Terms of Service

ISPilot is a product of Cricket Telecommunication Ltd · Last updated: 4 October 2026 · Version 1.0

This summary is for convenience only. The full Terms below are what bind you and us.

1. About these Terms

1.1 These Terms of Service (the "Terms") are an agreement between Cricket Telecommunication Ltd, a company registered in the Republic of Ghana under number C298642017, with its registered office at BM 166, Coffee Street, GK-0025-6129, Tema, Ghana, which owns and operates the ISPilot platform ("ISPilot", "we", "us"), and the business that signs up for or uses the Service ("you", the "Customer").

1.2 You accept these Terms when you create an account, tick a box or click a button indicating acceptance, sign an order form that refers to them, or use the Service. Under the Electronic Transactions Act, 2008 (Act 772), an agreement formed electronically in this way is as valid and enforceable as a signed paper contract.

1.3 If you accept these Terms on behalf of a company or other organisation, you confirm that you are authorised to bind it, and "you" means that organisation.

1.4 The Service is provided for business use. You confirm you are acting for the purposes of a trade, business or profession and not as a consumer.

1.5 These Terms include our Privacy Policy (which explains how we handle personal data for which we are responsible), Schedule 1 (Data Processing Terms) and any order form or plan description you accept (an "Order"). If they conflict, the Order prevails, then Schedule 1 (on data protection matters), then these Terms.

2. Definitions

• "Service" means the ISPilot platform and everything we make available through it: the administration application, the platform dashboard, captive portal and self-service pages, mobile application, application programming interfaces, router configuration packages and scripts, documentation, and any related support.
• "Workspace" means the separate instance of the Service provisioned for you, usually reachable at a sub-domain of ispilot.network or at a domain you connect.
• "Subscriber" means any person who buys or uses internet access or other services from you, including hotspot users, PPPoE and home-broadband customers, voucher holders and anyone using your captive portal.
• "Users" means you and the people you authorise to use your Workspace, such as your staff, agents, resellers and technicians.
• "Customer Data" means all data you, your Users or your Subscribers put into or generate through the Service, including Subscriber records, usage records, payment records, router data, messages and uploaded content.
• "ISPilot Pay" means the optional feature described in section 7, under which we collect payments from your Subscribers on your behalf and pay them out to you.
• "Payment Processor" means the licensed payment service provider we use to process card, mobile money and bank payments, currently Paystack, and any replacement we notify you of.
• "Fees" means the subscription fees, revenue-share fees, commissions and other charges set out in your plan or Order.

3. The Service

3.1 The Service helps you run an internet service business. Depending on your plan, it includes subscriber and plan management, voucher generation, billing and invoicing, hotspot, PPPoE and RADIUS management, MikroTik router integration and monitoring, captive portal design, subscriber self-service, usage reporting, SMS and email notifications, live chat and support ticketing, and payment collection.

3.2 We are a software provider, not an internet service provider. We do not provide internet access, bandwidth, transit or network equipment to you or to your Subscribers. You decide what services you sell, at what prices and on what terms, and you deliver them over your own network.

3.3 Your Workspace may come with sample data (example plans, vouchers, customers and a sample router) to help you get started. Sample data is illustrative only. You should review, change or delete it before going live.

3.4 Router configuration packages, captive portal files and scripts we generate are provided for you to review and install on equipment you control. You are responsible for checking that they suit your network and for any change you make to your equipment.

3.5 We may improve, change or retire features from time to time. We will not make a change that materially reduces the core functionality of your paid plan during a paid billing period without giving you at least 30 days' notice. If such a change is unacceptable to you, you may cancel and receive a pro-rata refund of prepaid Fees for the unused period.

3.6 Some features are labelled beta, preview or optional (for example, AI-assisted support tools). They are provided as they are, may change or stop at any time, and are excluded from any service commitment.

4. Eligibility and accounts

4.1 To use the Service you must be a business lawfully established in your country, and the person creating the account must be at least 18 years old.

4.2 You must give accurate and complete registration, billing and payout information and keep it up to date.

4.3 You are responsible for everything done under your account and by your Users. Keep passwords and API tokens secret, give each User their own login, remove access promptly when someone leaves, and tell us immediately at sales@crickettel.com if you suspect unauthorised access.

