Privacy Policy

1. Who we are

Nsawabode ("Nsawabode", "we", "us", "our") provides funeral contribution management in Ghana: digital recording of contributions, instant SMS receipts to donors, live totals and reports for families, memorial pages, and, on request, on-site collection teams. This Privacy Policy explains what personal data we process, why, and the choices and rights you have. We process personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.

You can reach us about privacy at info@nsawabode.com or +233 548 157 455.

2. Our role: controller and processor

Nsawabode processes personal data in two distinct capacities:

• As a processor, for the contribution and donor data that a family or organizer records for a funeral, the family or organizer is the data controller. We process that data only on their instructions, to record contributions, issue receipts, and produce reports.

• As a controller, for the account data of the people who sign in (organizers, agents, administrators) and for visitors to our website, we determine how that data is used and are the controller.

3. Information we collect

Account and profile data

• Your name and phone number, and optionally an email address.

• Your role and workspace membership, and the sign-in sessions and devices linked to your account.

• A one-time SMS code is used to verify your phone number. Client accounts have no password for us to store.

Contribution and event data (recorded by families or organizers)

• Donor details: the donor's name, phone number, and the amount of each contribution recorded at the funeral.

• The source of the contribution (for example cash recorded at the venue) and the time it was recorded.

• Event details: the name of the deceased, dates, venue, and any information the organizer chooses to publish on a memorial page.

• Public tributes: messages a donor chooses to leave, which the organizer may approve for display on the memorial page.

• Receipts and reports generated from the recorded contributions.

Technical and security data

• IP address, device and browser (user-agent) information, and timestamps.

• Security and audit events (for example sign-ins, contribution records, and receipt sends), used to keep the platform safe and accountable.

We do not collect payment-card data, and we do not knowingly collect data beyond what is needed to deliver the service.

4. How we use information

We use personal data to:

• Record contributions accurately and deliver an official SMS receipt to each donor.

• Show organizers and families live totals during the event and a transparent final report afterwards.

• Authenticate users, secure accounts, and prevent fraud and abuse.

• Provide support, fix problems, and improve the reliability of the service.

• Meet legal, regulatory, and accountability obligations.

We do not sell personal data. Donor phone numbers are used to deliver receipts and, where the family chooses, thank-you messages for that specific funeral. They are never used for third-party marketing or profiling.

5. Messages to donors

Receipts and thank-you messages are sent by SMS through our messaging provider (mNotify). A receipt SMS contains the donor's name, the amount, the event, and a private link to view or download the receipt. The link is single-purpose and carries no other personal data. Message and data rates from the donor's own network operator may apply. A donor can ask to stop receiving event messages at any time by contacting us or the family.

6. Public memorial pages

An organizer may choose to publish a memorial page for a funeral. Only information the organizer chooses to make public is shown there, such as event details and tributes the organizer has approved. Contribution amounts and donor phone numbers are private to the family and are never published. If you are a donor and want a tribute you left removed, contact the organizer or us.

7. Who we share data with

We share personal data only as needed to run the service, and with organisations that process it on our behalf under contract (sub-processors). These include:

• Our SMS provider (mNotify), to deliver receipts and event messages to donors.

• Our cloud hosting and infrastructure providers, to run the platform and store data securely.

We may also disclose data where required by law, to protect rights and safety, or to the family or organizer that controls the data. We never sell personal data to third parties.

8. How we protect data

• All traffic is encrypted in transit over HTTPS.

• Each workspace's data is isolated, so one family can never read another family's contribution records.

• Receipt links use opaque references that carry no sensitive data and can be revoked.

• Access is role-based and least-privilege, and sensitive actions are recorded in an audit log.

• Production refuses to start with weak or default secrets, and we monitor for vulnerabilities.

9. How long we keep data

• Account data is kept while your account is active and for a reasonable period afterwards, then deleted or anonymised.

• Contribution records and receipts are kept so families can refer back to them and donors can verify their receipts, then retained per the family's instruction and any legal requirement.

• We retain some records longer where the law requires, and we cycle backups out on a regular schedule.

10. Your rights

Subject to Act 843, you may ask to access, correct, delete, or restrict the personal data we hold about you, object to certain processing, and withdraw consent. For contribution and donor data, the family or organizer is the controller, so we direct those requests to them and assist them in responding. You also have the right to complain to Ghana's Data Protection Commission.

To exercise a right, email info@nsawabode.com. See also our Account & Data Deletion page for how to delete your account and personal data.

11. International transfers

Some of our sub-processors operate outside Ghana. Where personal data is processed abroad, we rely on appropriate safeguards and contractual protections to keep it secure and to maintain a level of protection consistent with Act 843.

12. Cookies and analytics

Our website uses only the storage it needs to function and privacy-friendly analytics where enabled. We set no advertising cookies. The app stores only what it needs to work, such as your sign-in token.

13. Changes to this policy

We may update this Privacy Policy from time to time. The effective date above shows when it last changed, and we will give notice of material changes through the app or website.

14. Contact us

Questions about privacy or this policy? Contact Nsawabode at info@nsawabode.com or +233 548 157 455.