Legal
Privacy Policy
Last updated: May 2026
1. Who We Are
Pesewa Rising Ltd. ("Pesewa Rising," "we," "us," "our") operates the Pesewa Rising investment crowdfunding platform and is committed to protecting your personal data and handling it in accordance with the Data Protection Act 2012 (Act 843). We are the data controller responsible for your personal information collected through the Platform. Our Data Protection contact is privacy@pesewarising.com.
2. Information We Collect
We collect the following categories of personal information:
Account Information
Full name, email address, phone number, account type (investor or fundraiser), and password (stored encrypted).
Identity Verification (KYC)
Government-issued ID documents (Ghana Card or Passport), submitted for identity verification purposes.
Financial Information
Investment amounts, transaction references, payment history. We do not store full card or bank account numbers — payments are processed by Paystack.
Business Information (Fundraisers)
Business name, sector, location, documents, financial information submitted as part of campaign creation.
Usage Data
IP address, browser type, pages visited, time spent on the Platform, device information. Collected automatically when you use the Platform.
3. How We Use Your Information
We use your personal information to:
- Create and manage your account
- Verify your identity (KYC) before allowing investment
- Process investments and payments
- Send transaction confirmations, receipts, and status updates
- Review and approve campaign submissions
- Comply with anti-money-laundering (AML) and financial regulations
- Improve the Platform through analytics and usage data
- Respond to support enquiries
- Send platform updates and relevant communications (you can opt out)
4. Legal Basis for Processing
We process your personal information under the following legal bases:
- Contract: Processing necessary to fulfil your account and investment activities
- Legal obligation: KYC/AML compliance requirements under Ghanaian financial law
- Legitimate interest: Platform security, fraud prevention, and service improvement
- Consent: Marketing communications (you may withdraw consent at any time)
5. Who We Share Your Information With
We do not sell your personal information. We share data only with:
Paystack
Payment processing. Paystack's privacy policy applies to data processed through their systems.
Supabase
Secure cloud database infrastructure where account and transaction data is stored, hosted on servers in an EU jurisdiction with appropriate data protection standards.
Cloudflare
Document and image file storage (R2) and platform security (CDN, DDoS protection).
Resend
Transactional email delivery (receipts, status updates, notifications).
Regulatory Authorities
We may disclose information to the Securities and Exchange Commission of Ghana, the Financial Intelligence Centre, or law enforcement if required by law.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Platform's services. After account closure, we may retain certain data for up to 7 years to comply with financial recordkeeping obligations under Ghanaian law. KYC documents are retained for the period required by applicable AML regulations.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), encrypted data storage, role-based access controls, and regular security reviews. However, no system is completely secure — please use a strong, unique password for your account.
8. Your Rights
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate information (some fields are editable in your Settings page)
- Deletion — request deletion of your account and personal data, subject to legal retention obligations
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — for marketing emails, unsubscribe via the link in any email
To exercise any of these rights, email us at privacy@pesewarising.com. We will respond within 30 days.
9. Cookies
The Platform uses session cookies required for authentication and to keep you logged in. We do not use third-party advertising cookies. Usage analytics may use anonymised, aggregated data. By continuing to use the Platform you consent to essential cookies.
10. Children
The Platform is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with their information, please contact us immediately so we can delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy.
12. Contact
For any privacy-related questions or to exercise your rights, contact us at privacy@pesewarising.com.