Legal
Acceptable use policy
Last updated 20 October 2026 · Effective 20 October 2026
Agoo holds details of people who walk through your door, many of whom never chose to use it. This policy sets out what you may not do with it. It applies to every organisation that uses Agoo, to everyone who uses it on their behalf, including through the API, and to everyone who makes forms on Agoo Forms, and forms part of our terms of service.
On this page
1. Respect the people you record
Don’t use Agoo to:
- collect personal data without a lawful basis, or without telling people what you collect and why;
- stalk, harass, intimidate or secretly track anyone, or monitor staff beyond what they have been told about and the law allows;
- put people on a watchlist because of their ethnicity, religion, gender, disability, political opinion or any other protected characteristic, or without a specific, legitimate reason;
- enrol anyone in face clock-in without a lawful basis and a notice published to them first, or try to use face matching on visitors or anyone else who isn’t enrolled staff;
- collect ID details, health information or data about children that you don’t need;
- ask anyone for a photo, scan or copy of their Ghana Card, through a file, a document, a message or anything else in Agoo, to check who they are: the National Identity Register (Amendment) Regulations, 2026 (L.I. 2523) forbid relying on one, and Agoo never keeps an image of a Ghana Card;
- record hours, breaks, leave, consents or approvals you know are false, or use rosters, timesheets or payroll files to deny staff the rest, leave or pay the law gives them;
- share a Wi-Fi network you aren’t entitled to share;
- make decisions that significantly affect people based only on AI output, without a person reviewing them.
2. Messages
Don’t use Agoo’s SMS, WhatsApp or email to:
- send marketing or bulk messages to people who haven’t agreed to receive them, where the law or the channel’s rules require consent;
- send content that is unlawful, threatening, fraudulent, deceptive or hateful, or that infringes someone else’s rights;
- impersonate another person or organisation, or use a sender ID or name you aren’t entitled to;
- break the rules of the channel, such as WhatsApp’s business messaging policies.
Agoo’s WhatsApp number is Agoo’s own. It carries Agoo’s messages to visitors and guests about their visits and bookings, such as passes and reminders, and replies to people who have written. You may not use it for marketing, promotions, broadcasts or announcements to groups of people, whatever your plan and whether or not they have agreed to receive them.
When your team answers visitors on WhatsApp, its messages go out from a number that every organisation on Agoo shares, and WhatsApp judges that number by how people react to everything sent from it. So in those conversations, don’t:
- send offers, promotions, news or anything else the person didn’t ask about;
- keep writing to someone who hasn’t answered, or send follow-ups one after another;
- write to someone who has asked you to stop, or try to reach them again on WhatsApp by another route;
- message people who have no visit or booking with you.
To protect the number for everyone, we limit how many messages an organisation’s team can send in these conversations, and we may pause an organisation’s replies, straight away and without warning you first, when people ask to stop after hearing from it, when WhatsApp refuses its messages, or when we reasonably believe its messages put the number at risk. We tell its Owners and Admins when we do and when replies are open again. While replies are paused, what your visitors write is still received and kept, and your passes, reminders and alerts on WhatsApp keep going.
3. QR codes and their links
People trust a code they scan without seeing where it leads. Don’t make QR codes or short links with Agoo that:
- lead to malware, or to anything that installs software or changes a device without the person knowing;
- phish, for example a page that pretends to be a bank, a government service or another organisation to collect passwords, card or Mobile Money details;
- run scams or fraud, such as fake payment requests, fake prizes or investment schemes;
- lead to content that is unlawful, sexually exploits children, incites violence or hatred, or infringes someone else’s rights;
- hide where they lead in order to get around another service’s safety checks or rules.
We may pause or disable a tracked code’s short link that breaks this policy, or that we reasonably believe puts people at risk, straight away and without warning you first, and we may remove such codes from your account. We tell you when we do, and why.
