Privacy Policy

1. General Policy

This Privacy Policy explains how Splendid Labs Technologies Ltd. ("Splendid Labs", "we", "us") collects, uses, and protects information across its products: Business Flow, VotexGH, and DataStream, as well as custom systems we build for institutional clients (e.g. School).

Splendid Labs processes personal data in accordance with Ghana's Data Protection Act, 2012 (Act 843), and is registered with the Data Protection Commission where required. For products used outside Ghana, we apply the same standard as a baseline and adapt to stricter local requirements where applicable.

What we generally collect

• Account details you provide (name, email, phone, business/organization name).
• Transaction and usage data generated while you use a product (sales records, votes cast, queries, uploads).
• Technical data (IP address, device/browser type, log timestamps) for security and performance.

What we don't do

• We do not sell personal data to third parties.
• We do not share data across products beyond what's needed to operate shared infrastructure (e.g. authentication, hosting).

Your rights

You may request access to, correction of, or deletion of your personal data by contacting hello@splendidlabs.org.

2. Business Flow

Business Flow is a retail/business management tool (point of sale, inventory, staff, and sales records) operated by Splendid Labs as Data Controller.

• Data collected: store owner and staff accounts, product/inventory records, customer and sales transaction data entered by the business.
• Purpose: operating the point-of-sale, inventory, and reporting features you use.
• Retention: retained for the life of your store account, and as required for financial record-keeping after account closure.
• Sharing: payment data is shared only with our payment processor (Paystack) to complete transactions.

3. VotexGH

VotexGH is an election/voting platform. Splendid Labs is Data Controller for platform accounts and infrastructure, while the organization running a given election (school, association, club) is responsible for the accuracy of voter lists it uploads.

• Data collected: voter registration details (name, voter ID, contact info) supplied by the election organizer; ballots cast; election administration logs.
• Vote confidentiality: ballots are recorded in a way that prevents linking a specific voter to their specific vote choice in publicly visible results.
• Purpose: conducting and certifying a specific election, and preventing duplicate voting.
• Retention: election data is retained for audit purposes for a reasonable period after results are certified, then archived or deleted per the organizer's instructions.
• Sharing: results and voter turnout data are visible only to the authorized administrators of that specific election.

4. DataStream

DataStream is a data/utility purchase platform (e.g. airtime, data bundles). Splendid Labs is Data Controller.

• Data collected: phone numbers/network selections used to fulfill purchases, transaction references, and payment confirmation data from Paystack.
• Purpose: processing and fulfilling data/airtime purchase requests, resolving failed or pending transactions.
• Retention: transaction records are retained for reconciliation and dispute-resolution purposes.
• Sharing: shared only with our payment processor and the relevant telecom network to fulfill your purchase.

5. School & Other Custom Institutional Deployments

School (and any other custom system Splendid Labs builds for a specific institution) is different from our in-house products above: the institution, not Splendid Labs, is the Data Controller.

• Data collected: student records, attendance, grades, staff/teacher accounts, and communications entered by the institution — configured by that institution, not by Splendid Labs.
• Our role: Splendid Labs acts strictly as a Data Processor — we build, host, and maintain the system on the institution's behalf during the development and support period.
• Handover: upon formal handover of admin access, database, and source code, the institution assumes full responsibility as Data Controller for data protection compliance, parental/guardian consent, and retention, as documented in a signed handover certificate. Contact hello@splendidlabs.org for a summary of our handover process.
• Before handover: Splendid Labs limits internal access to student data to what's required for development and support, and does not use institutional data for any purpose outside the contracted engagement.