Privacy Policy

Welcome to LetCatch, a comprehensive digital platform owned and operated by Obuaba LTD, a company duly incorporated under the Companies Act, 2019 (Act 992) of the Republic of Ghana. Obuaba LTD operates LetCatch as an all-in-one digital ecosystem providing social communication, marketplace services, live streaming, music, digital learning, financial tools, food delivery, talent booking, voting, and many other services to users around the globe.

This Privacy Policy ("Policy") describes how Obuaba LTD ("we", "us", "our") collects, uses, stores, shares, and protects your personal information when you access or use the LetCatch platform — including the website at letcatch.com, our mobile applications, and any associated services (collectively, the "Platform").

By registering for, accessing, or using the Platform in any way, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to any part of this Policy, you must discontinue use of the Platform immediately. This Policy forms part of our Terms and Conditions and should be read alongside those terms.

We are committed to handling your data lawfully, transparently, and responsibly. Our practices are aligned with the Data Protection Act, 2012 (Act 843) of Ghana, and we aim to meet or exceed internationally recognised standards, including the principles reflected in the European Union General Data Protection Regulation (GDPR) as a benchmark of best-practice data governance.

If you have any questions about this Policy or our data practices, please contact our Privacy Team at info@letcatch.com.

We collect information about you in three primary ways: information you provide to us directly, information we collect automatically as you use the Platform, and information we may receive from third parties. The specific information collected depends on the services you use and the features you enable.

Information You Provide Directly:

• Full name, username, and profile photograph
• Email address and phone number used for registration and communication
• Date of birth and gender (used for age verification and personalised content)
• Government-issued identity documents where required for account verification or financial transactions
• Payment and billing information, including mobile money wallet details and bank card data (processed securely by certified payment processors)
• Content you post, share, upload, or transmit — including text, photos, videos, audio files, documents, and live streams
• Messages and communications sent through the Platform (including private chats, group conversations, and broadcasts)
• Professional and business details provided when registering as a service provider, merchant, artist, employer, tourism operator, or other professional
• Feedback, reviews, ratings, and responses you submit about other users, products, or services
• Survey responses and voluntary information provided when participating in research or promotions

Information Collected Automatically:

• Device identifiers (including IMEI, device model, operating system, and hardware version)
• Browser type and version, IP address, and internet service provider
• Precise and approximate geolocation data (when permitted by your device settings)
• Log data including access timestamps, pages viewed, features used, search queries, and click patterns
• Cookies, pixel tags, session tokens, and similar tracking technologies (see Section 5 for details)
• Transaction data including amounts, counterparties, timestamps, and outcomes for all financial activity on the Platform
• Streaming, playback, and engagement data (songs played, videos watched, duration, replays)
• Performance and crash analytics used to diagnose and improve the Platform

Information From Third Parties:

• Social sign-on data if you connect a third-party account (e.g., Google or Facebook) to LetCatch
• Identity and fraud-check data from third-party verification partners
• Payment outcome and status data from payment gateways and mobile money providers
• Publicly available information used to verify professional credentials or business registration

Obuoba LTD processes your personal information only for specified, explicit, and legitimate purposes. We do not use your data in any manner incompatible with the purposes for which it was collected. Our primary purposes and the legal basis for each are set out below.

Account Management and Service Delivery:

• Creating, verifying, and maintaining your LetCatch account
• Authenticating your identity when you log in or perform sensitive operations
• Processing orders, payments, bookings, subscriptions, and financial transactions
• Facilitating communication between users, service providers, and merchants
• Delivering content and features matched to the services you have registered for

Platform Personalisation:

• Tailoring your feed, music recommendations, course suggestions, and marketplace listings to your preferences and activity history
• Serving contextually relevant content, notifications, and in-platform advertisements
• Enabling algorithm-driven discovery features so you find content, people, and services relevant to you

Safety, Security, and Compliance:

• Detecting, preventing, and investigating fraud, abuse, unauthorised access, and other security incidents
• Verifying the identity of users and businesses transacting on the Platform
• Complying with applicable Ghanaian law, court orders, and lawful requests from governmental or regulatory authorities
• Enforcing our Terms and Conditions and Community Guidelines
• Preserving the integrity of votes, elections, competitions, and other community-governed activities

Platform Improvement and Research:

• Analysing usage patterns to fix bugs, improve performance, and develop new features
• Conducting internal research and analysis to understand how our services are used
• Training internal machine learning models for moderation, recommendations, and fraud detection (using de-identified or aggregated data wherever possible)

Communications:

• Sending you transactional notifications (receipts, confirmations, alerts) via email, SMS, or in-app notification
• Notifying you of important Platform changes, policy updates, and security advisories
• With your explicit consent, sending you marketing communications, offers, and product updates (you may withdraw this consent at any time)

Obuaba LTD treats the security of your personal information as a fundamental obligation. We implement a multi-layered security programme encompassing technical controls, operational procedures, and organisational safeguards.

