Who is responsible
Iderwell is a Ghanaian technology business based in Kumasi. Iderwell is responsible for the information described in this notice.
Website and business enquiries
When you send an enquiry, we collect your name, email address, the service you selected and, where you provide them, your phone number, organisation and short description. We use the information to acknowledge your enquiry, decide whether the request fits our work, contact you and keep a record of the discussion.
USSD Studio accounts and product activity
When you create or use a USSD Studio account, we may handle your name, email address, account and authentication records, saved flow definitions, simulation events, fixed test versions, share links, usage totals, production-readiness review requests and security logs. We use this information to provide and secure the workspace, apply published limits, investigate problems and abuse, support users and improve the public alpha.
The sandbox does not need real customer data. Use fictional or test information in flow definitions and simulations, and never enter API keys, passwords, provider credentials, payment credentials or regulated or sensitive production data. If you use guided idea setup, the text you submit may be processed by the configured AI provider only to propose supported screens.
A production-readiness request contains only the business and flow details needed for feasibility review. It is not a place to send Hubtel keys or other credentials. If future production work is accepted after the required gates pass, the written scope and a separate secure setup process will explain which provider settings are required and how they are handled.
A read-only test can be opened by anyone who has its share link until the link expires or is revoked. Review a flow before publishing it. The more detailed product notice is available at ussd.iderwell.com/privacy.
Hotspot accounts, payments and network activity
When a business creates or uses a Hotspot account, we handle its owner and team contact details, account and authentication records, business profile, locations, package settings, router identifiers and status, customer access records, payment references, subscription invoices, usage accounting and security logs. We use this information to provide and secure the service, verify payment outcomes, control internet access, show operational reports, support the business and investigate faults or abuse.
Each participating business supplies its own approved Hubtel merchant credentials for customer Wi-Fi sales. Hotspot encrypts those credentials and uses them only for that business’s customer checkout and server-side transaction verification. Iderwell’s separate Hubtel credentials are used for the Hotspot subscription. We do not store a customer’s mobile-money PIN or card details.
The business operating a hotspot decides which customer identity and sharing options apply to each package. Depending on that choice, Hotspot may handle a customer phone number, device MAC address, generated login, access status, session times and data totals. The business is responsible for giving its customers an appropriate notice about its Wi-Fi service and package rules.
Paid-opportunity applications
When you apply through apply.iderwell.com, we collect the contact, experience, device, availability and participation information requested in the form. We use it to review your suitability, contact shortlisted applicants, arrange sessions, record attendance and outcomes, and manage any payment due for completed work.
How long we keep it
Inactive or unsuccessful website enquiries are deleted or anonymised after 12 months unless they become part of an active working relationship or there is another legitimate reason to retain them.
Unsuccessful paid-opportunity applications are deleted or anonymised after 12 months unless the applicant has explicitly agreed to be considered for future opportunities. Information for successful applicants may move into the records needed to manage the working relationship and payment.
USSD Studio account content and operational records are kept for as long as needed to provide the account and public alpha, meet security and abuse-prevention needs, resolve requests and comply with applicable obligations. The Studio product notice describes the current retention controls for expired share links, short-lived sessions and certain usage and security records; account and saved-flow content remain while the account is active or until a verified deletion request is completed.
Hotspot business, payment, entitlement, accounting and audit records are kept while needed to operate the service, reconcile access and payments, resolve disputes, protect the platform and meet applicable business obligations. A verified deletion request may be limited where financial, security or operational records must be retained.
Email, hosting and service providers
We use service providers for email delivery, hosting, infrastructure, security and, where a user chooses an assisted feature, AI processing. They process information only as needed to provide those services. Enquiries and applications are also available to authorised Iderwell staff through a protected internal portal.
Website logs and cookies
Our servers keep normal security and access logs, such as IP address, requested page, date, device or browser information and error details. We do not currently use advertising pixels or non-essential tracking cookies on iderwell.com. Hotspot and USSD Studio use the account, session and security storage needed to operate their workspaces.
Sharing
We do not sell your personal information. We may disclose it where required by law, to protect people or systems, or to providers helping us operate the services described above.
Keeping information safe
We use access controls, protected internal tools, encrypted connections, backups and operational monitoring. No internet service can promise absolute security, so please do not send passwords, PINs, credentials or customer records through the public enquiry form.
Your requests
You can ask to access, correct or delete information you have sent to us. Email privacy@iderwell.com with enough detail for us to identify the relevant record. We may need to verify your identity before acting on the request, and some security or operational records may need to be retained where there is a legitimate reason.
Changes to this notice
We may update this notice when our forms, services or legal responsibilities change. The latest version and its update date will remain on this page.