Privacy Notice

How Vistroy collects and uses information about borrowers, under Ghana's Data Protection Act, 2012 (Act 843).

What we hold about you

• Your Ghana Card number and name.
• Phone numbers (SIM cards) that lenders have seen with your Ghana Card, and the network of each number.
• Loans that lenders report to us: amount, monthly repayment, date paid out and status (active, late, repaid, defaulted or settled).
• Summaries of mobile money statements you agreed to share with a lender: totals, monthly averages and warning signs. We don't keep the statement file.
• Device IDs that a lender's app sent with your application.
• Your permissions (consents), your requests and disputes, and a record of every lender that checked your file.

Where it comes from

From lenders you applied to, from you (when you log in, approve a request or report a mistake), and from mobile money statements you chose to share.

Why we use it

• To help lenders decide if they can safely lend to you, and how much you can afford to repay.
• To spot fraud, such as one Ghana Card borrowing on many SIM cards at once.
• To show you your own credit file and let you correct it.

Your permission comes first

A lender can only check your file after you agree: by giving them an SMS code, or by approving their request on the Vistroy USSD or WhatsApp menu. Each permission is for one lender, one purpose and a limited time. You can withdraw it at any time, and the lender can no longer check your file.

Who can see it

• Lenders you gave permission to, for the time you allowed.
• The Vistroy team, to run the service and answer your requests.
• Regulators or courts, when the law requires it.

We don't sell your data and we don't use it for advertising.

How long we keep it

Loan records are kept while they are needed for fair and complete credit checks, because a file with missing loans would be misleading for you and for lenders. Statement summaries and device records are deleted when you ask. Permissions end on their end date or when you withdraw them.

Your rights

• Get a copy of everything we hold about you.
• Ask us to fix wrong information, or challenge a specific loan.
• Ask us to delete your data. Some loan records are kept, as explained above.
• Ask us to stop using your data, which withdraws all permissions.

We answer every request within 30 days.

How we protect it

Lender access needs a personal staff login or a secret key. Every check is recorded with who did it. Borrower logins use one-time SMS codes. Reports are digitally signed so they can't be changed without it being noticed.

Complaints

Contact us first using the details above. If you are not happy with our answer, you can complain to the Data Protection Commission of Ghana at dataprotection.org.gh.