Privacy Policy
Last updated 5 October 2026
This Privacy Policy explains how Senverse Technologies Ltd ("Senverse", "we", "us"), a private company limited by shares incorporated in the Republic of Ghana under the Companies Act, 2019 (Act 992), handles personal data in connection with Senport, our customer-service and complaint-management platform, and our website at senport.io. Senport is a product of the Senverse ecosystem.
Two roles. For information about our own customers and website visitors, Senverse decides how the data is used, so we are the data controller. For the information organizations put into Senport about their own customers and cases, the organization is the controller and Senverse is its data processor: we handle that data only on the organization’s instructions, under our Data Processing Addendum.
1. Who this policy covers
- Users of Senport: owners, administrators, agents and other people our customers authorise to use Senport.
- Customer contacts: billing, commercial and other contacts at organizations that buy or consider buying Senport.
- Website visitors and people who contact us.
- End Customers: people who contact an organization that uses Senport (for example by submitting a complaint or a support request). For their data, the organization is the controller; section 4 explains what we do on its behalf, and you should contact that organization to exercise your rights.
Sections 4 to 9 describe the Senport cloud service that we host. Some organizations, such as banks, run Senport on their own servers (an on-premise installation). Their data stays on their own infrastructure and does not pass through Senverse: we do not host it, our sub-processors do not receive it, and it is not transferred abroad by us. The organization is responsible for it, and we access it only if the organization gives us access, for example during a support session. If the organization turns on our daily licence report, we receive only the licence, the software version, the number of seats in use and the database version, which contain no personal data.
2. Personal data we collect as a controller
| Category | Examples | Source |
|---|---|---|
| Account and profile | Name, work email address, phone number, language, time zone, role and organization | You or your organization’s administrators |
| Sign-in and security | Password (stored only as a one-way hash), authenticator secrets (encrypted), passkey and security-key public keys, single sign-on identifiers, recovery codes (hashed), session records including IP address, device and browser, and sign-in times | Generated when you use Senport |
| Activity and audit | Actions you take in Senport, recorded in your organization’s audit trail with time, IP address and browser; technical request logs | Generated when you use Senport |
| Registration and agreements | Company name and country, owner details, which versions of our Terms and this policy were accepted and when, and fraud-prevention signals: the domain of the sign-up email address, a keyed, irreversible fingerprint of the sign-up IP address, and the results of checks on the email domain (whether it belongs to a temporary or throwaway email service, whether it can receive email, and when it was registered) | You, when you register, and public DNS and domain registration (RDAP) records |
| Billing | Billing contact name and email, plan, seats, invoices, payment references and tax details. Card and mobile-money details are handled by our payment providers; we do not store full card numbers. | You and our payment providers |
| Communications | Support requests, emails and messages you send us, and your responses to our surveys | You |
| Website | Your language preference and the essential cookies described in section 11 | Your browser |
3. How we use it, and our lawful grounds
We process personal data as a controller only where the law allows, principally under the Data Protection Act, 2012 (Act 843) of Ghana:
| Purpose | Lawful ground |
|---|---|
| Creating and running accounts, providing Senport and support | Performance of our contract with your organization |
| Authenticating Users, securing accounts, detecting fraud and abuse, keeping audit records | Our legitimate interest in protecting Senport and our customers, and legal obligations |
| Billing, invoicing, tax and accounting | Performance of contract and legal obligations |
| Service messages (security alerts, invoices, changes to terms, maintenance and incident notices) | Performance of contract and legitimate interest |
| Improving Senport, using operational measurements that do not include the content of your records | Legitimate interest |
| Product news and marketing to business contacts | Legitimate interest or consent where required; you can opt out at any time |
| Complying with law and responding to lawful requests | Legal obligation |
We do not sell personal data, and we do not use personal data for advertising or profiling.
4. Data we process on behalf of organizations
Organizations that use Senport decide what data to collect about their End Customers and cases. Depending on how an organization configures Senport, this can include:
- names, contact details (email, phone, postal address) and preferred language;
- identifiers such as Ghana Card, Bank Verification Number or customer account numbers (stored encrypted), and date of birth or gender where an organization needs them, for example for regulatory reporting;
- the content of complaints, requests, cases, messages, emails, chat, WhatsApp, Telegram and SMS conversations, attachments, and survey responses;
- call recordings and transcripts, and USSD session input;
- payment and mobile-money transaction details relevant to a complaint or reversal;
- location, where a request is submitted through a QR code that shares it, or for field staff whose location history an organization records;
- information about vulnerability or accessibility needs, which organizations use to treat customers fairly and which Senport lets them restrict;
- protected (whistleblowing) reports, which can be made anonymously: Senport keeps no account, contact detail or device identifier for the reporter, and the report is encrypted and readable only by people the organization grants access.