4.4 Our staff do not need, and will never ask for, your password. With your permission, or where needed to investigate a security incident, fix a fault or comply with the law, authorised ISPilot staff may access your Workspace using our internal support tools. Such access is logged and shown in your Workspace.

4.5 Each Workspace is for one business. You may not resell, sublicense or provide the Service to another ISP unless we have agreed in writing (for example, under a reseller arrangement).

5. Your responsibilities as an internet service provider

5.1 Licences. You are solely responsible for obtaining and maintaining every licence, authorisation, registration and frequency assignment you need to provide your services, including, in Ghana, any authorisation required from the National Communications Authority under the Electronic Communications Act, 2008 (Act 775) and the National Communications Authority Act, 2008 (Act 769), and equivalent approvals in any other country where you operate. You must ensure your equipment is type-approved where required.

5.2 Your contract with Subscribers. You contract with your Subscribers in your own name. You are responsible for your service terms, prices, quality of service, refunds, complaints, consumer protection obligations and Subscriber support. We are not a party to that relationship and Subscribers have no claim against us under these Terms.

5.3 Data protection. For Subscriber personal data you are the data controller. You must comply with the Data Protection Act, 2012 (Act 843), including registering with the Data Protection Commission where required, and with the data protection laws of any other country where you operate (such as Nigeria's Data Protection Act, 2023, Kenya's Data Protection Act, 2019 or South Africa's Protection of Personal Information Act, 2013). In particular, you must give Subscribers a privacy notice and have a lawful basis for collecting their data and sending them messages.

5.4 Captive portal and Subscriber-facing pages. You are responsible for the content of your portals, notices, advertisements and terms shown to Subscribers, including the "terms and conditions" and "privacy policy" pages your Workspace links to. Advertisements you display must be lawful, truthful and properly authorised.

5.5 Lawful requests. You are responsible for responding to lawful requests from regulators and law enforcement concerning your network and Subscribers, including requests made under the Electronic Communications Act, 2008 (Act 775) and the Cybersecurity Act, 2020 (Act 1038). If such a request is made to us about your Workspace, we will, where the law allows, refer it to you or tell you about it before responding.

5.6 Taxes. You are responsible for all taxes, levies and duties on your sales to Subscribers, including VAT and related levies, and for issuing any tax invoices or receipts the law requires. The receipts the Service generates are a tool; you are responsible for making sure they meet the requirements that apply to you.

6. Trial, plans, fees and billing

Free trial

6.1 New Workspaces may start with a free trial of 14 days. No payment method is needed to start a trial. If your trial ends without a payment method on file, your Workspace is paused rather than charged. You can resume it by adding a payment method, and nothing is deleted while it is paused, subject to section 17.

Plans

6.2 Your plan is one of the following, as shown when you sign up or in your Order:

• Fixed subscription: a recurring Fee for each billing period (for example, monthly or yearly), charged in advance.
• Revenue share: no fixed subscription; instead, a percentage of the payments you collect through the Service, calculated from the transaction records in your Workspace and charged in arrears.

6.3 Plan limits (for example, numbers of Subscribers, routers or staff accounts) are those shown for your plan. If you exceed them we may ask you to move to a suitable plan.

Payment

6.4 Fees are payable in Ghana cedis (GHS) unless your Order states another currency. Fees exclude VAT and other applicable taxes and levies, which we will add where the law requires.

6.5 You authorise us to charge your registered payment method through our Payment Processor for each billing period, and for revenue-share Fees as they fall due. If you use ISPilot Pay, you also authorise us to deduct Fees owed to us from amounts we hold for you (see section 7.9).

6.6 Subscriptions renew automatically at the end of each billing period until cancelled.

6.7 If a payment fails, we will notify you and retry. If the Fees are still unpaid 5 days after the due date, we may suspend your Workspace under section 16 until payment is made. Your data is not deleted because of a suspension for non-payment, subject to section 17.

6.8 If you believe an invoice is wrong, tell us within 30 days of the invoice date. We will investigate in good faith, and any amount found to be wrong will be credited or refunded. Undisputed amounts remain payable.

6.9 We may change our prices by giving you at least 30 days' notice. The new price applies from your next billing period after the notice ends. If you do not agree, you may cancel before it takes effect.

