1. Who We Are
ChatBiz Rwanda Ltd ("ChatBiz", "we", "us") operates the ChatBiz platform at chatbiz.duckdns.org. We are committed to protecting your personal data in accordance with Rwanda's Law No. 058/2021 of 13/10/2021 on the Protection of Personal Data and Privacy.
2. Data We Collect
From Business Accounts:
- Business name, email address, phone number
- Industry and business type
- Payment information (processed by licensed providers — we do not store card numbers)
- WhatsApp API credentials (access tokens, stored encrypted)
- Usage data (messages sent, campaigns, logins)
From End Customers (via your business use):
- WhatsApp phone numbers
- Message content and conversation history
- Contact names (if provided by the business)
3. How We Use Your Data
- To provide and improve the ChatBiz platform
- To process payments and manage subscriptions
- To send service notifications (billing alerts, system updates)
- To deliver WhatsApp messages on your behalf
- To generate anonymized usage statistics
- To comply with legal obligations
4. Data Sharing
We share data only with:
- Meta Platforms Inc. — WhatsApp Cloud API (message delivery)
- OpenAI — AI Bot responses (conversation context only)
- Render.com — Cloud hosting infrastructure
- Payment providers — MTN MoMo, Airtel Money, card processors
- Legal authorities — when required by Rwandan law
We do not sell your data to third parties.
5. Data Security
We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. WhatsApp access tokens are stored encrypted. Passwords are hashed using bcrypt.
6. Data Retention
- Active account data: retained while account is active
- Message history: retained for 12 months
- Payment records: retained for 7 years (legal requirement)
- After account deletion: data deleted within 30 days
7. Your Rights
Under Rwandan data protection law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing
- Data portability
To exercise these rights, contact us at privacy@chatbiz.rw
8. Cookies
ChatBiz uses session cookies necessary for authentication and security. We do not use advertising or tracking cookies.
9. End Customer Data (Your Responsibility)
As a business using ChatBiz, you are the data controller for your customers' data. You are responsible for obtaining proper consent before messaging customers, complying with WhatsApp opt-in requirements, and responding to your customers' data requests.
10. Changes to This Policy
We may update this policy and will notify you via email or platform notification with 14 days notice before changes take effect.
11. Contact
Data Protection Officer: privacy@chatbiz.rw
ChatBiz Rwanda Ltd, Kigali, Rwanda