Privacy Policy

Ledgehold Enterprise's DataExpress Enterprise Standards

Commitment to Act 843

DataExpress operates in strict accordance with the Data Protection Act, 2012 (Act 843) of Ghana. We treat Student ID data and Merchant Access Keys as "Special Personal Data," ensuring maximum encryption and limited access to maintain the Ledgehold Standard.

What we see

Full Name & University Details
Uploaded Photos
Course of Study
MoMo Payout Numbers
Daily Logs & Verification Receipts

How we protect it

AES-256 Cloud Encryption
SHA-256 One-Way Hashing (PINs)
6-hour Auto-Purge for ID uploads
12-hour Auto-Purge for Photo uploads
Encrypted Hubtel API Handshakes

Zero-Knowledge PIN Standards

To guarantee total data sovereignty for our Merchants, Ledgehold Enterprise utilizes a zero-knowledge architecture for dashboard access:

Non-Retrievable Keys: We do not store plain-text PINs. Your PIN is mathematically transformed into a hash that cannot be reversed.
Staff Access: Ledgehold employees, administrators, and developers have zero visibility into your private keys.
Security Mandate: In the event of a lost PIN, the existing record must be administratively revoked (wiped) and the merchant must re-onboard to generate a new key.
Session Security: To prevent unauthorized access on shared devices, active dashboard sessions automatically terminate after 2 minutes of inactivity.

The Gatekeeper Policy

DataExpress (via Ledgehold Enterprise) maintains a strict transparency mandate. Payout requests submitted without a corresponding proof of delivery will be flagged as ineligible for payout. This verification data is retained solely for compliance auditing and annual tax filing requirements.

Third-Party Disclosure

We use existing, enterprise tools to optimize OpEx and for maximize reliability. Your data is securely routed through ImgBB (Identity Verification) and Hubtel (Financial Settlements). These providers are industry-standard and maintain their own rigorous security protocols.

Questions about your data?

Our Compliance Team is ready to assist you with DPA-related inquiries.

Contact Compliance