6.10 Except where these Terms say otherwise or the law requires, Fees already paid are not refundable, including for partly used billing periods. Where a refund is due because of our error or under section 3.5, we will make it within 14 days to the original payment method.

7. ISPilot Pay: collections and payouts

7.1 Optional feature. You may choose to receive Subscriber payments through your own Payment Processor account, or through ISPilot Pay. This section applies only if you use ISPilot Pay.

7.2 Appointment as limited payment collection agent. You appoint ISPilot as your agent for the limited purpose of receiving payments from your Subscribers for the services you sell them, and remitting the net amount to you. A payment made by a Subscriber through ISPilot Pay is treated as received by you at the moment the Payment Processor confirms it to us. The Subscriber's obligation to you for that payment is then satisfied, whether or not we have yet paid it out to you.

7.3 Payment Processor. Payments are processed by our Payment Processor, which is licensed to provide payment services, and are subject to its terms and its fraud and risk checks. We do not store full card details. We may change the Payment Processor by notice to you.

7.4 Commission and fees. For each payment collected through ISPilot Pay we deduct:

• our commission, at the percentage shown for your Workspace in the Service or in your Order; and
• the Payment Processor's transaction and transfer fees, unless the Service shows that we bear them.

The commission percentage may be changed by giving you at least 30 days' notice. The change applies only to payments collected after the notice ends.

7.5 Payout account. You must register a payout account held in the name of your business (or, for a sole proprietor, in your own name): a mobile money wallet or a bank account. We pay only to an account that has passed our verification checks. You are responsible for the accuracy of the account details you give us. Payments sent to details you supplied are treated as paid to you.

7.6 Verification. To meet our obligations under the Anti-Money Laundering Act, 2020 (Act 1044), the Payment Processor's requirements and our own risk policies, we may ask for information and documents about your business, its owners and directors, and your licences, and may verify them with third parties. We may delay or decline payouts until verification is complete.

7.7 Payout schedule. We pay out your available balance automatically, normally once each business day, once it reaches the minimum payout amount shown in the Service (currently GHS 10). Payment Processor and mobile network settlement times, public holidays and outages are outside our control and may delay receipt.

7.8 Holds and reserves. We may hold all or part of your balance, or set a reasonable reserve, where we reasonably believe it is needed because of:

• suspected fraud, unauthorised transactions, or unusually high refund or chargeback activity;
• a breach of these Terms, or an unpaid amount you owe us;
• a dispute about who is entitled to the funds; or
• a court order, regulatory direction or other legal requirement.

We will tell you the reason where the law allows, and release held funds as soon as the reason no longer applies.

7.9 Refunds, chargebacks and set-off. You are responsible for refunds you agree to give Subscribers and for chargebacks and reversals of payments collected for you, together with any associated Payment Processor fees. We may deduct these amounts, and any Fees you owe us, from your balance. If your balance is not enough, you must pay the shortfall within 14 days of our request.

7.10 Statements. The Service shows each payment collected, the commission and fees deducted and each payout made. Please review them regularly and tell us of any discrepancy within 60 days. We keep the underlying records for the period the law requires.

7.11 No interest. We do not pay interest on balances awaiting payout. Funds collected for you are not a deposit and are not held for investment.

7.12 Ending ISPilot Pay. Either of us may stop using ISPilot Pay for your Workspace on 14 days' notice, or immediately for a reason listed in section 16. After it ends, we will pay out your remaining balance, less amounts we may deduct under this section, within 30 days, or after any longer period needed to cover possible refunds and chargebacks (not exceeding 120 days).

7.13 Our liability for collected funds. Nothing in section 19 limits our obligation to pay out funds we have actually received for you, less the deductions permitted by this section.

8. Your Subscribers and messaging

8.1 The Service can send SMS, email and in-app messages to your Subscribers, such as welcome messages, receipts, expiry reminders and password-reset codes. These messages are sent on your behalf and in your name.

8.2 You must make sure you are allowed to send each message. Service messages linked to an account are generally permitted. Marketing and promotional messages need the Subscriber's consent where the law requires it, and must honour opt-outs promptly. Under the Data Protection Act, 2012 (Act 843), people may require you to stop using their data for direct marketing.

