Privacy Policy

1. Introduction

This Privacy Policy describes how Generation Tech Enterprise, operating as GenPlatform ("we," "us," or "our"), collects, uses, stores, and protects your personal information when you access or use our platform and subsidiary products, including:

• GenGuard — an AI-powered security bot that processes phone numbers and transaction receipts for fraud detection and risk analysis.
• GenNote — an AI productivity tool that records audio and transcribes voice notes, meeting recordings, and dictations.
• GenSchool — an institutional management system that handles student academic records, attendance, fee management, and parent communication.

By using any GenPlatform service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

2. Jurisdiction and Legal Compliance

Generation Tech Enterprise is incorporated and operates from Kintampo, Ghana. This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Ghana, including but not limited to:

• The Data Protection Act, 2012 (Act 843) of Ghana, which regulates the processing of personal data and establishes the Data Protection Commission as the supervisory authority.
• The Electronic Transactions Act, 2008 (Act 772) of Ghana.

Where our services are used by individuals or institutions outside Ghana, we also endeavor to comply with applicable international data protection standards, including the principles outlined in the General Data Protection Regulation (GDPR) where users are located in the European Economic Area, and the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention).

3. Data We Collect

We collect different categories of data depending on which GenPlatform product you use. Below is a comprehensive breakdown:

3.1 Account Information (All Products)

When you register for any GenPlatform product, we collect your name, email address, phone number, organization name (where applicable), and account credentials. This data is necessary for account creation, authentication, and communication.

3.2 Voice Data (GenNote)

GenNote collects and processes audio recordings that you voluntarily create using our recording features. This includes raw audio files, AI-generated transcriptions, meeting summaries, and any metadata associated with the recording such as duration, timestamp, and device information. Voice data is processed by artificial intelligence models for the sole purpose of providing transcription and summarization services. Audio files are encrypted at rest and in transit using AES-256 encryption. You may delete your voice recordings at any time through the GenNote application, and deletion is permanent and irreversible.

3.3 Institutional Data (GenSchool)

GenSchool collects and processes data provided by educational institutions, including but not limited to: student personal information (names, dates of birth, guardian contact details), academic records (grades, report cards, assessment scores), attendance records, financial data (fee payments, outstanding balances, payment histories), and staff employment records. This data is collected on behalf of the educational institution, which acts as the Data Controller under the Data Protection Act, 2012 (Act 843). GenPlatform acts as the Data Processor. Institutional data is stored in isolated, tenant-specific databases with strict access controls.

3.4 Transaction Metadata (GenGuard)

GenGuard collects and processes phone numbers, carrier information, VoIP detection results, risk scores, community fraud flags, and transaction receipt data submitted by users for verification purposes. GenGuard does not collect or store call content, SMS content, or personal communications. The data processed is limited to metadata necessary for fraud detection and risk analysis. Phone numbers submitted for verification are hashed and compared against community-reported fraud databases. We retain verification results for a period of ninety (90) days for audit purposes, after which they are automatically purged.

3.5 Usage and Technical Data (All Products)

We automatically collect technical information when you use our services, including IP addresses, browser type, operating system, device identifiers, pages visited, features used, timestamps, and error logs. This data is collected through server logs and, where applicable, first-party analytics tools. We do not use third-party tracking pixels or advertising cookies.

4. How We Use Your Data

We use the data we collect for the following purposes:

• To provide, operate, and maintain our services, including transcription, fraud detection, and institutional management features.
• To authenticate users and manage account security, including two-factor authentication where enabled.
• To process payments and generate invoices through our third-party payment processor, Paystack.
• To improve and optimize our AI models and service quality. Where data is used for model improvement, it is anonymized and aggregated. Individual voice recordings, academic records, or personal data are never used to train AI models without explicit, opt-in consent.
• To communicate with you regarding service updates, security alerts, and transactional notifications.
• To comply with legal obligations under the Data Protection Act, 2012 (Act 843) and respond to lawful requests from regulatory authorities.
• To detect, prevent, and investigate security incidents, fraud, or violations of our Terms of Service.

5. Artificial Intelligence and Automated Processing

Several GenPlatform products use artificial intelligence and machine learning models to deliver core functionality:

• GenNote uses AI models to convert audio recordings into text transcriptions, generate meeting summaries, and extract key action items.
• GenGuard uses AI models to analyze phone number metadata, detect VoIP usage patterns, calculate risk scores, and cross-reference community fraud databases.
• GenSchool may use automated processing to generate academic analytics, attendance summaries, and financial reports for institutional administrators.

6. Data Sharing and Third Parties

We may share your data only in the following limited circumstances:

• Payment Processing: We share necessary billing information with Paystack, our authorized payment processor, for the purpose of processing subscription payments and fees. Paystack's handling of your data is governed by their own privacy policy.
• Cloud Infrastructure: Your data is stored on secure cloud infrastructure providers who act as sub-processors. These providers are contractually bound to maintain the confidentiality and security of your data.
• Legal Obligations: We may disclose data when required by law, court order, or regulatory direction from the Data Protection Commission of Ghana or other competent authority.
• With Your Consent: We may share data with third parties when you have provided explicit, informed consent for a specific purpose.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit.
• Tenant-isolated database architecture for GenSchool institutional data.
• Role-based access controls (RBAC) limiting internal access to data on a strict need-to-know basis.
• Regular security audits and penetration testing.
• Automated threat monitoring and incident response procedures.
• Secure backup and disaster recovery systems with geographically distributed redundancy.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Under the Data Protection Act, 2012 (Act 843) of Ghana and applicable international frameworks, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You may request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for certain purposes, including automated decision-making.

To exercise any of these rights, please contact us at admin@genplatform.io. We will respond to your request within thirty (30) days.

10. Children's Privacy

GenNote and GenGuard are not directed at children under the age of 18. We do not knowingly collect personal data from children through these products. If we discover that we have inadvertently collected data from a child without proper parental or guardian consent, we will delete it immediately.

GenSchool, by nature of its function as a school management system, processes data of minors on behalf of educational institutions. In such cases, the educational institution is responsible for obtaining all necessary consents from parents or guardians in accordance with the Data Protection Act, 2012 (Act 843). GenPlatform processes this data solely as a Data Processor acting on the instructions of the institutional Data Controller.

11. Cookies and Tracking

GenPlatform uses only strictly necessary cookies for authentication, session management, and security. We do not use advertising cookies, tracking pixels, or third-party analytics services that profile users for marketing purposes. You may configure your browser to reject cookies, but doing so may limit your ability to use certain features of our services.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you via email or through a prominent notice within our services at least fourteen (14) days before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You may also file a complaint with the Data Protection Commission of Ghana if you believe your data protection rights have been violated.