Privacy Policy

Last updated: January 21, 2026

This Privacy Policy describes how Tech At Scale Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use the SoupFinance platform ("Service"). We are committed to protecting your privacy in compliance with the Ghana Data Protection Act 2012 (Act 843), the ECOWAS Supplementary Act on Personal Data Protection, and other applicable data protection laws.

1. Data Controller Information

Tech At Scale Ltd
Accra, Ghana
Email: [email protected]
Website: techatscale.io

We are registered as a Data Controller with the Ghana Data Protection Commission in accordance with Act 843.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, company name, job title
  • Business Information: Company registration details, Tax Identification Number (TIN), business address
  • Financial Data: Invoice details, payment records, bank account information for transactions
  • Client/Vendor Data: Contact information for your clients and vendors that you input into the system
  • Support Communications: Messages, emails, and other communications with our support team

2.2 Information Collected Automatically

  • Usage Data: Features used, actions taken, time spent on pages
  • Device Information: IP address, browser type, operating system, device identifiers
  • Log Data: Access times, pages viewed, error logs
  • Cookies and Similar Technologies: See our Cookie Policy for details

3. Legal Basis for Processing

Under the Ghana Data Protection Act 2012 and GDPR (where applicable), we process your personal data based on the following legal grounds:

  • Contractual Necessity: To provide the SoupFinance service you have subscribed to
  • Consent: Where you have given explicit consent for specific processing activities
  • Legal Obligation: To comply with applicable laws, regulations, and government requests
  • Legitimate Interest: To improve our services, prevent fraud, and ensure security

4. How We Use Your Information

We use your personal data for the following purposes:

  • Service Delivery: To provide, maintain, and improve the SoupFinance platform
  • Account Management: To create and manage your account, process subscriptions and billing
  • Communication: To send service updates, security alerts, and support messages
  • Analytics: To understand how users interact with our platform and improve user experience
  • Security: To detect, prevent, and respond to fraud, abuse, and security incidents
  • Legal Compliance: To comply with applicable laws, including tax and financial regulations
  • Marketing: With your consent, to send promotional materials about our services

5. Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

5.1 Service Providers

  • Cloud Hosting: Amazon Web Services (AWS), Google Cloud Platform for data storage and processing
  • Payment Processing: Stripe, PayStack for handling payments securely
  • Email Services: SendGrid, Mailgun for transactional and marketing emails
  • Analytics: Google Analytics for usage analytics (anonymized)
  • Error Tracking: Sentry for application error monitoring

5.2 Legal and Regulatory

  • Government authorities when required by law
  • Ghana Revenue Authority for tax compliance purposes
  • Law enforcement agencies in response to valid legal requests

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

6. International Data Transfers

Your data may be transferred to and processed in countries outside Ghana, including the European Union and United States, where our service providers operate. In accordance with Section 38 of Act 843, we ensure that:

  • The recipient country provides adequate data protection
  • Appropriate safeguards are in place (Standard Contractual Clauses, adequacy decisions)
  • Data processors comply with their local data protection laws

7. Data Retention

We retain your personal data for as long as necessary to:

  • Active Accounts: Throughout your subscription period plus 7 years for financial records
  • Closed Accounts: 7 years after account closure for legal and tax compliance
  • Marketing Data: Until you withdraw consent or 3 years of inactivity
  • Log Data: 12 months for security and troubleshooting purposes

After the retention period, data is securely deleted or anonymized.

8. Your Data Protection Rights

Under the Ghana Data Protection Act 2012 and applicable international laws, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement robust security measures to protect your personal data:

  • Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
  • Access Controls: Role-based access, multi-factor authentication
  • Infrastructure: Secure cloud hosting with regular security audits
  • Monitoring: 24/7 security monitoring and intrusion detection
  • Employee Training: Regular data protection and security training for all staff
  • Incident Response: Documented procedures for handling security incidents

10. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Ghana Data Protection Commission within 72 hours of becoming aware
  • Notify affected individuals without undue delay if the breach poses a high risk
  • Document all breaches and remediation actions taken

11. Children's Privacy

SoupFinance is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website with a new "Last updated" date
  • Sending an email notification for significant changes
  • Displaying a notice within the SoupFinance application

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at [email protected].

You also have the right to lodge a complaint with the Ghana Data Protection Commission:

Data Protection Commission
Accra, Ghana
Phone: +233 256 301 533
Email: [email protected]
Website: dataprotection.org.gh

14. Contact Us

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer:

Tech At Scale Ltd - Data Protection
Email: [email protected]
Website: www.soupfinance.com