Privacy Policy

Passmark ("we", "us") provides compliance-intelligence tools and a trust benchmark for exporters. This policy explains what personal data we collect, why, and your rights. We are the data controller. We are based in Accra, Ghana, and aim to comply with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the EU General Data Protection Regulation (GDPR).

What we collect

• Account information — your name and email, via our authentication provider when you sign up.
• Business & profile information — organisation details, commodities, markets and other information you enter to build your profile and score.
• Documents you upload — certificates, permits and trade documents you choose to store in your Document Vault.
• Usage & technical data — how you use the product, plus technical data such as IP address and device/browser, for analytics, security and reliability.

How we use your data

• To provide the service — run compliance checks, store documents, and calculate your Passmark Score.
• To operate your public trust profile at the visibility level you choose (private, shareable-by-link, or listed in the directory).
• To improve the product, communicate with you, and keep the service secure.

AI processing

To extract information from documents and answer your questions, content you submit may be processed by our AI provider on our behalf. We do not sell your data, and we do not publish anything you have not chosen to make public.

Service providers (sub-processors)

We use trusted providers to run Passmark, each only for the purpose shown: authentication (user sign-in), object storage (your documents), an AI provider (document extraction and assistant), product analytics, error monitoring, application hosting, transactional email, and — for future paid plans — a payments processor. Each processes data on our instructions.

Legal bases (GDPR, where applicable)

We process personal data to perform our contract with you (providing the service), on the basis of your consent (e.g. making your profile public), and for our legitimate interests (security, improving the product), balanced against your rights.

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal data, and object to or restrict certain processing. You control your profile's visibility at any time in the app. To exercise a right, contact us at privacy@getpassmark.com.

Retention

We keep your data for as long as your account is active and as needed to provide the service, then for any period required by law. You can ask us to delete your account and associated data.

Security & international transfers

We protect your data with encryption in transit and at rest, signed time-limited document links, and per-organisation isolation — see Security & trust. Some providers may process data outside Ghana; we take steps for such transfers to be lawfully safeguarded.

Children

Passmark is for businesses and is not directed at anyone under 18.

Changes & contact

We may update this policy and will change the date above when we do. Questions: privacy@getpassmark.com.