Privacy information

Who is responsible

BloomCore Technologies, a business based in Ghana, operates MaaCash. Each business that uses the platform is responsible for the accuracy of the records its own staff enter, and for telling its own customers how their information is used.

What the platform stores

When a business is enrolled, and as its staff work, the platform stores:

• Account details — name, email address, telephone number where supplied, role, status, and a one-way password hash. Passwords themselves are never stored.
• Business records — locations, staff assignments, customers, Susu accounts and cycles, contributions and their allocations, withdrawals, collector assignments and remittances, MoMo daily accounts, commission, expenses and reconciliation entries.
• Device records — which device is enrolled to which staff account, when it was enrolled, and its status.
• Activity records — sign-in, security and administrative events, and the audit entries written when records are created or changed, including who did it and when.
• Sessions — a signed session token held in your browser to keep you signed in.

Records entered for one business are only visible to that business and to the platform operators who administer the platform.

Cookies and sessions

The platform uses its own session cookies, which are limited to the site and are not readable by other sites. There is no advertising or analytics cookie. Different roles — business administrator, worker, collector, customer, and the separate platform administrator — use separate session cookies, and one cannot be used in place of another.

Sessions end automatically after inactivity and at fixed limits set for the deployment. Signing out ends the session for that role.

Information kept on a device

Where a business enables offline capture, records entered on an enrolled device are held in that device's browser storage until they are sent to the platform. Removing the application data from the device removes those unsent records, which is why staff are asked to sync before uninstalling or clearing browser data.

Services used to run the platform

The application is hosted by a cloud hosting provider, and its database is hosted by a managed PostgreSQL provider. Those providers process data on our behalf to run the service. The public site and the application also load the Noto Sans typeface from Google Fonts, which means your browser contacts Google's font service to fetch it.

We do not sell business or customer data, and we do not use it for advertising.

This website

The public pages of this site do not contain analytics, tracking pixels or advertising code, and they do not set session cookies. The contact page does not submit anything: if an email link is used, your own mail application opens and nothing is stored by this site.

Retention and your requests

A fixed retention period is not published here, because the business that owns the records decides how long it needs them and legal requirements differ. Retention practice is being finalised and this page will be updated before commercial launch.

Requests to access, correct or remove information should be made to the business whose records they are, or to BloomCore Technologies. A dedicated privacy contact is not yet published; it will be added here when the owner supplies one.

Changes

When this page changes, the updated version is published here. It is marked as a draft until the owner and their legal adviser have reviewed it.

Related

See the Terms of Service and the business sign in.