Privacy Policy & Terms of Use
Plain language, written for you: this policy tells you exactly what BYINFORGH collects, why, who can see it, and how it's protected. It is written to be genuinely understandable, not filled with legal jargon, and it follows the principles of Ghana's Data Protection Act, 2012 (Act 843).
Data controller
BYINFORGH is the data controller for everything collected on this platform, as defined under Ghana's Data Protection Act, 2012 (Act 843). That means BYINFORGH is responsible for how your data is handled, and that responsibility isn't outsourced to Supabase or any other provider used behind the scenes.
The eight data protection principles we follow (Act 843, Section 17)
- Accountability: BYINFORGH is responsible for how member data is handled, and that responsibility isn't outsourced to Supabase or any other provider we use.
- Lawfulness of processing: data is only processed with a member's knowledge, through the signup and profile forms they fill in themselves.
- Specification of purpose: each piece of data is collected for a stated reason, listed in "Why we collect it" below, not for undefined future use.
- Compatibility of further processing: we don't repurpose data for something a member wouldn't reasonably expect from a business growth platform.
- Quality of information: members can correct their own profile at any time, and can ask BYINFORGH to fix anything they can't edit themselves.
- Openness: this page states plainly what's collected, why, and who can see it, matching the notice requirements in Section 35.
- Data security safeguards: enforced at the database level through Row Level Security, not just hidden in the interface. See "Where your data lives" below.
- Data subject participation: members can access, correct, or request deletion of their own data at any time. See "Your rights" below.
What we collect
When you join, we collect your name, WhatsApp or phone number, email address, and location and nearest landmark. If you already have a running business, we also collect your business name, category, and what you sell. If you're joining without a business yet, we instead ask what your business idea is. Either way, we ask what you're looking for right now, what you want to get out of the Business Growth Series, and your biggest current struggle. If you choose to add one, we also store a business logo or photo you upload. We automatically record when you were last active, so the community can show who's online, and when you first saw our in-app welcome message.
If you use the Business Hour features, we also collect the questions you send in for the Business Hour, the business ideas you write down if you don't have a business yet, and your choice about receiving reminder emails. Messages BYINFORGH sends you (your Business Hour link, reminders and next-step prompts) are stored in your account so they show in your Messages inbox.
We also record when you visit the site and roughly how long each visit lasts (a short signal every minute while a page is open on your screen). BYINFORGH admins can see this to understand how members use the Series and to support you. It is not shown to other members, other than a general online indicator.
Why we collect it
- To create your business profile so other members and the AI assistant can actually help you
- To point you to the right lessons and people, whether you already run a business or are just starting from an idea
- To show you in the business directory so other members can find, trade, or partner with you
- To calculate your accountability streak and the community leaderboard
- To send you your login link by email
- To send you the Business Hour link every Sunday, a reminder on Wednesday to send in your questions, and a few helpful prompts if you haven't yet connected with another member, added your business to the directory, or finished your profile, by email and in your Messages inbox
- To read and answer the questions you send in for the Business Hour
- To improve the AI assistant, only using documents and questions you or other members explicitly submit and BYINFORGH reviews and approves, never your private profile fields
Who can see what
Your name, business name, category, location, landmark, what you sell, what you're looking for, phone number, and logo are visible to other logged in members, since that visibility is the point of the directory and community. Your email address, your business idea (if you joined without a business yet), what you want to get out of the Series, and what you told us about your biggest struggle are private, visible only to you and to BYINFORGH for support purposes, never shown to other members. The questions you send in for the Business Hour are also visible only to you and BYINFORGH; we may answer them live during the session. What you write as "what you're looking for" is visible to other members, so only write what you're happy to share. This is enforced by Supabase's row-level security at the database level, not just by what the interface happens to display, which is what lets us make that private/public split reliable: only you can see your own private account details, and other members only ever see the fields you're told are shared.
Content you post in the community feed, the Q&A hub, the Live Lounge (including your replies and likes), or submit as a business spotlight is visible to other logged in members, since those are public spaces by design. Nothing you post there is private.