8.3 You are responsible for registering any SMS sender ID you use and for the charges of the SMS or email provider you connect, unless your plan includes them.

8.4 Live chat and support tickets between you and your Subscribers are your communications. You are responsible for responding to them and for their content.

9. Acceptable use

9.1 You must not, and must not allow anyone else to, use the Service to:

• break any law or regulation, or infringe anyone's rights, including privacy and intellectual property rights;
• send unsolicited bulk messages, or messages that are misleading or abusive;
• create captive portals or pages that impersonate another business, collect passwords or payment details under false pretences, or distribute malware;
• process payments for goods or services other than the connectivity and related services you provide, or for anything unlawful (including gambling without a licence, or anything that would breach sanctions or anti-money-laundering laws);
• monitor or track people's internet activity, location or devices other than as necessary to provide and bill your service and as permitted by law and your privacy notice;
• upload content that is unlawful, defamatory, obscene, hateful or that exploits children;
• interfere with, overload or disrupt the Service or other customers' Workspaces, or try to access data that is not yours;
• probe, scan or test the security of the Service without our written permission (we welcome responsible reports of vulnerabilities at sales@crickettel.com);
• copy, frame, modify, reverse engineer, decompile or create derivative works of the Service, except to the extent the law expressly allows; or
• use the Service to build a competing product, or access it by automated means except through our documented interfaces.

9.2 We may remove or disable content that breaches this section, and may act under section 16.

10. Your data

10.1 Ownership. As between you and us, you own Customer Data. You grant us a non-exclusive licence to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the Service, to comply with the law and as described in Schedule 1.

10.2 Roles. For Subscriber and User personal data in your Workspace, you are the data controller and we are your data processor, and Schedule 1 applies. For the personal data of your own contacts that we use to manage our relationship with you (such as account, billing and support information), we are the controller, as described in our Privacy Policy.

10.3 Your responsibility for data. You are responsible for the accuracy, quality and lawfulness of Customer Data and for having the rights and notices needed for us to process it under these Terms.

10.4 Statistics. We may create aggregated, de-identified statistics from use of the Service (for example, total transactions or average router uptime) to operate, improve and report on the Service. These statistics do not identify you, your Users or your Subscribers.

10.5 Export. You can export your key data (such as Subscriber lists and transaction records) from the Service at any time while your Workspace is active or within the retention period in section 17. On request, we will provide reasonable assistance with a full export, which may be chargeable if it requires significant work.

10.6 Backups. We back up the Service regularly, but backups are for our disaster recovery. You should keep your own exports of data that is important to you.

11. Security

11.1 We use appropriate technical and organisational measures to protect the Service and Customer Data, including encryption in transit, encryption of stored secrets such as router and gateway credentials, separation of each customer's data, access controls, login protections, logging and regular updates. Further detail is in Schedule 1.

11.2 You must protect your side of the Service: your Users' accounts, your routers and their management credentials, the devices your staff use, and any API tokens or webhooks you configure.

11.3 If we become aware of a security incident affecting your Customer Data, we will notify you without undue delay as set out in Schedule 1 and cooperate with you, including with any notification you must make to the Data Protection Commission, to the Cyber Security Authority under the Cybersecurity Act, 2020 (Act 1038), or to affected Subscribers.

12. Availability and support

12.1 We aim to keep the Service available around the clock and use reasonable care and skill to do so. Unless your Order includes a specific service-level commitment, we do not guarantee any particular level of availability.

12.2 We may carry out planned maintenance, which we will try to schedule at quiet times and announce in advance where it is likely to cause noticeable disruption. Urgent security maintenance may happen without notice.

12.3 Hotspot and PPPoE service on your network depends on your routers, power, uplinks and configuration. Where your routers authenticate Subscribers locally, your Subscribers can usually stay connected even if the Service is briefly unreachable. Features that need the Service (such as online purchases and dashboards) will not work during an outage.

12.4 Support is provided through the channels shown in the Service, during the hours shown for your plan. We will make reasonable efforts to respond promptly, but response times are not guaranteed unless your Order says otherwise.