We process this data only to provide Senport to the organization, on its documented instructions, as described in the Data Processing Addendum. If you are an End Customer and want to access, correct or delete your data, or have questions about how it is used, please contact the organization you dealt with. If you contact us, we will pass your request to that organization.
5. AI processing
Senport offers AI features such as classification, sentiment detection, summaries, suggested replies, translation and call transcription. Each organization controls whether these are used. When they are, the relevant text or audio is sent to the AI providers listed in section 6.
- By default, personal data such as names, email addresses, phone numbers, card and identification numbers is removed or replaced before text is sent to an external AI provider. Organizations can also block external AI or use a local model. Call audio sent for transcription cannot be redacted.
- AI output is a suggestion for a person to review; AI does not take decisions with legal or similarly significant effects on individuals in Senport.
- Senverse does not keep the text sent to or returned from an AI provider beyond what is saved in the organization’s records, and does not use personal data to train AI models.
7. International transfers
Senport’s cloud service is hosted by Amazon Web Services in Frankfurt, Germany, and some of the providers above are located in other countries, including the United States, Kenya and Nigeria. This means personal data is transferred outside Ghana. We do this only where the recipient provides adequate protection for the data, including through contractual commitments to protect it to the standard required by applicable data protection law. Organizations that need their data kept in a particular country can choose a dedicated installation, or run Senport on their own servers, in which case their data is not transferred by us at all (see section 1).
8. How long we keep personal data
| Data | Retention |
|---|---|
| Account and profile data | For as long as the account is active, and then as part of the organization’s data (see the Data Processing Addendum for deletion after offboarding) |
| Sign-in sessions | Refresh sessions expire after 7 days unless renewed; organizations can set shorter idle timeouts |
| Audit trail | Kept for the life of the organization in tamper-evident form, and retained after offboarding as a record of activity; the period organizations can view depends on their plan |
| Billing and tax records | For the period required by tax and accounting law |
| Email delivery records | 90 days (recipient addresses stored as a one-way hash) |
| Communications with us | For as long as needed to deal with the matter and keep a record of it |
| Backups | Deleted on the rotation of our backup schedule |
Organizations decide how long End Customer data is kept. Senport lets them set retention schedules (for example deleting the personal data in closed tickets after a chosen period), apply legal holds, redact content and erase an individual’s identifying data on request.
9. How we protect personal data
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS) and at rest, application-level encryption of sensitive fields, strict separation of each organization’s data enforced in the database, multi-factor authentication, role-based access, tamper-evident audit logging, malware scanning of uploads, monitoring and backups. Senverse staff can see the content of an organization’s records only through a support visit that the organization approves. More detail is on our Security page.
If a personal data breach affects you or the data we process for an organization, we will notify the affected organization and, where required, the Data Protection Commission and you, as the law requires.
10. Your rights
Subject to the conditions and exceptions in applicable law, you can ask us to:
- confirm whether we hold personal data about you and give you a copy of it;
- correct inaccurate or incomplete data;
- delete data that is no longer needed or was processed unlawfully;
- stop or restrict processing, including objecting to processing based on our legitimate interests and to direct marketing;
- withdraw consent where processing is based on consent.
To exercise these rights, email privacy@senverse.io. We may need to verify your identity before acting on a request. We respond within the period required by law and in any event aim to respond within 30 days. If your request concerns data an organization controls, we will refer it to that organization and help it respond.
If you are not satisfied with our response, you may complain to the Data Protection Commission of Ghana (www.dataprotection.org.gh), or to the data protection authority in your country.
12. Children
Senport accounts are for business users and are not intended for anyone under 18. Organizations are responsible for handling any data about children that they process through Senport lawfully.
13. Changes to this policy
We may update this policy. We will post the new version here with its date and, if the changes are material, notify organizations by email and in Senport, where administrators are asked to review and accept the new version.
14. Contact us
Senverse Technologies Ltd, House No. 8, Tuba Road, near Stockwell Montessori School, Tuba, Accra, Greater Accra Region, Ghana (digital address GS-0357-8073). Postal address: P.O. Box M 253, Accra, Ghana. Company registration number CS185630926. Privacy enquiries and data protection supervisor: Agnes Nakie Agbettor-Darko, privacy@senverse.io.