Where your data lives
Your account and profile data is stored with Supabase, a database and authentication provider, inside a project controlled by BYINFORGH. Photos and logos are stored the same way, in a dedicated storage bucket. The website pages themselves (what you see when you visit businessgrowthseries.byinforgh.com) are served through GitHub Pages, and the byinforgh.com domain is managed with Hostinger; like any web host, they may keep standard technical access logs (such as IP address and browser type) as part of running the site, separate from your BYINFORGH profile data. Reminder and login emails are delivered through an email provider (Resend), which receives your email address and the message text only for the purpose of delivering it. Your data may be processed on infrastructure located outside Ghana as part of using these providers; BYINFORGH only works with providers that maintain their own data security standards for this reason.
Security measures
Your data is protected at the database level, not just hidden behind a login screen in the interface:
- Row-level access control on every table, enforced by Supabase at the database itself, not just by what the app chooses to display. In plain terms: only you can see your own account details, and other members only ever see the information you choose to make visible in your profile. A request for anything else is refused before it ever reaches the interface
- Private fields stay private — your login email and what you told us as your biggest struggle are restricted to your own account at the database level, so they can't be retrieved even by directly querying the platform's API
- No passwords stored anywhere — login is a one-time emailed link, so there is no password for anyone to leak or guess
- Every piece of content members submit — posts, questions, answers, profile fields, spotlight entries, chat messages — is sanitised before it's ever displayed, so it can't be used to run code in another member's browser
- Pending review queues for anything public-facing that a member submits — a business spotlight, a testimonial, a document that trains the AI assistant — so nothing goes live without BYINFORGH reviewing it first
Risk prevention
Beyond technical safeguards, the platform is built to limit harm if something does go wrong:
- A reporting system lets any member flag a message, post, or profile that crosses a line, reviewed by BYINFORGH
- A three-strike system automatically suspends an account after repeated, reviewed violations
- Admin moderation tools allow BYINFORGH to remove any post, question, answer, or chat message that shouldn't be there
- You can switch off reminder emails at any time from your dashboard. In-app reminders in your Messages inbox will continue, and login emails are unaffected
- We do not collect passwords, financial account numbers, or national ID numbers anywhere on this platform
- We do not sell your data to anyone, and we do not share it with advertisers, under any circumstance
Your rights
You can ask to see everything we hold about you, correct anything that's wrong, withdraw consent, object to how your data is used, or have your account and data deleted entirely. To do any of this, message BYINFORGH directly on WhatsApp or email, using the contact details on the main site. In line with Section 35 of Act 843, we aim to respond to any request within 40 days at the very most, and usually much sooner. Deletion removes your profile, posts, and photos from the platform.
If something goes wrong (breach notification)
If member data is ever compromised in a way that puts you at risk, BYINFORGH will notify the Data Protection Commission as soon as possible, and will notify affected members directly, explaining what happened and what we're doing about it. We don't wait for a complaint to act on a known security issue.
How long we keep your data
We keep your data for as long as your account is active, since that's what makes the directory, community, and progress tracking work. If you ask us to delete your account, we remove your profile, posts, and photos within a reasonable time, except where we're required to keep limited records for legal or security reasons.
Children
This platform is built for business owners and is not intended for anyone under 18.
Changes to this policy
If this policy changes in a way that matters, we'll make a reasonable effort to let members know, for example through the community feed or a direct message.
Terms of use, in short
- Everything you post should be honest and about your actual business, no fake profiles or fake reviews
- Be respectful in the community, no harassment, hate speech, or scam attempts against other members
- Content you submit to train the AI assistant is reviewed by BYINFORGH before it's used, and should be genuinely yours to share
- BYINFORGH can remove content or suspend accounts that break these terms
- The 203 lessons, playbooks, and resources are for your own business use, not for resale
- Lessons, playbooks, and guides are read inside the platform and aren't provided as downloadable files, so the community, questions, and shared experience around them stay part of the same space
Contact
For any privacy question, data request, or concern, reach BYINFORGH directly through the contact details on the main site.