13. Third-party services

13.1 The Service works with products and services we do not control, such as MikroTik RouterOS and other network equipment, the Payment Processor, SMS and email providers, mobile money networks, mapping services and, if you enable them, AI services. Your use of them may be subject to their own terms.

13.2 We are not responsible for third-party products or services, for changes they make, or for their failures, except where they are our sub-processors under Schedule 1, in which case we remain responsible for them as set out there.

14. Intellectual property

14.1 We and our licensors own all rights in the Service, including its software, design, documentation and the ISPilot name and logo. Subject to these Terms and payment of the Fees, we grant you a non-exclusive, non-transferable right for your Users to use the Service for your internal business purposes during your subscription.

14.2 Router packages, portal files and templates we generate for you may be installed on equipment you control and used for as long as you use the Service. Your own logos, images and content inside them remain yours.

14.3 If you give us suggestions or feedback, we may use them freely without obligation to you.

14.4 We may name you as a customer and display your logo on our website and in sales materials. You can ask us to stop at any time by writing to sales@crickettel.com.

15. Confidentiality

15.1 Each of us will keep confidential any non-public information the other shares that is marked confidential or would reasonably be understood to be confidential, use it only for the purposes of these Terms, and share it only with employees, contractors and advisers who need to know it and are bound by similar duties.

15.2 This does not apply to information that is or becomes public through no fault of the recipient, was already known to the recipient, is independently developed, or is lawfully received from someone else. Either party may disclose confidential information where required by law or by a court or regulator, after notifying the other where the law allows.

16. Suspension

16.1 We may suspend all or part of your access to the Service, or your use of ISPilot Pay:

• if Fees remain unpaid after the grace period in section 6.7;
• if you materially breach section 5, 7 or 9, or we reasonably suspect fraud or unlawful activity;
• if your use poses a security risk to the Service or to others, or could cause us legal liability; or
• if a court, regulator or other authority requires it.

16.2 Except where urgent action is needed to prevent harm or is required by law, we will give you notice and a reasonable opportunity to fix the problem before suspending. We will limit any suspension to what is reasonably necessary and lift it promptly once the cause is resolved.

16.3 While your Workspace is suspended, your Subscribers may not be able to use your portals or make payments, and your data is retained subject to section 17.

17. Cancellation and termination

17.1 Cancelling. You may cancel at any time from your account or by writing to us. There is no early-termination fee. Cancellation takes effect at the end of your current billing period, and you keep access until then.

17.2 Termination by us. We may terminate these Terms by giving you 30 days' written notice for any reason, in which case we will refund prepaid Fees for any period after termination. We may terminate immediately by notice if you materially breach these Terms and do not fix the breach within 14 days of our notice, if the breach cannot be fixed, or if you become insolvent or cease business.

17.3 Data after cancellation. After your Workspace ends, we keep your Customer Data for 30 days so that you can reactivate or export it. After that, we delete it from the live Service, and from backups within their normal rotation cycle, except for records we must keep by law (such as transaction and tax records), which we keep securely only for as long as required.

17.4 What happens on termination. Your right to use the Service ends; you must stop using generated router packages that depend on the Service; outstanding Fees become payable; and section 7.12 applies to any ISPilot Pay balance.

17.5 Sections 7.9 to 7.13, 10, 15, 17 to 23 and Schedule 1 (to the extent we still hold Customer Data) survive termination.

18. Warranties and disclaimers

18.1 We warrant that we will provide the Service with reasonable care and skill and that it will perform materially as described in our documentation. If it does not, tell us and we will use reasonable efforts to correct it. If we cannot do so within a reasonable time, either of us may terminate the affected Service, and we will refund prepaid Fees for the period after termination. This is your exclusive remedy for breach of this warranty.

18.2 Each of us warrants that it has the authority to enter into these Terms.

18.3 Except as expressly stated in these Terms, and to the fullest extent permitted by law, the Service is provided "as is" and "as available". We do not warrant that it will be uninterrupted or error-free, that it will meet every requirement you have, or that it will work with every router model, firmware version or third-party service. We do not give legal, regulatory, tax or financial advice, and features such as receipts, reports and templates do not replace professional advice.

19. Limitation of liability

19.1 Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for our obligation to remit funds under section 7.13, for your obligation to pay Fees, or for any other liability that cannot lawfully be limited or excluded.

