Legal
Privacy Policy
STONKS · Last updated: 11 August 2026
1. Who we are
STONKS is operated as a sole proprietorship registered in Ghana (“STONKS”, “we”, “us”). This policy explains what personal data we collect, why, and your rights. It covers two groups of people: Merchants (shop owners and their staff who use the STONKS app) and Customers(people who buy from a Merchant’s STONKS store).
2. The data we collect
| From Merchants | Why |
|---|---|
| Name, email, phone, business name & address, payout/mobile-money details | Create and run your account, settle your payments |
| Products, inventory, orders, customers, and other data you enter | Provide the app's features |
| Login and device/usage information | Security and improving the Service |
| From Customers | Why |
|---|---|
| Name, phone, and (if given) email | Place, track, and fulfil your order |
| Delivery address / location | Deliver your order |
| Payment details | Processed directly by our payment provider (Paystack) — STONKS does not store full card or mobile-money credentials |
3. How we use data
- To provide, operate, and secure the Service.
- To process orders and payments and to settle funds to Merchants.
- To provide the optional in-store AI assistant, which answers customer questions using only that shop's catalogue and public info.
- To communicate with you about your account, orders, and support requests.
- To detect, prevent, and address fraud, abuse, and technical issues.
- To comply with legal obligations.
4. Legal basis
We process personal data where it is necessary to perform our contract with you, where we have your consent, where we have a legitimate interest (such as securing the Service), or where the law requires it — consistent with the Data Protection Act, 2012 (Act 843).
5. Who we share data with
We do not sell your personal data. We share it only with:
- Merchants — a Customer’s order details are shared with the shop they bought from, so the shop can fulfil the order.
- Payment processing — Paystack, to take payments and settle funds.
- Infrastructure — Supabase (database, authentication, storage) and Vercel (hosting), which store and serve data on our behalf.
- AI processing — Google (Gemini) processes assistant questions to generate answers; no more than the shop’s catalogue/info and the question is sent.
- Legal — authorities where required by law.
These providers may process data outside Ghana. We take reasonable steps to ensure appropriate protection.
6. Data retention
We keep personal data for as long as your account is active or as needed to provide the Service, then for any period required to meet legal, accounting, or dispute-resolution obligations, after which it is deleted or anonymised.
7. Security
We use technical and organisational measures to protect data, including encryption in transit, access controls, and row-level isolation so each shop can only see its own data. No system is perfectly secure, but we work to protect your information and to notify you of serious breaches as required by law.
8. Your rights
Subject to the Data Protection Act, you may:
- Ask what personal data we hold about you and request a copy.
- Ask us to correct inaccurate data.
- Ask us to delete your data, where we're not required to keep it.
- Object to or restrict certain processing, and withdraw consent.
To exercise these rights, contact us at jojo.nti.kumi.appiah@gmail.com. If you’re a Customer of a shop, some requests may need to go through that shop as the controller of your order data.
9. Children
STONKS is not directed at children. Merchant accounts are for adults (18+). We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy. Material changes will be notified in the app or by email, and the “Last updated” date will change.
11. Contact
Questions or requests about your data: jojo.nti.kumi.appiah@gmail.com · 0530353058.