4. Forms
The people who answer a form, whether in Agoo Forms (agooforms.com and its apps) or on your visitor pages, trust you with what they type. Agoo Forms follows the same safety policy as the rest of Agoo, with a section of its own. Don’t make a form that:
- phishes, or asks for passwords, PINs (Mobile Money PINs included), one-time or verification codes, card numbers or security answers, whatever reason it gives;
- collects payments any way other than through the payment step Agoo provides;
- pretends to be a bank, a mobile network, a government body or any other person or organisation you don’t represent, or uses their name or look to make people trust it;
- runs a scam, such as a fee before a job, a loan or a scholarship, a prize nobody entered for, or a promise to multiply money;
- hides who receives the answers, or calls itself anonymous when it isn’t, or asks for more than its purpose needs, such as a Ghana Card number for a choir rehearsal;
- asks for a photo, scan or copy of a Ghana Card, through a file or photo question or any other way, to check who someone is: the National Identity Register (Amendment) Regulations, 2026 (L.I. 2523) forbid relying on one. Asking for the typed number with a Ghana Card question is fine when your purpose needs it;
- collects details of children under 18 without first asking a parent or guardian for their consent, or seeks to exploit a child in any way;
- collects health details, sexual life, religion, ethnicity, political views or criminal records without a lawful reason, such as the consent of the people who answer;
- harasses or threatens anyone, spreads hate or sexual content, or collects details to stalk or expose someone;
- sells or offers illegal goods or services;
- is spam: sent to people who didn’t ask for it, or used to gather contact details to sell or to message people without consent.
How we check forms
Every form is checked when it’s published. A form that seems to ask for passwords, PINs, codes or card details, or that uses the name of a bank, a mobile network or a government body when its workspace isn’t verified as them, is held for a person on our safety team before it takes any responses; the maker sees that we’re checking it, usually within a few hours. Any other form publishes at once. Agoo’s checks also read the forms of new workspaces, and forms people have reported, within a minute of publishing; they can hold a form for a person, never take it down. A new workspace can publish only a few forms on its first day.
Reports and decisions
Anyone can report a form with Report this form, on the form itself, choosing the rule they think it breaks. We never tell the maker who reported it. A report about a child’s safety, or several reports that a form is after passwords or payment details, hold the form while a person looks. People on our safety team make every decision. They may let a form open again, ask its maker to change it (it stays closed until they do and we check the new version), or take it down: its page then says it was taken down and for which rule, and tells anyone who typed a PIN or password to change it. They may also pause publishing in a workspace, while its forms keep taking responses, or suspend it, which stops its forms and leaves it read-only, for a time or until we lift it. We act straight away when people are at risk, and email the workspace’s Owners and Admins each time.
An Owner or Admin can appeal a decision once, within 90 days of it. Someone who made neither the decision nor its case looks again within 7 days. A hold while we check isn’t a decision, and ends when a person has looked.
5. Agoo itself
Don’t:
- try to access another organisation’s data, or any part of Agoo you aren’t authorised to use;
- probe, scan or test Agoo’s security except as described in section 6;
- overload Agoo, attempt denial-of-service, or get around rate limits, plan limits or security controls;
- upload malware, or use Agoo to distribute it;
- scrape Agoo, or use automated means to access it other than the API and tools we provide;
- resell or provide Agoo to others without a written agreement with us;
- reverse engineer Agoo, except as the law allows;
- use Agoo for anything unlawful in Ghana or wherever you operate.
6. Security research
We welcome reports of security weaknesses made in good faith. Test only against your own organisation, preferably in test mode; never access, change or delete other organisations’ data; and don’t degrade the service for others. Report what you find to agoo@ardentafrica.com with “Security” in the subject, as our security page describes. We won’t take legal action against research that follows these rules.
7. If this policy is broken
We may remove content, disable a feature, API key or app, or suspend or close an account, as the terms of service describe. We act in proportion to the problem and tell you where we can. We may report unlawful activity to the authorities.
To report misuse of Agoo, email agoo@ardentafrica.com with “Abuse report” in the subject.