Privacy Policy

1. Who we are

ELARO is operated by Alidu Yakubu Suhyini Mansur ("Mansur", "we", "us"), who is the data controller for personal data processed through ELARO under Ghana's Data Protection Act, 2012 (Act 843). As of the date above, ELARO's registration with the Data Protection Commission is pending. You can reach us at him@mansuralidu.com for any privacy question or request.

2. Information we collect

We collect the following categories of personal data:

• Account data: your real name, email address, and login credentials (handled by our authentication provider, Supabase).
• Academic affiliation: your university, college/department, and program, used to route what you see and to attribute your reviews correctly.
• Contributor Content: the reviews and resource links you submit.
• Usage and technical data: basic log and session data needed to operate and secure the service (for example, authentication session cookies).

3. Your name is published - read this carefully

ELARO's trust model depends on named, verified authorship: when you publish a review, your real name is displayed publicly next to it, visible to anyone who visits the page - not just to us. This is different from ordinary account data like your email or password, which we keep private. By submitting a review, you separately and specifically consent to your name being published in this way. If you no longer want a published review attributed to your name, contact us at him@mansuralidu.com - see Section 6 (Retention) for what happens next.

4. How we use your information and our lawful basis

We use your data to:

• create and authenticate your account;
• display your published Contributor Content, including your name;
• route content to you by college/program;
• review and moderate submitted content against our Content Policy;
• respond to takedown requests, support requests, and legal obligations;
• keep the service secure and prevent abuse.

Our lawful basis for processing account data and Contributor Content is your consent, given when you create an account and again when you submit a review (via the required certification on the submission form). We may also process limited data where necessary to comply with a legal obligation or to protect ELARO's legitimate operational interests, such as security and abuse prevention.

5. Who we share your data with

We do not sell your data. We share personal data with the following processors, strictly to operate ELARO:

• Supabase - database hosting and authentication.
• Vercel - application hosting.

These providers may store or process data outside Ghana. Where that happens, we rely on the providers' own contractual and security safeguards, and we only share what's necessary for them to provide the service to us. Published Contributor Content, by design, is visible to any visitor to the site.

6. Retention

We keep your account data for as long as your account is active. If you delete your account, we remove your account data, but a review you've already published may remain visible if removing it would break the record of a course offering other students rely on - in that case we'll discuss options with you (such as anonymizing attribution where our trust model allows it, or removing the review entirely) rather than leaving it attributed to you without your input. Contact him@mansuralidu.com to start this process.

7. Your rights under Act 843

As a data subject under Ghana's Data Protection Act, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data, subject to Section 6 above;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email him@mansuralidu.com. We'll respond as required by Act 843.

8. Security

We rely on our providers' security controls (including access controls and encryption in transit) and restrict who can access contributor data internally. No system is perfectly secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy as ELARO grows. We'll update the date at the top of this page when we do.

10. Contact

Questions about this Privacy Policy, or requests about your data? Email him@mansuralidu.com. See also our Terms of Service and Content Policy.