Privacy policy.

Last updated 24 October 2026

1. Who this covers
2. What we collect
3. How we use it
4. Who we share it with
5. Where it's stored
6. How long we keep it
7. Security
8. Your rights
9. Cookies and your browser
10. Changes and contact

1. Who this covers

This policy explains how Nkra ("we", "us") handles personal data when you visit our website, create an account, or use our dashboard and API. We follow the Data Protection Act, 2012 (Act 843) of Ghana.

Your recipients. When you send messages through us, you decide who receives them and what they say. For that data you are the data controller and we process it on your behalf, only to deliver your messages and report on them. If you are a recipient with a question about a message, please contact the business that sent it.

2. What we collect

From you

• Account details: business name, email address, phone number and password (stored hashed).
• Sender ID requests: the names you ask for, what you'll use them for and an example message.
• Support messages: your name, email and what you tell us.

When you use the Service

• Messages: recipient numbers, message text, sender ID, time sent, number of parts and delivery status.
• Contacts: names and numbers you save or import, and the groups you put them in.
• One-time codes: the number a code went to and when. The code itself is stored hashed and can't be read back.
• Payments: amount, credit bought, payment reference, status, and a short description like "MTN MoMo" or the last four digits of a card, as reported by Paystack.
• Technical data: IP address, browser and request logs, kept by our hosting providers to run and protect the Service.

3. How we use it

• To create and secure your account, including emailing you sign-in and reset codes.
• To send your messages and one-time codes, and show you their delivery status.
• To take payment and keep your credit balance and payment records accurate.
• To review sender IDs and prevent spam, fraud and abuse, as described in our acceptable use rules.
• To answer your support requests and tell you about important changes to the Service.
• To meet our legal obligations, including tax and record-keeping, and requests from regulators.

We rely on the contract with you, our legitimate interest in running a safe service, and our legal obligations. We don't send you marketing unless you've agreed to it, and you can stop it at any time.

4. Who we share it with

We share personal data only with the companies that help us provide the Service, and only what each one needs:

We may also share data when the law requires it, to protect people from fraud or harm, or with a buyer if our business is sold, who would have to keep this policy's promises. We never sell personal data.

5. Where it's stored

Our database is hosted in South Africa, and some of our providers process data in other countries, including in Europe and the United States. When data leaves Ghana we make sure the provider protects it to a standard at least as strong as Ghanaian law requires.

6. How long we keep it

• Account details while your account is open, and for a reasonable time after you close it in case of disputes.
• Messages and contacts while your account is open, so you can see your history. You can ask us to delete them sooner.
• One-time code records are only useful for minutes; we may delete them at any time after they expire.
• Payment records for as long as Ghanaian tax and accounting law requires.

7. Security

• All traffic to our website and API is encrypted (HTTPS).
• Passwords, API keys, sign-in codes and one-time codes are stored as one-way hashes.
• Access to our database is limited to our backend, using keys that are never shown in the browser.
• Payment details are entered on Paystack's pages, not ours.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Commission as the law requires.

8. Your rights

Under the Data Protection Act, 2012 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that's wrong or out of date;
• delete your data, unless we must keep it by law;
• stop using it for a particular purpose, such as marketing.

Send your request through our support form. We'll reply within 21 days. If you're not happy with our answer, you can complain to the Data Protection Commission of Ghana.

9. Cookies and your browser

We don't use advertising or tracking cookies. The dashboard keeps your sign-in token in your browser's local storage so you stay signed in, and the API docs remember which code language you picked. Signing out removes the sign-in token.

10. Changes and contact

We may update this policy. If a change matters, we'll tell you by email or in the dashboard before it takes effect.

Questions about your data? Use our support form.