Privacy Policy
Effective Date: April 22, 2026
1. Introduction
Tech At Scale Ltd ("we", "us", or "our") operates PayPro OMS (https://app.paypro.cloud), a multi-tenant workforce management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application, mobile application, and related services (collectively, the "Service").
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, company name, and contact details when you register.
- Employee Data: Personnel records including names, job titles, grades, employment dates, bank account details for payroll, and contact information — entered by your organisation's administrators.
- Attendance Data: Deployment schedules, shift records, GPS coordinates (when using mobile attendance features), and time logs.
- Financial Data: Payroll information, invoice records, payment method details, and billing transaction history.
- Support Communications: Messages you send to our support team.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
- Device Information: Browser type, operating system, device identifiers, and IP address.
- Location Data: GPS coordinates when using mobile attendance check-in features (only with your explicit permission).
- Cookies: Session cookies for authentication and security. We do not use third-party tracking cookies.
3. How We Use Your Information
- Provide, operate, and maintain the Service.
- Process payroll, generate invoices, and manage billing.
- Verify employee attendance via GPS and OTP-based check-in.
- Send transactional emails (account verification, password resets, pay slip notifications).
- Monitor and analyse usage to improve the Service.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations in Ghana and applicable jurisdictions.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data only in these circumstances:
- Payment Processors: Paystack, Mastercard (MPGS), and CyberSource process payment transactions on our behalf. They receive only the data necessary to complete transactions.
- Your Employer/Organisation: If you are an employee using the staff portal, your organisation's administrators can view your attendance records, leave requests, and pay slips as part of normal operations.
- Legal Requirements: When required by law, court order, or government regulation.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity.
5. Data Security
We implement industry-standard security measures including:
- AES-256-GCM encryption for sensitive credentials stored in the database.
- HTTPS (TLS) encryption for all data in transit.
- Two-factor authentication (2FA) via email OTP for user login.
- Multi-tenant data isolation — each organisation's data is logically separated and inaccessible to other tenants.
- Security headers (HSTS, CSP, X-Frame-Options) on all responses.
- Regular security assessments and vulnerability monitoring.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Data retention periods comply with applicable Ghanaian law:
- Employment records: Retained for a minimum of 6 years after employment ends, consistent with the limitation period for employment claims under the Limitation Act 1972 (NRCD 54) and tax record requirements under the Revenue Administration Act 2016 (Act 915).
- Payroll and pension contribution records: Retained for a minimum of 12 years, as required by the National Pensions Act 2008 (Act 766) for SSNIT contribution records.
- Tax records: Retained for not less than 6 years from the end of the year to which they relate, per the Revenue Administration Act 2016 (Act 915).
You may request deletion of your account data by contacting us; however, we may retain certain records where required by law.
7. Your Rights
Under Ghana's Data Protection Act 2012 (Act 843) and depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Object to processing that causes or is likely to cause damage or distress.
- Opt out of direct marketing communications.
- Request deletion of your data where it is no longer necessary for its original purpose (subject to legal retention requirements).
- Withdraw consent for optional data processing (e.g., GPS location tracking).
- Lodge a complaint with the Data Protection Commission of Ghana.
We also provide data export functionality within the Service, allowing you to download your records in Excel, PDF, and CSV formats.
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notification. The "Effective Date" at the top of this page indicates when the policy was last revised.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: