Your Privacy, Protected.

We collect information you provide directly and data generated through your use of WeddConnect to deliver and improve our services.

• Personal identification information: full name, email address, phone number, and profile photo.
• Account credentials: encrypted passwords and authentication tokens.
• Vendor-specific information: business name, service category, pricing, location, portfolio images, and contact details.
• Transaction data: subscription plan selections, payment method (mobile money or card), transaction reference numbers, and payment proof uploads.
• Usage data: pages visited, search queries, posts viewed, likes, reviews submitted, and time spent on the platform.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Location data: city and country derived from your IP address or provided during registration.
• Communications: messages, support requests, and feedback you send to us.

Your information is used solely to operate, maintain, and improve WeddConnect. Specifically, we use it to:

• Create and manage your account and verify your identity.
• Personalize your experience recommending vendors and posts based on your preferences and location.
• Process subscription payments and maintain accurate transaction records.
• Enable vendors to showcase their services and reach potential clients.
• Send transactional emails: account confirmations, subscription receipts, and important platform updates.
• Respond to your support requests and inquiries.
• Monitor platform activity to detect fraud, abuse, and security threats.
• Analyse aggregated, anonymised usage patterns to improve platform features.
• Comply with applicable Rwandan laws and regulations, including the Law No. 058/2021 on the Protection of Personal Data and Privacy.

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• With vendors you interact with: when you contact or book a vendor, relevant profile information is shared to facilitate the service.
• With payment processors: transaction data is shared with our payment partners (MTN Mobile Money, Airtel Money, and card processors) solely to complete payments.
• With cloud service providers: we use AWS for secure file storage. These providers are bound by strict data processing agreements.
• With legal authorities: we will disclose information if required by a valid court order, government request, or to protect the rights and safety of our users or the public.
• In a business transfer: if WeddConnect is acquired or merges with another entity, user data will be transferred under the same privacy protections described in this policy.
• We never share your data with advertisers, marketing firms, or third parties for commercial purposes without your explicit consent.

We take the protection of your personal data seriously and implement the following technical and organisational safeguards:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Payment proof images are stored in private AWS S3 buckets with restricted access policies.
• Access to production databases is limited to authorised personnel only, with multi-factor authentication required.
• We conduct regular security reviews and vulnerability assessments.
• In the event of a data breach that affects your rights, we will notify you and the relevant authorities within 72 hours as required by law.

We retain your personal data only for as long as necessary for the purposes described in this policy.

• Active account data is retained for the lifetime of your account.
• Transaction records are retained for a minimum of five (5) years to comply with Rwandan financial regulations.
• When you delete your account, your personal data is permanently deleted within 30 days, except where retention is required by law.
• Aggregated, anonymised analytics data may be retained indefinitely as it cannot identify any individual.

Under the Law No. 058/2021 on the Protection of Personal Data and Privacy in Rwanda, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to withdraw consent: withdraw any consent you have given for data processing at any time.
• Right to object: object to processing of your data for specific purposes.
• To exercise any of these rights, contact us at info@weddconnect.com or +250 790 860 446.

We use essential cookies and session tokens to operate the platform. We do not use advertising or tracking cookies.

• Session cookies: used to keep you logged in during your visit. These are deleted when you close your browser.
• Preference cookies: used to remember your settings (e.g., language, notification preferences).
• We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers.
• You can disable cookies in your browser settings, but this may affect platform functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

• We will notify registered users of material changes via email at least 14 days before they take effect.
• The updated policy will be posted on this page with a revised "Last Updated" date.
• Continued use of WeddConnect after the effective date constitutes acceptance of the updated policy.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection team:

• Email: info@weddconnect.com
• Phone: +250 790 860 446
• We aim to respond to all privacy-related inquiries within 5 business days.