⚖
FirmAssist
← Back to Home

Privacy Policy

Last updated: 22 February 2026

FirmAssist ("we", "our", "us"), a product of Tomken Technologies, is committed to protecting the privacy and personal data of our users in accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana, Article 18(2) of the 1992 Constitution of Ghana, and all applicable data protection legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the FirmAssist platform, website, and related services.

1. Data Controller

FirmAssist operates as a data controller within the meaning of Section 18 of the Data Protection Act, 2012 (Act 843). We are responsible for determining the purposes and means of processing your personal data.

For data protection enquiries, contact us at:

  • Email: info@firmassist.net
  • Phone: +233-24-288-1009
  • Address: Accra, Ghana

2. Personal Data We Collect

In accordance with the principle of minimality under Section 19 of Act 843, we collect only the personal data that is necessary, relevant, and not excessive for the purposes of providing our services:

Account Information

  • Full name, email address, and phone number
  • Firm name, address, and practice area
  • Login credentials (passwords are encrypted and never stored in plain text)

Client Data (Processed on Your Behalf)

  • Client names, contact details, and addresses
  • Case information, court dates, and legal documents
  • Billing records, invoices, and payment history

Usage Data

  • Browser type, IP address, and device information
  • Pages visited and features used within the platform
  • Session duration and interaction patterns

3. Purpose of Data Collection

Pursuant to Sections 22 and 23 of Act 843, we collect and process personal data for the following specific and explicitly defined purposes:

  • Providing and maintaining the FirmAssist platform and its features
  • Managing user accounts and authentication
  • Processing billing, invoicing, and payment transactions
  • Sending WhatsApp notifications, reminders, and alerts you have configured
  • Syncing calendar events with Google Calendar (with your explicit consent)
  • Improving platform functionality and user experience
  • Responding to support enquiries and communications
  • Complying with legal obligations

4. Lawful Basis for Processing

In accordance with Section 20 of Act 843, we process your personal data based on one or more of the following grounds:

  • Consent: You have given explicit consent for the processing (e.g., connecting Google Calendar, enabling WhatsApp notifications)
  • Contractual necessity: Processing is necessary for the performance of your subscription agreement with FirmAssist
  • Legal obligation: Processing is required to comply with applicable law
  • Legitimate interest: Processing is necessary to improve our services and protect the security of the platform

5. Consent and Your Right to Withdraw

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time, in accordance with Section 20 of Act 843. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. You may withdraw consent by:

  • Disabling specific features (e.g., disconnecting Google Calendar)
  • Updating your notification preferences in the Admin Panel
  • Contacting us at info@firmassist.net

6. Data Subject Rights

Under the Data Protection Act, 2012 (Act 843), you have the following rights regarding your personal data:

  • Right of Access (Section 35): You may request access to the personal data we hold about you
  • Right to Correction (Section 33): You may request correction of inaccurate or incomplete personal data
  • Right to Object (Section 39): You may object to processing that causes or is likely to cause unwarranted damage or distress
  • Right to Prevent Direct Marketing (Section 40): You may require us to cease processing your data for direct marketing purposes
  • Right Against Automated Decision-Making (Section 41): You may require us not to make decisions solely based on automated processing that significantly affect you
  • Right to Rectification (Section 44): You may have inaccurate data rectified, blocked, erased, or destroyed
  • Right to Compensation (Section 43): You may seek compensation for damage caused by non-compliance with the Act

To exercise any of these rights, contact us at info@firmassist.net. We will respond within 30 days.

7. Data Security

In accordance with Section 28 of Act 843, we implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • End-to-end encryption for data in transit (TLS/SSL)
  • Encryption of data at rest in our database systems
  • Secure authentication via Firebase Authentication
  • Role-based access controls within the platform
  • Regular security audits and monitoring
  • Secure cloud infrastructure provided by Google Cloud Platform

8. Data Retention

In accordance with Section 24 of Act 843, we retain personal data only for as long as is necessary to fulfil the purposes for which it was collected:

  • Active accounts: Data is retained for the duration of your subscription
  • Cancelled accounts: Account data is retained for 90 days after cancellation, after which it is permanently deleted
  • Billing records: Retained for 7 years as required by applicable financial and tax legislation
  • Usage logs: Anonymised and retained for up to 12 months for analytics purposes

9. Third-Party Services

We use the following third-party services to operate the platform. Each processes data in accordance with their own privacy policies:

  • Google Firebase: Authentication, database, hosting, and cloud storage
  • Google Calendar API: Calendar synchronisation (only when you explicitly connect)
  • Twilio: WhatsApp message delivery for client notifications
  • Paystack: Payment processing for subscription billing
  • Anthropic (Claude AI): AI paralegal features for document drafting and legal research

We ensure that all third-party processors comply with adequate data protection standards, in line with Section 30 of Act 843.

10. Cross-Border Data Transfers

Some of our third-party service providers process data outside Ghana. In accordance with Section 36 of Act 843, we ensure that any transfer of personal data to a country outside Ghana is only made to a country that has adequate data protection safeguards. We implement appropriate contractual measures to protect your data during such transfers.

11. Cookies and Local Storage

FirmAssist uses browser local storage to maintain your session and preferences (such as Google Calendar tokens). We do not use third-party tracking cookies or advertising cookies. Essential storage is necessary for the platform to function and cannot be disabled.

12. Children's Data

FirmAssist is a professional legal practice management tool and is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Commission and affected data subjects promptly, in accordance with the requirements of Act 843. Notification will include the nature of the breach, the data affected, and the measures taken to address it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Your continued use of FirmAssist after such changes constitutes acceptance of the updated policy.

15. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

  • FirmAssist: info@firmassist.net
  • Data Protection Commission of Ghana: dataprotection.org.gh

16. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

  • Email: info@firmassist.net
  • Phone: +233-24-288-1009 / +1-323-613-4188 / +1-657-939-0123
  • Address: Accra, Ghana

© 2026 FirmAssist. All rights reserved. A product of Tomken Technologies.

Home Privacy Terms Data Protection