Legal
Privacy Policy
Effective date: 1 April 2026 — Baobab Ads (operated by Advert Solutions Ghana Ltd., registered in the Republic of Ghana)
This policy explains what personal data we collect when you use the Baobab Ads platform (advertsgh.com), why we collect it, and the rights you have over it. We do not sell your personal data.
1. Who We Are
Baobab Ads is a multi-tenant software-as-a-service platform for digital out-of-home (DOOH) advertising, connecting advertisers, venue owners, and screen operators across African markets. When we say “Baobab Ads”, “we”, “us”, or “our” in this policy, we mean Advert Solutions Ghana Ltd. as the data controller.
Contact us at: hello@advertsgh.com
2. Data We Collect
Account and identity data
When you register, we collect your name, email address, company name, and role (advertiser or media owner). Authentication is managed by Clerk, Inc. — your password is never stored by Baobab Ads directly.
Campaign and creative data
Advertisers upload campaign assets (images, video, audio), targeting rules, scheduling configurations, and budget information. This data is stored in our databases and object storage on your behalf to deliver your campaigns.
Device and venue data
Media owners register physical screen devices and venues, including location names, operating hours, screen specifications, and device identifiers. Devices authenticate via API keys, not personal accounts.
Usage and telemetry data
We collect proof-of-play events, impression counts, uptime signals, and error logs from registered screens. We also collect standard web access logs (IP address, browser type, pages visited) when you use the web portal.
Communications
If you contact us by email or through the platform’s contact form, we retain the content of that communication to respond to you and improve the service.
3. How We Use Your Data
- Providing, operating, and improving the Baobab Ads platform.
- Authenticating users and enforcing multi-tenant data isolation.
- Delivering and scheduling ad campaigns to registered screens.
- Generating proof-of-play reports and performance analytics.
- Sending service-related notifications (e.g. campaign status, billing updates).
- Detecting and preventing fraud, abuse, or policy violations.
- Complying with legal obligations under applicable law.
We do not use your data for behavioural advertising, nor do we sell or rent your data to third parties.
4. Data Processors and Subprocessors
We share data only with the following infrastructure providers, under data processing agreements, strictly to operate the service:
| Provider | Purpose | Data processed |
|---|---|---|
| Clerk, Inc. | Authentication & identity | Email, name, session tokens |
| Cloudflare, Inc. | Edge delivery, hosting, object storage (R2) | All data in transit and at rest |
| Neon, Inc. | Primary database (PostgreSQL) | Account, campaign, billing data |
| Turso (ChiselStrike, Inc.) | Edge database (SQLite replicas) | Device, playlist, telemetry data |
5. Data Retention
- Account data — retained for the lifetime of your account, plus 90 days after deletion to allow dispute resolution.
- Campaign and creative data — retained for 24 months after campaign end, then deleted or anonymised.
- Raw telemetry and proof-of-play events — 7 days at the edge (Turso), then aggregated into 24-month summary records in our primary database.
- Web access logs — 30 days.
6. International Data Transfers
Our infrastructure providers operate globally, including within the United States and the European Union. Where personal data is transferred outside Ghana, we rely on standard contractual clauses or equivalent safeguards to ensure an adequate level of protection consistent with Ghana’s Data Protection Act, 2012 (Act 843).
7. Your Rights
Subject to applicable law, you have the right to access, correct, export, or request deletion of your personal data. You may also object to or restrict certain processing. To exercise any of these rights, contact us at hello@advertsgh.com. We will respond within 30 days.
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Data Protection Commission of Ghana.
8. Security
All data is encrypted in transit (TLS 1.3) and at rest. Access to production systems requires multi-factor authentication and is restricted to authorised personnel. We conduct periodic security reviews and apply the principle of least privilege across our infrastructure.
9. Children's Privacy
The Baobab Ads platform is intended for business users aged 18 and over. We do not knowingly collect data from children. If you believe a child’s data has been submitted, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be communicated by email or an in-app notice at least 14 days before taking effect. Continued use of the platform after that date constitutes acceptance of the revised policy.