Privacy Policy
In plain words
- To run orders we keep: a seller's phone number, store and product details; a customer's phone number and delivery address for the order.
- We never see or store MoMo PINs or card details. Paystack handles payments.
- We do not sell personal data and do not use it for advertising.
- This policy covers the storr seller app (Android, on Google Play), the storr.cc website and storr checkout pages.
- The storr.cc website and storr checkout pages set no cookies and have no analytics or ad trackers.
- You can ask to see, correct or delete your data any time: hello@storr.cc. Sellers can also delete their account themselves.
1. Who is responsible
Christian Adumatta Gyampomah, an individual trading as storr and currently based in Germany ("storr"), is the controller of the personal data described here, under Ghana's Data Protection Act, 2012 (Act 843). We also follow the principles of the EU GDPR (lawfulness, data minimisation, purpose limitation, security and your rights), so our standards are consistent for everyone. For privacy questions write to hello@storr.cc.
For the delivery address and phone number a customer gives a seller when ordering, the seller is also an independent controller for what they do with it after receiving it.
2. What we collect and why
| Who | Data | Why (legal basis) |
|---|---|---|
| Visitors to storr.cc and app.storr.cc | IP address, time, page requested, browser type, in server logs | Run and secure the service, block abuse (legitimate interests). Logs are rotated automatically and kept for a short period. |
| Sellers | Phone number (used to sign in), name and business name, store name and social handles, products, prices, stock, product photos (taken with your camera or chosen from your gallery in the storr app), order records, push-notification token and notification preference | Provide the service and your account (contract); security and fraud prevention (legitimate interests). |
| Sellers' payout details | Your mobile money or bank account number and network/bank are sent to Paystack to set up payouts. We keep only a Paystack reference code, not the account number. | Pay you your sales (contract). |
| Customers who order | Phone number, delivery address (if given), what they ordered, amount, Paystack payment reference and status | Process and deliver the order, give you a receipt, handle disputes and refunds (contract); keep financial records (legal obligation). |
| Sellers whose account we suspended for fraud | A one-way hash (a scrambled code that cannot be turned back into the original) of the seller's phone number and payout account. No name or other details. | Stop the same person re-registering after fraud (legitimate interests: fraud prevention). |
| People who join the early-access list | What you enter in the sign-up form (a Tally form): name, phone/WhatsApp number, the Gmail address you use on your Android phone (for the test invite), town or region, what you sell and where, and any optional answers | Your consent, given when you submit the form: to contact you about early access and invite you to test the app. You can withdraw it at any time. |
| Anyone who emails us | Email address and what you write | Reply and keep a record of support (legitimate interests). |
We do not collect your MoMo PIN, card number or other payment credentials; you enter them only on Paystack's screens. We do not use personal data for advertising, profiling or automated decisions that affect you, and we do not sell it.
3. Cookies on our websites
This website (storr.cc) does not set cookies or use local storage, has no analytics, advertising or social-media trackers, and serves its fonts and styles from our own server so your browser does not contact Google or any other third party when you open it. Because nothing is stored on or read from your device, no cookie banner is needed. If we add analytics or any other tracking in future, we will ask for your consent first and update this section.
storr checkout and confirmation pages (app.storr.cc) also set no cookies, have no analytics or ad trackers, and load no third-party scripts or fonts. Data the storr app and checkout handle is described in section 2, not here. When you pay, your browser goes to Paystack's payment page, which has its own cookies and privacy policy.
When you click through to the early-access sign-up form you leave our website. The form is hosted by Tally, which may set its own cookies and handles your answers under its own policy; our pages do not load anything from Tally until you click.
4. Who we share data with
Only service providers that help us run storr, under contract, and only what they need:
| Provider | Purpose |
|---|---|
| Paystack (payment processor) | Takes payment and settles payouts. Paystack is an independent controller of payment data; see its policy. |
| EuroNodes (server hosting, Europe) | Hosts our servers and database. |
| Google Firebase | Seller sign-in by phone (SMS code) and push notifications to sellers. |
| Tally (form provider) | Hosts the early-access sign-up form and stores the answers. Tally is a processor for this data; see its privacy policy. |
| Cloudflare | Stores product photos (R2) and manages our domain DNS. |
| Email provider (Germany) | Email sent to our @storr.cc addresses is forwarded to, and stored with, our email provider. |
A seller sees the details of customers who order from them. We may also disclose data when required by law, to protect against fraud or abuse, or if the business is sold (with the same protections continuing).
5. International transfers
Our servers are currently in Europe during our early-access phase and we plan to move them to Ghana. Sellers and customers are mainly in Ghana, and some providers (such as Google and Cloudflare) process data in other countries including the United States. Where personal data is transferred across borders we use providers that offer appropriate safeguards and keep what we send to what is needed. Ask us if you want more detail.
6. How long we keep data
- Seller account data: while your account is active. When you ask us to delete it, the account is locked straight away and, after a 30-day grace period, your personal details are deleted or anonymised. Deletion can be refused or delayed while orders are open or still inside the 7-day refund window. See how to delete your account.
- Order and payment records (including customer phone and delivery address): kept for 7 years for refunds, disputes, accounting and tax law, and kept without the seller's name, phone number or store name once the seller's account is deleted. This period is our current plan and may change once confirmed under Ghanaian tax rules.
- Fraud-prevention record: only for seller accounts we suspended for fraud, we keep a hash of the phone number and payout account for as long as needed to prevent fraud and re-registration. Ordinary accounts leave no such record.
- Early-access sign-ups: until the early-access phase ends or you ask us to delete them, and in any case deleted no later than 12 months after you signed up, unless you became a seller (then the seller rules above apply).
- Server logs: rotated automatically; typically a few weeks at most.
- Support emails: up to 2 years.
7. Your rights
You may ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; and give you your data in a portable format. Where we rely on consent you can withdraw it at any time. Sellers can delete their account in the app (Settings, Delete account) or by email. For anything else email hello@storr.cc and we will respond within one month. We may need to confirm it is really you, and we may keep what the law requires us to keep. Customers' order data is also held by the seller, so for deletion you may need to ask them too.
8. Security
Traffic is encrypted (HTTPS). Sign-in uses one-time codes, the database is not reachable from the internet, access to servers is restricted and abuse is blocked automatically. No system is perfectly secure; if a breach affects your data we will tell you and the regulator as the law requires.
9. Children
storr is not for people under 18, and we do not knowingly collect their data. If you think a child has given us data, tell us and we will delete it.
10. Changes
If we change this policy in a meaningful way we will update the date above and tell sellers in the app.
11. Contact and complaints
Questions or requests: hello@storr.cc. You also have the right to complain to a data protection authority: in Ghana, the Data Protection Commission (dataprotection.org.gh), or the data protection authority where you live.