19.2 Subject to section 19.1, neither party is liable to the other, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for any loss of profit, revenue, business, contracts, goodwill or anticipated savings, or for any indirect or consequential loss, even if it was foreseeable.

19.3 Subject to section 19.1, each party's total liability arising out of or in connection with these Terms in any 12-month period is limited to the total Fees paid and payable by you to us in the 12 months before the event giving rise to the claim.

19.4 We are not responsible for losses caused by your network, equipment, configuration, internet uplink or power supply; by your failure to follow our reasonable instructions or to keep your credentials secure; by third-party services outside our control; or by events described in section 23.1.

20. Indemnities

20.1 You will defend and indemnify us against any third-party claim, regulatory fine or penalty, and related reasonable costs, arising from: your provision of services to Subscribers; your lack of a required licence or authorisation; content you or your Users put on the Service or show to Subscribers; messages sent on your behalf without the required consent; or your breach of section 9.

20.2 We will defend and indemnify you against any third-party claim that your use of the Service, in line with these Terms, infringes that third party's intellectual property rights, and pay damages finally awarded or agreed in settlement. If such a claim is made or likely, we may modify the Service so it no longer infringes, obtain a licence for your continued use, or end the affected Service and refund prepaid Fees for the unused period. This does not apply to claims arising from your content, your modifications or combination with things we did not supply.

20.3 The indemnified party must notify the other promptly of the claim, let the other control its defence and settlement (no settlement may admit fault on the indemnified party's behalf without its consent), and give reasonable cooperation at the other's cost.

21. Changes to these Terms

21.1 We may update these Terms, for example to reflect changes in the law or the Service. We will give you at least 30 days' notice of changes that materially affect you, by email or in the Service. Changes needed to comply with the law, or that do not adversely affect you, may take effect sooner.

21.2 If you do not agree to a change, you may cancel before it takes effect, and we will refund prepaid Fees for the period after cancellation. If you keep using the Service after the change takes effect, the updated Terms apply.

22. Governing law and disputes

22.1 These Terms, and any dispute arising out of or in connection with them (including non-contractual disputes), are governed by the laws of the Republic of Ghana.

22.2 Talk first. If a dispute arises, either party may give written notice of it. Senior representatives of both parties will meet (in person or online) within 14 days and try in good faith to resolve it. Either party may also propose mediation under the Alternative Dispute Resolution Act, 2010 (Act 798).

22.3 Arbitration. If the dispute is not resolved within 30 days of the notice, it will be finally resolved by arbitration under the Alternative Dispute Resolution Act, 2010 (Act 798), administered by the Ghana Arbitration Centre under its rules. There will be one arbitrator, appointed by agreement or, failing agreement within 14 days, by the Centre. The seat of arbitration is Accra, the language is English, and the award is final and binding.

22.4 Nothing in this section prevents either party from seeking urgent interim or injunctive relief from the courts of Ghana, or prevents us from bringing proceedings in the courts of Ghana to recover undisputed Fees.

23. General

23.1 Events beyond control. Neither party is liable for delay or failure caused by events beyond its reasonable control, including power outages, fibre cuts, failures of mobile networks, payment networks or hosting providers, government-ordered network restrictions, changes in law, civil unrest, epidemics, floods and other natural disasters. This does not excuse payment obligations. If such an event continues for more than 30 days, either party may terminate the affected Service on notice.

23.2 Notices. We may give you notices by email to your account's contact address or in the Service. You may give us notices by email to sales@crickettel.com or by post to our registered office. Email notices are treated as received on the next business day after sending.

23.3 Assignment. You may not transfer your rights under these Terms without our written consent, which we will not unreasonably withhold. We may transfer them to a group company or to a successor to our business, on notice to you.

23.4 Subcontracting. We may use subcontractors to help provide the Service, and remain responsible for their performance.

23.5 Entire agreement. These Terms (with the documents in section 1.5) are the whole agreement between us about the Service and replace any earlier discussions. Neither party relies on any statement not set out in them. Terms in your purchase orders or other documents do not apply.

23.6 Severability and waiver. If any provision is found unenforceable, the rest remains in effect and the provision is applied to the maximum extent permitted. A failure or delay in exercising a right is not a waiver of it.

