Legal

Privacy Policy

Version 2026-10-04 · Effective 4 October 2026

This policy explains what EBAOne AI Studio (“EBAOne”, “we”, “us”) collects when you use the service at trovade.com, why, who else processes it, how long it is kept, and the choices you have. We do not sell your personal data and we do not use advertising or analytics trackers.

1. Who we are

EBAOne AI Studio is operated from Ghana. For any privacy question or request, write to kingckbs@gmail.com. We handle personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.

2. What we collect

Account details: your username, the name you give, your email address if you add one, and your password, which we store only as a salted, slow hash (never in readable form).
Your content: the goals, questions, instructions and files you give the studio, the projects and code you keep in it, and the work the studio produces for you.
Usage and billing: your plan, your credit balance and its history, what each piece of work cost, and records of payments. Card and mobile-money details are entered with our payment processors; we receive only the outcome, amount and reference.
Technical data: your IP address, used to limit repeated sign-in and sign-up attempts and recorded in our server logs, and a sign-in token kept in your browser’s local storage so you stay signed in. We set no advertising or tracking cookies.

3. How we use it

To provide the service: plan and run the work you ask for, check it, keep your projects and history, and show you what it cost.
To bill you correctly and to keep the service secure, for example by limiting password guessing and keeping accounts strictly apart.
To improve the service. We measure how work performed — cost, time taken, which model was used and whether its checks passed — and use those measurements to plan future work better. Examples learned from files you approved are used only within your own account or organisation. Your content is never shown to other accounts.
To contact you about your account or important changes to the service, if you gave an email address.

We rely on our contract with you to provide the service, on your consent where we ask for it, and on our legitimate interest in keeping the service secure and working well.

4. Who else processes your data

To do the work you ask for, the content of your requests — including any files or code they include — is sent to third-party AI model providers. We reach them through OpenRouter (United States), which forwards each request to the provider of the model chosen for it, such as Anthropic, OpenAI, Z.ai, DeepSeek or Alibaba (Qwen). These providers process your content to produce a response under their own terms and privacy policies, and some keep requests for a limited time to detect abuse. Do not include information in a request that you are not willing to have processed this way.

We also use:

Contabo (Germany) — the servers that run the service and hold its database.
IDrive e2 (data centre in Paris, France) — off-site copies of our nightly backups, which are encrypted on our server before they are sent.
Paystack and Stripe — payment processing, only when you make a payment.
Resend (United States) — sends account emails, such as password-reset links, to the address on your account.

These services may be located outside Ghana. We use them only to run the service and choose providers that protect the data they handle.

5. How long we keep it

Your account, content and history are kept for as long as your account exists.
When you delete your account, it and your own work are removed from the live service immediately. Copies in backups expire within 30 days.
Server logs are rotated automatically and kept only briefly.
Payment processors keep their own records of transactions as the law requires.

6. Your rights and choices

See and take your data: in the app, open Profile & security and choose Download my data.
Delete your account: Profile & security → Delete account.
Correct your data, object to how it is used, or ask any question: email kingckbs@gmail.com. We reply within 30 days.
Complain: you can contact the Data Protection Commission of Ghana.

7. Security

The service runs over encrypted connections (HTTPS). Passwords are stored only as salted, slow hashes. Changing your password signs you out on every other device. Accounts are kept apart from each other, and off-site backups are encrypted before they leave our server. You can turn on two-step sign-in with an authenticator app; its secret is stored encrypted. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the regulator as the law requires.

8. Age

The service is for people aged 18 or older. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, contact us and we will delete it.

9. Changes to this policy

When we change this policy we will update its version date above. For significant changes we will tell you in the app or by email before they take effect.