Privacy Policy

Last updated: 30 October 2026  ·  Effective date: 30 October 2026

1. Who we are

Raziela Business Solutions, trading as GorroBoys (“GorroBoys”, “we”, “us”, or “our”), operates gorroboys.com and hub.gorroboys.com (the “Services”). We are a digital product studio based in Ghana, West Africa, building AI-powered business automation products. Raziela Business Solutions is the data controller for the personal information described in this policy.

This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Services. By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide to us

• Account information: When you create an account, we collect your name, email address, business name, phone number, and password.
• Payment information: Billing details are processed by our payment providers (Stripe, PayPal). We do not store full card numbers on our servers.
• Contact form submissions: Name, email, phone number, and message content when you contact us.
• WhatsApp Business information: Your WhatsApp Business number and Meta Business account details when you connect them to our platform.

2.2 Information collected automatically

• Usage data: Pages visited, features used, session duration, and clicks within our dashboard.
• Device and browser information: Browser type, operating system, IP address, and device identifiers.
• Conversation data: WhatsApp messages exchanged between your customers and your AI assistant are stored to provide the service, populate your conversation history, and improve bot performance.

2.3 Customer data you process through us

When you use our platform, your customers’ WhatsApp phone numbers, display names, and conversation messages are stored on your behalf. You are the data controller for this information; GorroBoys acts as a data processor. You are responsible for ensuring you have a lawful basis to collect and process your customers’ data.

2.4 Smart Website project data

When you commission a Smart Website, we process the material you give us to build it: your logo and brand assets, copy, photography, product or service listings, domain name details, and any existing hosting credentials you ask us to migrate. This material is used only to design, build, and maintain your website, and ownership of the finished site passes to you on full payment as set out in our Terms.

2.5 Smart Website visitor data

When visitors interact with the WhatsApp chat widget embedded on your Smart Website, their WhatsApp phone number, display name, and conversation content are collected and processed on your behalf as customer data (see section 2.3 above). As the website operator, you are the data controller for your visitors’ information and are responsible for disclosing this data collection in your own website’s privacy notice or cookie banner.

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve our Services
• Authenticate your account and maintain your session
• Process payments and send billing receipts
• Send service announcements, security alerts, and support messages
• Respond to your enquiries and support requests
• Analyse usage to improve product features and user experience
• Enforce our Terms of Service and prevent misuse
• Comply with applicable laws and legal obligations

We do not use your data or your customers’ data for advertising purposes or sell it to third parties.

4. How we share your information

We do not sell or rent your personal information. We may share information with:

• Service providers: Cloud hosting providers, payment processors, and analytics tools that help us operate the platform. These providers are bound by confidentiality agreements and may not use your data for their own purposes.
• WhatsApp connectivity providers: Technical partners involved in facilitating your WhatsApp integration. Data shared is limited to what is necessary to deliver the messaging service.
• Hosting and domain providers: When you commission a Smart Website, we register or configure the domain and hosting needed to publish it, sharing only the details required for that setup.
• Legal requirements: When required to comply with a court order, subpoena, or applicable law, or to protect the rights, property, or safety of GorroBoys, our users, or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.2 Sub-processors

We use the following third-party sub-processors, each bound by a data processing agreement, to deliver our Services:

• Amazon Web Services (AWS): Cloud infrastructure, servers, and data storage, United States
• Stripe / PayPal: Payment processing and subscription billing, United States
• Meta (WhatsApp Business Platform): Messaging delivery infrastructure
• Cloudflare: Content delivery, DDoS protection, and DNS
• Google Analytics: Anonymised, aggregated website usage analytics (opt-out available via browser settings or Google’s opt-out tool)

5. Data retention

We retain your account data for as long as your account is active. Conversation and contact data is retained for the duration of your subscription plus 30 days after cancellation, during which you may request an export. After 30 days, all data associated with your account is permanently deleted.

We may retain anonymised, aggregated data (with no personally identifiable information) for analytical purposes indefinitely.

6. Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from our servers
• Encryption at rest for sensitive data stored on our servers
• Regular security reviews and access control policies
• Restricted employee access to personal data on a need-to-know basis

No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

6.2 Data breach notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Our notification will include: the nature of the breach, the categories and approximate number of individuals and data records affected, the likely consequences, and the steps we are taking or propose to take to address it, including measures to mitigate any adverse effects. Where we are unable to provide full information within 72 hours, we will provide it in phases as it becomes available.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to certain legal obligations.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, such as direct marketing.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, email privacy@gorroboys.com with the subject line “Data Request”, your full name, the email address associated with your account, and a clear description of your request. We will acknowledge receipt within 5 business days and respond fully within 30 days. For data export or portability requests, we will provide your data in a structured, machine-readable format (JSON or CSV). There is no charge for reasonable requests; we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

8. Cookies and local storage

Our public website (gorroboys.com) is deliberately light. It sets no advertising cookies and runs no advertising trackers. We do use Google Analytics to understand which pages are useful and to see which sites embed our chat widget.

• Strictly necessary: On hub.gorroboys.com, a session cookie keeps you signed in. The platform cannot work without it.
• Preference: Your chosen colour theme is stored in your browser’s local storage under the key gb-theme. It never leaves your device, and clearing site data resets it.
• Chat widget: Our support assistant stores a short-lived identifier so it can keep a conversation together. It is not used for advertising or profiling. When the widget shows our “Powered by GorroBoys” badge, the link includes the hostname of the site the widget is installed on, so we can tell which sites use it.
• Analytics: Google Analytics 4 (measurement ID G-CMDT8KWVCK) sets first-party cookies such as _ga and _ga_* to measure page views and traffic sources. We do not send names, phone numbers, message contents or any other personal data to Google. IP addresses are truncated by Google. You can refuse these cookies by blocking them in your browser; the site works normally without them. Google’s own policy is at policies.google.com/privacy.

We self-host our web fonts, so loading any page on gorroboys.com does not send your IP address to a third-party font provider. Where the law requires consent for analytics cookies, we ask for it before they are set. You can clear cookies and local storage at any time through your browser settings.

9. Children’s privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting a notice on our website and, where appropriate, by email. Your continued use of the Services after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

GorroBoys
Email: privacy@gorroboys.com
Website: gorroboys.com/contact