Privacy & Data Protection Notice

MICANI360 is the management platform used to run construction projects, property rentals, construction operations, artisan connections, inventory and finance. The organisation that operates this installation is the data controller; its data protection supervisor is recorded in the platform's privacy administration section.

• Account data: name, email, phone, role and business membership.
• Client and customer data: contact details, addresses, projects and invoices.
• Tenant data: contact details, lease terms, rent payments and balances.
• Artisan data: trade, skills, experience, verification status and ratings.
• Supplier contacts and purchase records.
• Activity records: who created or changed a financial or stock movement, and when.

To deliver contracted work and services, manage leases and rent, run procurement and inventory operations, keep accurate financial and tax records, prevent fraud, and meet legal obligations. Where we rely on consent, you may withdraw it at any time.

Personal data is shared only with service providers that operate the platform — database and hosting, authentication, file storage and the AI analysis service — and with parties we are legally required to disclose to. A register of these providers, the data they receive and where they process it is maintained inside the platform. We do not sell personal data.

All traffic is served over HTTPS. Passwords are never stored in the platform database; authentication is handled by the managed authentication service, which stores only salted password hashes. Every business table enforces row level security so a signed-in user reaches only the businesses they belong to, and only the modules their role allows. Uploaded documents are served through time-limited signed links rather than public URLs. Money and stock movements are written to an immutable audit log with the acting user.

The built-in AI analyst answers questions using only the records the requesting user is already permitted to read. It runs under that user's own permissions, never bypasses row level security, and personal contact details are removed before any data is sent for analysis. Each request is logged. The AI does not make automated decisions about individuals.

Records are kept only as long as the purpose and applicable law require, following the retention schedule maintained in the platform. At the end of a retention period data is archived, anonymised, or securely destroyed, and the destruction is recorded as evidence.

You may ask for access to your personal data, correction of inaccurate data, deletion or destruction where there is no lawful reason to keep it, and you may object to certain processing or withdraw consent. Requests are logged and tracked to completion. We verify identity before disclosing personal data. If you are not satisfied with our response you may complain to the Data Protection Commission of Ghana.

Suspected incidents are recorded, contained and investigated. Where an incident is likely to affect your rights, we notify the Data Protection Commission and affected individuals without undue delay.

To exercise a right or raise a data protection concern, contact the operating organisation's data protection supervisor using the contact details published by the organisation. Requests received are entered into the platform's data subject request register and tracked against their response deadline.