Legal
Privacy Policy
Last updated: January 2026
What we collect
We collect your name, contact info, and the documents you upload. Nothing else unless you provide it.
We collect information you provide directly: name, phone number, email address, and any documents uploaded to complete your service request. We also collect technical data including IP addresses, device type, and usage patterns to improve the service. We do not collect sensitive personal data (biometrics, health data, political opinions) beyond what is contained in government documents you upload for processing.
How we use your data
To process your government applications and keep you updated. We never sell your data.
Your data is used exclusively to: (1) process your government service requests, (2) communicate updates about your application, (3) comply with legal obligations, (4) improve our platform through aggregated, anonymised analytics. We do not sell, rent, or share your personal data with advertisers or data brokers.
How long we keep your data
Documents and personal data are deleted after 24 months. Legal records may be kept longer.
Active application data is retained for the duration of your application plus 24 months. After that, your documents and personal details are permanently deleted. We may retain minimal records (application reference, service type, outcome) for up to 7 years to comply with Rwanda's commercial and tax law. You can request early deletion at any time and we will comply within 30 days, subject to legal retention obligations.
Your rights
You can access, correct, delete, or export your data at any time. Just ask.
Under Rwanda's Law No. 058/2021 on Personal Data Protection and Privacy, and where applicable GDPR, you have the right to: access your data, correct inaccurate data, request deletion, object to processing, request data portability, and withdraw consent at any time. To exercise these rights, contact our DPO at privacy@hebuza.rw. We will respond within 30 days.
Contact our DPO
Our Data Protection Officer handles all privacy requests.
Data Protection Officer: Claudine Niyomugabo Email: privacy@hebuza.rw Address: KN 4 Ave, Kigali City Tower, 3rd Floor, Kigali, Rwanda For complaints, you may also contact the Rwanda Utilities Regulatory Authority (RURA) which serves as the national data protection supervisory authority.