This Privacy Policy explains how Eniena Technologies Limited(trading as "Comutte"), located at 10 Aviation Road, Airport Residential Area, Accra, Ghana, collects, uses, and protects your personal information when you use our website, mobile application, or WhatsApp booking service (collectively, the "Platform").

1. Information We Collect

We collect the following categories of personal information:

• Account information: name, email address, phone number, and authentication credentials when you create an account.
• Booking information: trip details, seat selections, passenger names, and booking references.
• Payment information: payment method, transaction amounts, and payment status. We do not store card numbers — card payments are processed securely by Paystack.
• Guest booking information: name, email, and phone number provided at checkout when booking without an account.
• WhatsApp conversations: messages exchanged with our WhatsApp booking assistant, including your phone number and booking requests.
• Technical data: IP address, browser type, and device information collected automatically when you visit the Platform.

2. How We Use Your Information

We use your personal information to:

• Process and manage your bookings and payments.
• Send booking confirmations, tickets, and payment receipts.
• Provide customer support and respond to inquiries.
• Operate and improve the WhatsApp booking assistant.
• Notify operators of new bookings so they can prepare for your trip.
• Detect and prevent fraud or unauthorised activity.
• Comply with legal obligations under Ghanaian law.

3. Information Sharing

We share your personal information only as necessary to provide the service:

• Bus operators: your name, seat details, and booking reference so operators can prepare trip manifests and verify passengers.
• Payment processors: Paystack processes card payments on our behalf under their own privacy policy.
• Infrastructure providers: we use Supabase (database and authentication) and Vercel (hosting), both of which process data under strict data-processing agreements.
• WhatsApp / Meta:messages sent through WhatsApp are processed by Meta Platforms under their terms. Our AI booking assistant is powered by Anthropic's Claude, which processes conversation content to generate responses.
• Legal requirements: we may disclose information if required by law, court order, or government regulation.

We do not sell your personal information to third parties.

4. Data Retention

We retain your personal information for 180 days from the date of your last booking or account activity. After this period, your data is permanently deleted unless retention is required by law. WhatsApp conversation history is retained for the same period to maintain booking context.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS).
• Row-level security policies on database tables.
• Parameterised queries to prevent SQL injection.
• Secrets stored in environment variables, never in code.
• Access controls limiting data visibility to authorised personnel.

No system is completely secure. If you become aware of a security vulnerability, please contact us immediately at support@bookcomutte.com.

6. Your Rights

Under the Ghana Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to legal retention requirements.
• Object to the processing of your information for specific purposes.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at support@bookcomutte.com. We will respond within 30 days.

7. Data Deletion

You may request deletion of your personal data at any time by emailing support@bookcomutte.com with the subject line "Data Deletion Request". Include the email address associated with your account or the phone number used for WhatsApp bookings.

Upon receiving a valid request, we will:

1. Verify your identity within 3 business days.
2. Delete your account, profile, and booking history within 14 business days of verification.
3. Delete your WhatsApp conversation history from our systems.
4. Request deletion of your data from our payment processor (Paystack).
5. Confirm completion of deletion via email.

Exceptions: we may retain limited data beyond deletion where required by law (e.g. financial transaction records for tax or audit purposes under Ghanaian law) or where needed to resolve an active dispute. Retained data will be limited to the minimum necessary and deleted as soon as the legal obligation expires.

8. Cookies

We use essential cookies only — specifically, authentication session cookies required for you to stay signed in. We do not use analytics cookies, tracking cookies, or third-party advertising cookies.

9. Children's Privacy

The Platform is not intended for children under 16. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have collected information from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

• Email: support@bookcomutte.com
• Phone: 020 324 2649
• Address: 10 Aviation Road, Airport Residential Area, Accra, Ghana

See also our Terms and Conditions.