ACT 843 DATA PROTECTION

Privacy Policy

Effective Date: October 2026 • Ghana Data Protection Act, 2012 (Act 843)

1. Data Collection & Purpose

PropAfrika collects personal data strictly necessary to operate Ghana's verified property marketplace in compliance with the Ghana Data Protection Act, 2012 (Act 843):

• Account & Profile Information: Full name, email address, Ghana phone number (`+233`), WhatsApp number, account role, and agency name.
• Property & Verification Records: Property photos, descriptions, GhanaPost GPS digital addresses, and confidential title deeds (Indentures, Land Title Certificates, and Cadastral Site Plans).
• Buyer Inquiries: Contact details and inquiry messages submitted to property owners or the PropAfrika Advisory Desk.

2. Image Sanitization & Confidential Document Vault

• EXIF & GPS Metadata Stripping: All uploaded property photos are automatically re-encoded into WebP with all EXIF camera and GPS metadata stripped before public storage.
• Private Title Document Vault: Confidential legal documents (Indentures and Site Plans) are stored in an encrypted, non-public Cloudflare R2 vault. They are never publicly accessible and can only be viewed by 2FA-authenticated compliance administrators via 5-minute signed URLs, with every access logged in an immutable audit trail.

3. Your Rights Under Act 843 (Export & Right to Erasure)

Registered users have direct self-service controls in their Owner Portal (Account Settings):

• Data Subject Access Request (DSAR Export): Download a complete machine-readable JSON archive of your profile, listings, and audit history at any time (`GET /api/profile/export`).
• Right to Erasure (Account Deletion): Permanently delete your account, profile PII, active sessions, and listings (`DELETE /api/profile/account`).

4. Contact Data Protection Officer

To exercise your data protection rights or reach our Data Protection Officer, visit the PropAfrika Contact Desk.