Our technical security measures include:

• TLS 1.2/1.3 encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including payment credentials and identity documents
• Bcrypt hashing with salt for all account passwords — we never store passwords in plain text
• HTTP Strict Transport Security (HSTS), Content Security Policy (CSP), and anti-clickjacking headers on all web interfaces
• Multi-factor authentication (MFA) support for account login and high-value transactions
• Role-based access controls limiting internal system access to authorised personnel on a need-to-know basis
• Automated intrusion detection, anomaly monitoring, and 24/7 alerting on our infrastructure
• Regular penetration testing and third-party vulnerability assessments
• Automated and manual review processes for harmful content, abusive accounts, and fraudulent activity

Our operational measures include:

• Staff trained on data protection obligations prior to accessing any personal data
• Strict data handling policies limiting the copying, transfer, or export of personal information
• Vendor due diligence requiring all third-party processors to meet equivalent security standards contractually
• Incident response procedures ensuring we notify affected users and relevant authorities within legally required timeframes in the event of a confirmed data breach

While we apply rigorous security controls, no system connected to the internet can guarantee absolute security. You also play a critical role in protecting your account: use a strong, unique password, enable multi-factor authentication, keep your contact information up to date, and notify us immediately at info@letcatch.com if you suspect unauthorised access to your account.

We use cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the Platform, remember your preferences, protect against fraud, and understand how our services are used. This section explains what these technologies are, how we use them, and how you can control them.

A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your device on subsequent visits, maintain your session, and customise your experience.

The categories of cookies we use are:

• Strictly Necessary Cookies — Essential for the Platform to function. These include authentication tokens, CSRF security tokens, session management cookies, and shopping cart data. You cannot opt out of these cookies as they are required for core services.
• Preference Cookies — Used to remember your settings, such as language selection, notification preferences, dark/light mode, and recently viewed content. Disabling these may affect your experience.
• Analytics Cookies — Used to understand how users navigate the Platform, which features are most used, and where errors occur. We use aggregated, anonymised analytics data to prioritise improvements. Where possible, analytics data is de-identified before processing.
• Marketing and Advertising Cookies — Used to serve relevant in-platform promotions and, with your consent, targeted advertising. These cookies may involve third-party advertising partners who operate under their own privacy policies.
• Security and Fraud Prevention Cookies — Used to detect suspicious login activity, prevent automated abuse (bots/scraping), and protect the integrity of transactions and votes.

You can manage your cookie preferences through your LetCatch account settings under Privacy & Security. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from using authenticated areas of the Platform. For mobile apps, you can manage certain tracking through your device operating system settings (iOS: Settings → Privacy; Android: Settings → Privacy).

Obuaba LTD does not sell your personal information to third parties. We will never rent, trade, or transfer your identifiable personal data to any outside party for their own marketing purposes without your explicit consent. However, operating the Platform requires us to share certain information with trusted service providers and in certain lawful circumstances.

Categories of third parties we share data with:

• Payment Processors — Mobile money providers (MTN Mobile Money, Telecel Cash, AirtelTigo Money) and international payment gateways process transaction data under strict contractual obligations and their own PCI-DSS compliance.

. Physical and logical security of infrastructure is governed by their published compliance certifications.

• Communication Service Providers — SMS gateways, email delivery services, and push notification platforms receive contact details and message content only to the extent necessary to deliver communications you have requested.
• Identity Verification Partners — Where required by law or our financial services compliance obligations, we share identity documents with licensed KYC/AML verification providers.
• Analytics and Performance Monitoring — Aggregated, anonymised usage data may be shared with analytics platforms to help us improve the Platform. We configure these services to minimise collection of personal identifiers.
• Live Streaming and Media Processing — Video and audio streams are processed by content delivery networks (CDNs) to ensure reliable playback. Stream content is NOT retained by CDN providers beyond the live session unless explicitly saved by the broadcaster.
• Law Enforcement and Regulatory Authorities — We will disclose personal information where required to do so by Ghanaian law, court order, regulatory directive, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of Obuaba LTD, our users, or the public.
• Business Transfers — In the event of a merger, acquisition, restructuring, or sale of all or part of Obuaba LTD, personal data may be transferred as part of that transaction. We will notify affected users via the Platform and email before data is transferred and subject to a materially different privacy policy.

All third-party processors we engage are bound by contractual Data Processing Agreements requiring them to process personal data only on our documented instructions, maintain appropriate security standards, and not sub-process data without our authorisation.

As a user of the LetCatch Platform, you have clearly defined rights over your personal information under the Data Protection Act, 2012 (Act 843) of Ghana and in line with internationally recognised data protection principles. We are committed to upholding these rights promptly and without imposing unjustified barriers.

Your rights include:

• Right to Access — You may request a copy of the personal information we hold about you at any time. We will provide your data in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification — If any information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Many details can be updated directly in your Account Settings.
• Right to Erasure ("Right to be Forgotten") — You may request that we delete your personal information where we have no overriding legal obligation to retain it. Note that certain data (e.g., transaction records, compliance-required KYC documents) may be retained for the legally mandated period even after account deletion.
• Right to Restrict Processing — In certain circumstances (e.g., where you contest the accuracy of data, or object to our processing) you may ask us to pause processing your data while the matter is resolved.
• Right to Data Portability — You may request that we provide your data to you or transfer it directly to another service provider in a machine-readable format, where technically feasible.
• Right to Object — You may object to processing based on our legitimate interests, and you always have the absolute right to opt out of direct marketing communications.
• Right to Withdraw Consent — Where we rely on your consent as the lawful basis for processing, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint — If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Data Protection Commission of Ghana (www.dataprotection.org.gh), or any competent supervisory authority in your country of residence.
• Right Regarding Automated Decision-Making — If any significant decision affecting you is made solely by automated means (e.g., account suspension, loan eligibility), you have the right to request human review of that decision and to contest its outcome.

To exercise any of the above rights, submit a written request to privacy@letcatch.com with the subject line "Data Rights Request — [Your Full Name]". We may need to verify your identity before processing your request. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days. Complex requests may take up to 60 days; we will notify you if this applies.

If you have questions about this privacy policy or how we handle your personal data, please reach out through any of the following: