Privacy Policy

1. Introduction

Hedge Resource Centre ("HRC", "we", "us", or "our") provides a client and project management portal accessible at portal.hrcghana.com(the "Portal"). We respect your privacy and are committed to protecting the personal data and sensitive project information entrusted to us by our clients, consultants, and partners.

This Privacy Policy explains how we collect, store, use, and protect your information when you access or use the Portal.

2. Information We Collect

We collect information necessary to provide our consulting, project management, and portal services:

• Account Information: Your full name, email address, password hash, and assigned portal role (Client, Consultant, or Administrator).
• Google Account Information (OAuth): When you choose to sign in with Google, we collect your verified name, email address, and Google profile ID to authenticate your session. We do not store or access your Google password.
• Project & Collaboration Data: Project titles, descriptions, status, task milestones, uploaded deliverables, documents, and notes shared between you and your consultants.
• Billing & Invoice Information: Invoices generated for project work, itemized breakdowns, dates, and payment status records.
• Usage & Audit Logs: Timestamped records of portal activities (logins, account changes, document uploads, project updates) to ensure system security and accountability.

3. How We Use Your Information

We use the collected information for specific, legitimate business purposes:

• To provide, maintain, and secure your access to the client portal.
• To facilitate seamless communication and file exchange with your assigned consultants.
• To issue, track, and update invoices and project milestones.
• To send essential transactional notifications (such as welcome messages, password resets, project updates, and invoice alerts) via email.
• To comply with regulatory obligations, resolve disputes, and enforce our Terms of Service.

4. Third-Party Service Providers

We do not sell, rent, or trade your personal data. We only share information with trusted third-party service providers essential to portal operations:

• Google Identity Services: Used for secure single sign-on authentication.
• Resend: Used to deliver transactional email notifications (such as welcome greetings, project assignments, and invoice notifications).
• Database & Hosting Infrastructure: Managed cloud databases (Neon PostgreSQL) and hosting providers with encrypted transit and storage.

5. Data Security & Storage

We implement industry-standard administrative, technical, and physical security measures to safeguard your information:

• All traffic between your browser and the Portal is encrypted using Transport Layer Security (TLS/HTTPS).
• Passwords are cryptographically hashed using bcrypt and never stored in plain text.
• Authentication sessions use secure, HTTP-only, encrypted JWT tokens.
• Access controls ensure that clients can only view projects, invoices, and documents directly assigned to them.

6. Cookies & Tracking

The Portal uses essential HTTP cookies strictly required for user authentication and session security. We do not use third-party advertising cookies or cross-site tracking technologies.

7. Your Rights & Data Retention

You have the right to request access to the personal data we hold about you, request corrections to inaccurate records, or request deletion of your account (subject to legal and record-keeping requirements).

To exercise any of these rights, please contact our administrator team.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact: