropic (the AI model behind the support assistant, which receives your support messages and the trade/withdrawal details needed to answer), and Resend (delivers account, trade and payout emails).
• Payment channels: the mobile money or bank details needed to send you money.
• Authorities where the law requires it, or to report suspected fraud.
• We do not sell your personal data.

Some providers process data outside Ghana. We use providers that protect data with appropriate safeguards.

How long we keep it

We keep trade, payout and ID records for as long as needed for fraud prevention, accounting and legal requirements [retention period to be confirmed], then delete or anonymise them. Support chats are kept while your account is open.

Your rights

You can ask to see, correct or delete your personal data, or object to how we use it, by emailing cardswapgh00@gmail.com. Some records may have to be kept for legal or fraud-prevention reasons. You can also complain to the Data Protection Commission of Ghana.

Cookies

We use essential cookies only: to keep you logged in, remember your theme, and a device identifier for security. We do not use advertising cookies.

Contact

Privacy questions and requests: cardswapgh00@gmail.com. [Data controller name and address: to be filled in.]