Privacy Policy

Supashop (“Supashop Ghana”, “we”, “us”) is a new business based in Accra, Ghana, run by Cherubim Darko. We are in the process of registering the business. You can reach us at supashopghana@gmail.com or 020 424 7378.

Two roles. For shop owners' accounts, Supashop decides how the information is used. For customers' order and booking details, the shop you buy from decides how to use them (for example, to deliver your order), and Supashop stores and processes them on the shop's behalf.

Shop owners

• Account details: name, email address and password (stored only as a secure hash by our login provider).
• Business details you add: business name, category, description, location, phone and WhatsApp number, logo and photos.
• Payout details: your bank or Mobile Money account is sent to Paystack to set up your payouts. Supashop keeps only the bank or network name and the last 4 digits.
• What you do in the dashboard, kept as an activity history for security and support.

Customers of shops

• Name, phone number and (optionally) email address you enter at checkout or when booking.
• Delivery address, notes, and photos you attach to a quote request.
• What you ordered or booked, amounts, discount codes used, and loyalty points at that shop.
• Payment status. Card and Mobile Money details are entered on Paystack's page; Supashop never sees or stores them.

Everyone

• Basic technical information such as IP address, browser and device type, kept in server logs for security.
• Small items saved on your device: a sign-in cookie (shop owners), your light/dark choice, your cart, and whether you dismissed tips or the “add to home screen” offer.
• If you turn on alerts, a push address for your browser so we can send you notifications.

We do not use advertising trackers and we do not sell personal information.

• To run your shop, show it to customers and process orders, bookings and payments.
• To let shops contact their customers about an order or booking, and to run their loyalty points, discount codes and referrals.
• To send alerts and messages you asked for.
• To keep Supashop secure, prevent fraud and abuse, and fix problems.
• To understand overall use of Supashop (counts and totals, not individual customers) and improve it.
• To meet legal, tax and accounting obligations.

We share personal information only as needed to run Supashop, with:

• The shop you buy from: your order or booking details, so they can fulfil it.
• Paystack: to process payments, refunds and payouts.
• Supabase: our database, login and file storage provider.
• Cloudflare: hosting and security for supashopgh.com.
• Push services run by Google, Apple, Microsoft or Mozilla: only the text of alerts you turned on.
• Anthropic: only if a shop owner uses an AI writing tool, the photos and notes they submit are sent to create a draft.
• Authorities, when the law requires it.

Some of these providers store data on servers outside Ghana. We use providers that protect data with industry-standard security, and we share only what each one needs.

• Shop owner accounts: while the account is open, and up to 12 months after it is closed, unless the law needs longer.
• Orders, payments and bookings: up to 6 years, for tax, accounting and dispute purposes.
• Server logs: up to 90 days.

Under Ghana's Data Protection Act, 2012 (Act 843) you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or out of date;
• delete information we no longer need, or stop using it for a purpose you object to.

Email supashopghana@gmail.com. We may need to confirm who you are first. Customers can also contact the shop directly. If you are not happy with our answer, you can complain to Ghana's Data Protection Commission.

Connections to Supashop are encrypted. Each shop's data is kept separate at the database level, so other shops cannot see it, and our own team does not browse individual customers' orders. Order links for customers contain a secret code; share them only with people you trust. No system is perfectly secure, and we will tell affected people and the authorities about a serious breach as the law requires.

You must be 18 or older to open a shop. Supashop is not aimed at children, and we do not knowingly collect their information.

We will update this page when our practices change and change the date at the top. For important changes we will tell shop owners by email or in the dashboard. See also our Terms of Service.