Privacy Policy

1. Who is responsible

Plotdomain (plotdomain.com) is operated by Franklin Adusei, trading as Plotdomain ("Plotdomain", "we", "us"). Business registration: Not yet registered. Location: Ghana (online service, no public office).

Data Protection Commission of Ghana registration: Not yet registered. Questions about your data: franklinadusei3@gmail.com.

2. What we collect

• Account details: name, email address, phone number, password (stored only in scrambled form).
• Registrant details for each domain: full name, organisation, email, phone, country, city, address and postal code. Registries and ICANN require these.
• Order and payment records: what you bought, amounts, dates, payment references and status. Card and Mobile Money details are handled by Hubtel and never reach us.
• Security records: sign-in times and device information, used to protect your account.
• Messages: support requests and the emails we send you about your account and domains.
• Technical data needed to run the site, such as IP address and basic request logs.

2a. Google user data (Sign in with Google)

Plotdomain offers Sign in with Google (Google OAuth). This section explains exactly what Google user data we access, how we use it, where it is stored, who can see it and how you can have it deleted.

• Data we access: only your Google account name, email address and profile picture, through the basic openid, email and profile permissions. We do not request access to Gmail, Google Drive, Google Calendar, contacts or any other Google service or data.
• How we use it: your email address creates and identifies your account and is where we send receipts, domain notices and security alerts; your name is used to address you and, if you choose, as registrant contact details; your picture is shown only in your own account.
• Where it is stored: in our database hosted by Supabase, protected by access controls so that only you and authorised Plotdomain staff handling support can see it.
• Who we share it with: no one for their own purposes. Your name and email are passed to a domain registrar and registry only when you register a domain, because registration requires registrant details (see section 4). We do not sell Google user data, use it for advertising or profiling, or allow humans to read it except for security, support you request, or legal obligations.
• How long we keep it: for as long as your account exists. When you delete your account, we delete this data, except records we must keep by law, such as payment and order records.
• How to delete it or revoke access: email franklinadusei3@gmail.com and we will delete your account and the Google-derived data we hold. You can also remove Plotdomain's access at any time in your Google Account under Security, then Third-party apps and services.
• Google API Services User Data Policy: Plotdomain's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Why we use it

• To create your account, take payment and register, renew or transfer your domains (this is the contract between us).
• To meet legal duties, such as keeping financial records and responding to lawful requests.
• To keep the service secure and prevent fraud and abuse.
• To email you receipts, status updates, expiry reminders and security alerts.

4. Who we share it with

We share only what is needed, with:

• our registrar partner and the relevant registry, who must receive your registrant details to register a domain. Parts of this data can appear in public domain records (RDDS/WHOIS), although many registries now redact personal fields;
• Hubtel, which processes your payment under its own privacy policy;
• Solisend, which delivers our emails;
• infrastructure providers that host our systems (Supabase for the database and sign-in, Cloudflare for the website);
• authorities, when the law requires it.

5. Where data is processed

Some of these providers process data outside Ghana (for example in the United Kingdom, the European Union and the United States). We use providers with appropriate safeguards and share only what is needed.

6. How long we keep it

We keep account and order records while your account is active and for as long as the law requires afterwards (financial records are generally kept for several years). When data is no longer needed we delete or anonymise it.

7. How we protect it

Data is encrypted in transit. Access to personal data is limited by role, and sensitive actions by our staff are logged. No system is perfectly secure; if there is a breach affecting you we will tell you and the authorities as the law requires.

8. Cookies

We use only the browser storage needed to keep you signed in and the site working. We do not use advertising cookies or sell your data.

9. Your rights

You can ask to see the personal data we hold about you, correct it, or ask us to delete it where the law allows. You can also object to certain uses and complain to the Data Protection Commission. Write to franklinadusei3@gmail.com; we will answer within a reasonable time. Some data (such as registrant details for a live domain) must be kept while the domain is registered.

10. Children

Our service is not for anyone under 18, and we do not knowingly collect their data.

11. Changes

If we change this policy we will post the new version here with the date, and email you about important changes.