TTThothTechnologies

Legal

Privacy Policy

Last updated: 4 July 2026

1. Who We Are

This Privacy Policy explains how Thoth Technologies ("we", "us", "our") collects, uses, and protects personal information in connection with Thoth, our WhatsApp-native food ordering platform. We are committed to protecting your privacy in accordance with Ghana's Data Protection Act, 2012 (Act 843).

For privacy-related questions, contact us at aithoth6@gmail.com.

2. Information We Collect

2.1 From Restaurants (Dashboard Users)

  • Account information — name, business name, email address, phone number, and WhatsApp number
  • Business information — restaurant profile, address, delivery zones, menu items and prices, operating hours
  • Payment information — Paystack merchant account details, MoMo wallet number for payouts. We do not store card or MoMo PIN details — these are handled directly by Paystack.
  • Operational data — order history, revenue figures, staff accounts created, promotions run
  • Communications — messages sent to our support team

2.2 From Customers (WhatsApp Ordering)

  • WhatsApp number — used to identify your session and communicate order updates
  • Order information — items ordered, delivery address, order notes, order history
  • Payment information — payment method selected (MoMo or card), transaction reference. Actual payment details are processed by Paystack and not stored by us.
  • Location data — delivery address as provided by you during ordering

2.3 Automatically Collected Data

  • Usage data — pages visited on this website, time spent, browser type, device type, IP address
  • Analytics — aggregate usage patterns collected via privacy-respecting analytics tools

3. How We Use Your Information

We use the information we collect to:

  • Operate and improve the Thoth platform
  • Process and fulfil food orders
  • Process payments and manage merchant payouts via Paystack
  • Send order status updates via WhatsApp
  • Manage restaurant accounts, menus, and staff access
  • Resolve disputes between restaurants and customers
  • Send service communications (billing, policy updates, platform announcements)
  • Comply with legal obligations under Ghanaian law

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. WhatsApp and Meta

Thoth uses the WhatsApp Business API (provided by Meta Platforms, Inc.) to send and receive messages. When you interact with Thoth via WhatsApp, your messages pass through Meta's infrastructure. Meta's own privacy policy applies to data processed by WhatsApp. We encourage you to review WhatsApp's Privacy Policy.

We use WhatsApp only to fulfil your orders and communicate about them. We do not use your WhatsApp number for marketing without your explicit consent.

5. Paystack

Payments on Thoth are processed by Paystack (a Stripe company), a licensed payment service provider operating in Ghana. When you pay for an order, your payment details are entered on Paystack's secure payment page and are governed by Paystack's Privacy Policy. We receive only a transaction reference and confirmation — not your card or MoMo details.

6. Data Sharing

We share personal information only in the following circumstances:

  • With the restaurant you order from — your WhatsApp number, delivery address, order details, and order notes are shared with the restaurant to fulfil your order.
  • With Paystack — for payment processing and merchant payouts.
  • With service providers — we use third-party services to operate the platform (cloud hosting, database, image storage, error monitoring). These providers process data only on our instructions and under confidentiality obligations.
  • For legal compliance — if required by law, court order, or regulatory authority in Ghana.

7. Data Retention

We retain personal information for as long as necessary to provide the service and comply with legal obligations:

  • Restaurant account data — retained while the account is active and for 2 years after closure
  • Order records — retained for 5 years for accounting and dispute resolution purposes
  • Customer WhatsApp sessions — session data is deleted 30 days after the last interaction
  • Payment records — retained for 7 years as required by Ghanaian financial regulations

8. Your Rights

Under Ghana's Data Protection Act 2012, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that inaccurate information be corrected
  • Deletion — request deletion of your personal data, subject to legal retention requirements
  • Objection — object to certain uses of your data

To exercise any of these rights, contact us at aithoth6@gmail.com. We will respond within 7 days.

9. Security

We implement technical and organisational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), access controls, and secure cloud infrastructure. No system is completely secure — if you believe your account has been compromised, contact us immediately.

10. Children's Privacy

Thoth is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email (for restaurants) or via a notice on this page. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy questions or to exercise your rights under the Data Protection Act 2012, contact us at aithoth6@gmail.com.