Privacy Policy

1. Who we are

MYXCROW ("we", "us", "our") is a Ghana-based escrow platform. We operate the MYXCROW website, Android app, and iOS app. We are the data controller for the personal data we collect in connection with these services. This Privacy Policy explains how we collect, use, store, and protect your information in line with the Data Protection Act 2012 (Act 843) of Ghana and applicable law.

2. Data we collect

We collect the following categories of data:

• Account data: Email, name, phone number, password (stored in hashed form), account type (buyer/seller), and registration date.
• Identity verification (KYC): Ghana Card number, photos of Ghana Card (front and back), selfie photo, and face verification results (e.g. similarity score) used to verify your identity and prevent fraud.
• Escrow and transaction data: Escrow IDs, amounts, parties, milestones, release/refund actions, wallet balances, top-ups, withdrawals, and related transaction history.
• Communications and support: Messages you send via the in-app chat widget, emails from your registered account, and any screenshots or attachments you provide when reporting issues (e.g. escrow ID, evidence).
• Device and usage data: IP address, device type, browser or app version, and general usage information (e.g. pages visited, actions taken) to operate the service, secure it, and improve it.

We do not sell your personal data to third parties.

3. How we use your data

We use your data to:

• Provide and operate the escrow, wallet, and support services.
• Verify your identity (KYC) and comply with legal and fraud-prevention requirements.
• Process disputes, releases, and refunds in line with escrow agreements.
• Communicate with you (e.g. notifications, support, important updates).
• Secure the Platform (e.g. authentication, fraud detection, risk scoring).
• Improve our services and user experience (e.g. analytics, troubleshooting).
• Comply with applicable law and respond to lawful requests from authorities.

4. Legal basis

We process your data on the basis of: (a) performance of our contract with you (e.g. providing escrow and account services); (b) your consent where we ask for it (e.g. marketing, optional features); (c) our legitimate interests (e.g. security, fraud prevention, improving the service); and (d) compliance with legal obligations (e.g. KYC, anti-fraud, regulatory reporting where required).

5. Sharing your data

We may share your data with:

• Payment and service providers: To process top-ups, withdrawals, or other payments (e.g. mobile money, bank transfers) in line with our terms and your instructions.
• Regulators and authorities: Where required by law or to protect rights and safety.
• Support and infrastructure: Trusted partners who help us run the Platform (e.g. hosting, support tools), under strict confidentiality and data protection obligations.

We do not sell your personal data. We do not share it for third-party marketing without your consent.

6. Retention

We retain your data for as long as your account is active and as needed to provide the service, resolve disputes, and comply with legal obligations (e.g. tax, anti-fraud). After account closure, we may retain certain data for a limited period for legal, security, or dispute-resolution purposes. KYC and transaction records may be retained as required by law or our policies.

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse (e.g. encryption, access controls, secure storage). In the event of a data breach that affects your rights, we will notify you and the Data Protection Commission as required by the Data Protection Act 2012 (Act 843).

8. Your rights (Ghana Data Protection Act 2012)

Under the Data Protection Act 2012 (Act 843), you have rights including:

• Access: To request a copy of the personal data we hold about you.
• Correction: To request correction of inaccurate or incomplete data.
• Erasure: To request deletion of your data where the law allows.
• Objection: To object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where we rely on consent, you may withdraw it at any time.

To exercise these rights, contact us via the in-app chat or email from your registered account. You may also lodge a complaint with the Data Protection Commission of Ghana.

9. Children

The Platform is not intended for users under 18. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has provided us with data, please contact us so we can delete it.

10. International transfer

Your data is primarily processed in Ghana. If we transfer data outside Ghana, we will ensure appropriate safeguards (e.g. contracts, adequacy decisions) in line with the Data Protection Act 2012.

11. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via the Platform, email, or in-app notice. Continued use after the effective date constitutes acceptance. We encourage you to review this policy periodically.

12. Web, Android and iOS

This Privacy Policy applies to your use of MYXCROW on the web, the Android app (e.g. Google Play), and the iOS app (e.g. App Store). The same data practices and rights apply across all platforms. By using any of these, you acknowledge that you have read and understood this policy.

13. Contact

For privacy-related questions, to exercise your rights, or to contact a data protection officer (where applicable), use the in-app chat widget or email from your registered account. Include your account/escrow ID when relevant. See our Support page for more information.