Privacy Policy
Last updated: 1 February 2026
1. Who We Are
I-Assist Pro Limited (“WaveScorePro”) is the data controller for personal data processed via www.wavescorepro.com. We comply with Ghana's Data Protection Act, 2012 (Act 843) and apply GDPR-equivalent standards.
2. Data We Collect
Account data: name, email, organisation, role, password hash. Operational data: IP address, browser, login times, MFA secrets. Voluntary data: phone number, billing address, station-claim documents. Anonymous panel data from USSD respondents (gender, age band, LSM band, region — never name).
3. Why We Process It
To operate the Service (authentication, billing, audience measurement), to issue tamper-evident certificates, to communicate with you about your account and the WaveScore Charts newsletter (opt-in), and to comply with legal obligations.
4. Legal Bases
Contract (account + paid plans), legitimate interest (operational logs, abuse detection), consent (newsletter, optional phone number, marketing). You may withdraw consent at any time.
5. Data Sharing
We do not sell personal data. We share data only with sub-processors strictly necessary to deliver the Service: Resend (email), Hubtel (SMS), Paystack (payments), MongoDB Atlas (hosting). All sub-processors are bound by data-protection agreements.
6. International Transfers
Some sub-processors operate outside Ghana. We rely on Standard Contractual Clauses and equivalent safeguards for those transfers.
7. Retention
Account data: while your account is active + 6 years thereafter for tax/legal reasons. Certificates: 7 years (immutable). Login logs: 12 months. Newsletter subscribers: until you unsubscribe.
8. Your Rights
Under Act 843 and the GDPR you have the right to access, rectify, erase, restrict, object, and port your personal data. To exercise any right email privacy@wavescorepro.com — we respond within 30 days.
9. Cookies & Local Storage
We use a single first-party local-storage key to keep you signed in. We do not use third-party advertising cookies. Our embeddable widget uses session storage only.
10. Security
Passwords hashed with bcrypt (cost 12). Refresh tokens SHA-256 hashed, single-use. MFA via TOTP. HTTPS-only with HSTS. All admin actions logged.
11. Children
The Service is not directed at children under 13. We do not knowingly process data of children.
12. Contact & Complaints
Privacy questions: privacy@wavescorepro.com. Phone: +233 20 855 3679. You may also lodge a complaint with the Data Protection Commission of Ghana.