Privacy Notice

Amanfopa Enterprise, operator of Horizone ("we", "us", "our"), provides cloud-based, all-in-one operations software for community lenders, savings cooperatives, microfinance teams, schools, churches, clinics, pharmacies and general businesses. We act as data controller for information about workspace administrators, staff users and website visitors. For the records your organisation enters into the platform — customers, members, students, parents, patients and clients — your organisation is the controller and we act as a processor on its behalf.

• Account information: name, email, phone, role, workspace and organisation type.
• Login credentials: hashed passwords, session tokens, MFA factors.
• Operational data: records your organisation enters into the platform, which may include accounts, transactions, loans, deposits and KYC data (banking); students, parents, attendance, fees and results (schools); members, contributions and pledges (churches); patients, visits and prescriptions (clinics and pharmacies); and customers, invoices and stock (businesses).
• Photos: optional profile photos such as student or member photos, uploaded by your organisation or its members and stored privately.
• Support messages: emails, in-app problem reports and tickets you send us.
• Usage and telemetry: pages viewed, features used, error logs.
• Device identifiers and IP address: browser, device, IP, approximate location.
• Billing data: handled directly by our payments providers, Paddle and Hubtel (see Section 5). We never store full card numbers or mobile-money PINs.

We process personal data on the following legal bases:

• Performance of a contract — to create and operate your account, deliver the platform, process subscriptions and provide support.
• Legitimate interests — to secure the service, prevent fraud and abuse, monitor performance, improve the product and send service-related communications.
• Consent — for optional marketing emails and non-essential cookies; you can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, banking, anti-money-laundering and other applicable laws.

• To operate, maintain, secure and improve the platform.
• To authenticate users and protect against fraud and abuse.
• To provide customer support and respond to requests.
• To send service announcements and (with consent) marketing.
• To comply with legal, regulatory and audit obligations.

We do not sell personal information. We share data only with the following categories of recipients:

• Paddle.com Market Limited ("Paddle") — our online reseller and Merchant of Record for card payments. Paddle handles checkout, payment processing, billing, subscription management, tax compliance, invoicing and customer payment inquiries for card orders. When you pay by card, your billing data (name, email, billing address, payment method details) is collected and processed by Paddle under Paddle's own privacy notice (paddle.com/legal/privacy).
• Hubtel Limited ("Hubtel") — our payment processor for mobile money, card, wallet and GhQR subscription payments in Ghana. When you pay with mobile money, your phone number and network are sent to Hubtel to deliver the approval prompt to your phone and complete the payment.
• SMS providers — to deliver the text messages your organisation sends through the platform.
• Hosting and infrastructure providers — to run the platform securely.
• Email and communications providers — to send transactional and support emails.
• Analytics and error-monitoring providers — to understand usage and fix issues.
• Mobile money and bank integration partners — to execute customer-initiated transactions.
• Professional advisers — legal, accounting and audit.
• Authorities — where required by law or to protect our rights.

We retain information for as long as your organisation maintains an active workspace and for the additional period required by applicable banking, tax, education, health and audit regulations. When data is no longer required we delete or anonymize it.

Subject to applicable law, you may request access, correction, export, restriction, objection or deletion of your personal information, and withdraw consent where processing is based on consent. To exercise these rights, email privacy@horizoneoperations.business. For customer, member, student, parent, patient or client records held by the organisation you deal with, please contact that organisation directly — it is the controller of that data. You also have the right to lodge a complaint with your local data protection authority.

We apply appropriate technical and organisational measures including TLS in transit, encryption at rest, role-based access control, audit logging, least-privilege administration and regular security reviews.

We use essential cookies for sign-in, security and session management, and a small set of analytics cookies to understand usage and improve the product. You can control non-essential cookies in your browser settings.

We also use Google Ads measurement cookies to understand how visitors find Horizone and to measure when advertising leads to a sign-up. This sends page-visit and sign-up events to Google for ad measurement. In regions that require consent (the EEA, UK, Switzerland and Quebec), these cookies and events are blocked until you accept the cookie banner, and you can change your choice at any time by clearing your site data. See how Google uses information from sites that use its services.

Some of our service providers (including Paddle) are located outside your country. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions, and we comply with applicable local data protection laws, including Ghana's Data Protection Act, 2012 (Act 843).

We may update this notice as the platform evolves. Material changes will be communicated through the app or by email to workspace administrators.

Amanfopa Enterprise, operator of Horizone — email privacy@horizoneoperations.business for any privacy questions or to exercise your rights.