23.7 Relationship. Except for the limited agency in section 7, the parties are independent contractors. Nothing in these Terms creates a partnership, joint venture or employment relationship.

23.8 Third parties. No one other than you and us has any right to enforce these Terms.

23.9 Language and records. These Terms are made in English. Electronic records kept by the Service, such as transaction logs, are admissible as evidence of the matters they record, as the Electronic Transactions Act, 2008 (Act 772) provides.

Schedule 1: Data Processing Terms

This Schedule applies where we process personal data on your behalf as your data processor in providing the Service. It is designed to meet the requirements for processors under the Data Protection Act, 2012 (Act 843), and, where they apply to you, the Nigeria Data Protection Act, 2023, the Kenya Data Protection Act, 2019, South Africa's Protection of Personal Information Act, 2013 and comparable laws ("Data Protection Laws").

1. Details of the processing

2. Our obligations

We will:

• process the personal data only on your documented instructions (these Terms, your configuration of the Service and your written requests), unless the law requires otherwise, in which case we will tell you first where the law allows;
• tell you if we believe an instruction breaks Data Protection Laws;
• ensure that people we authorise to process the data are bound by confidentiality;
• implement appropriate technical and organisational security measures, including those in section 5 of this Schedule;
• taking into account the nature of the processing, assist you, through the Service's features or otherwise, in responding to requests from data subjects to exercise their rights (access, correction, deletion, objection, including to direct marketing);
• assist you with security, breach notification, data protection impact assessments and consultations with regulators, as far as relates to our processing;
• on termination, delete the personal data as described in section 17.3 of the Terms, unless the law requires us to keep it; and
• make available the information reasonably needed to show compliance with this Schedule.

3. Sub-processors

You authorise us to use sub-processors to provide the Service, including our hosting and infrastructure providers, the Payment Processor (for ISPilot Pay and subscription billing), and email and messaging delivery providers we contract with. Providers you connect yourself (for example, your own SMS gateway or payment account) are your processors, not ours. We will impose data protection obligations on our sub-processors that are no less protective than this Schedule, and remain responsible for them. We will give you at least 14 days' notice of a new sub-processor; if you object on reasonable data protection grounds and we cannot address your objection, you may terminate the affected Service and receive a refund of prepaid Fees for the unused period. A current list is available on request.

4. International transfers

The Service may be hosted, and sub-processors may operate, outside Ghana. Where personal data is transferred outside the country where it was collected, we will make sure the transfer is permitted by Data Protection Laws, for example because the destination provides adequate protection or the transfer is covered by contractual safeguards with the recipient.

5. Security measures

• Encryption of data in transit (HTTPS/TLS) and encryption of stored secrets, such as router passwords and payment gateway keys.
• Logical separation of each customer's database and files; staff access limited to what their role needs, and logged.
• Hashed passwords, login rate limiting, CSRF protection, secure session cookies and protection against common web attacks.
• Hardened servers, firewalls exposing only necessary services, timely security updates and regular security testing.
• Regular backups and documented recovery procedures.

6. Personal data breaches

We will notify you without undue delay, and in any event within 72 hours, after becoming aware of a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data we process for you. Our notice will describe, as far as known, what happened, the data and data subjects affected, likely consequences and the measures taken or proposed. We will take reasonable steps to contain the breach and will support you in notifying the Data Protection Commission, other authorities and affected individuals where required. Our notification is not an admission of fault.

7. Audits

On reasonable written request, no more than once a year (or after a personal data breach, or if a regulator requires it), we will answer your written questions about our processing and provide relevant summaries of our security measures and test results. If that is not sufficient to show compliance, you or an independent auditor bound by confidentiality may carry out an audit on at least 30 days' notice, during business hours, at your cost and in a way that does not disrupt the Service or compromise other customers' data.

8. Your obligations

You confirm that you have a lawful basis for the processing you instruct, have given Subscribers and Users the notices required by Data Protection Laws, are registered with the Data Protection Commission where required, and that your instructions comply with Data Protection Laws.

Questions about these Terms: sales@crickettel.com. Cricket Telecommunication Ltd, BM 166, Coffee Street, GK-0025-6129, Tema, Ghana.