Privacy Policy

Last updated: August 2026

This is a draft policy prepared for Royalhouse Students Associations (ROSA) and has not been reviewed by a lawyer. It should be reviewed by qualified legal counsel before being relied upon as a binding legal document.

1. Who We Are

ROSA Platform ("ROSA", "we", "us") is the membership and tithe-management system used by Royalhouse Students Associations, a ministry of Royalhouse Chapel International, across its campus fellowships in Ghana. The platform is built and maintained by Asterixify Innovations on ROSA's behalf.

2. Information We Collect

When you register, use, or are added to ROSA by a campus officer, we may collect:

Identity information — full name, email address, and phone number.
Membership information — your campus, university, role, campus position, gender, member type, year group, course of study, and year joined.
Financial records — tithe payments, pledges, and giving history, including amount, date, and payment method. We do not store your card or mobile money PIN — those are handled directly by our payment processor.
Account information — your password (stored in encrypted/hashed form, never in plain text), and, if you enable it, two-factor authentication details.
Usage information — login timestamps, session activity, and IP address, used for account security and to detect unauthorised access.
Documents you upload — such as report attachments, stored via our file storage provider.

3. How We Use Your Information

To create and manage your membership record and campus affiliation.
To record, receipt, and report on tithes and pledges.
To send you confirmations, receipts, reminders, and administrative notices by email and SMS.
To generate statements and annual giving certificates on request.
To allow authorised campus officers and administrators to view and manage records relevant to their role and campus, for legitimate ministry and administrative purposes.
To maintain the security, integrity, and proper functioning of the platform.

4. Third-Party Service Providers

We rely on the following service providers to operate ROSA. Each processes data under its own privacy practices:

Paystack — processes digital tithe payments (card and mobile money). Paystack receives your payment details directly; ROSA never sees or stores full card numbers.
Resend — delivers transactional email (receipts, verification, notifications).
Arkesel — delivers SMS notifications and reminders.
Cloudinary — stores uploaded files and images.
Neon — hosts our database.
Vercel — hosts the ROSA application itself.

5. How We Protect Your Information

Access to ROSA is role-based: campus officers can only see data for their own campus, and administrators are required to use two-factor authentication. All connections to the platform are encrypted in transit. We periodically review and test these access controls.

6. Data Retention

We retain your information for as long as your membership or account is active, and afterward for as long as reasonably necessary for financial recordkeeping, dispute resolution, and legitimate administrative purposes.

7. Your Rights

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to access, correct, or request deletion of your personal data, subject to our legitimate need to retain financial records. To exercise these rights, contact your campus secretariat or ROSA's national administration.

8. Cookies

ROSA uses only the cookies necessary to keep you securely signed in. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

ROSA is intended for university students and campus officials. It is not directed at children, and we do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact Us

Questions about this policy or your data can be directed to your campus secretariat, or to ROSA's national administration through the contact details published on the platform.