Privacy Policy
This policy explains how Rwandeka LTD ("we", "us") handles data in operating TalkToMe, a software-as-a-service (SaaS) platform provided to businesses. It applies to our public website and to businesses' use of the platform.
Who we are
Rwandeka LTD operates TalkToMe and provides the service. When a business uses the platform, that business is responsible for the content of its conversations with its own customers, and we process data on its behalf in order to provide the service.
Data we process
- Business account information: registration data, authorised users, business details and account settings.
- Connected channel/account identifiers: technical identifiers of the account or channel a business connects to the platform (such as business messaging account identifiers), together with connection and authorisation status.
- Conversation and message data: content of inbound and outbound messages and their metadata (timestamps, delivery state, attachment type) when a business uses the platform to communicate with its customers.
- Contact identifiers: identifiers needed to associate conversations with the business's customers inside the platform (such as a phone number or an account identifier on the connected channel).
- Operational data: sign-in logs, security logs, error and monitoring logs, and technical device/browser information.
- Support data: information a business provides when contacting us for help.
Purposes of processing
- Providing and operating the service: receiving messages through the connected channel, displaying, managing and replying to conversations.
- Performing the business workflows the customer requests through the platform, where enabled for its account.
- Authentication, account and permission management, service protection and abuse prevention.
- Technical support, troubleshooting and service stability.
- Meeting legal or regulatory obligations that apply to us, or responding to lawful requests.
Sharing with service providers
We use service providers (such as hosting, database and cloud infrastructure providers, and providers of AI models used within the service) to run the platform. Data is shared with them only as needed to provide the service and under appropriate contractual commitments; they are not permitted to use the data for their own purposes.
Third-party platforms connected by the customer
When a business connects its own WhatsApp Business account or another external channel, use of that platform is also governed by its provider's policies and terms. We request the necessary authorisation from the customer to connect the account, and we use data received through that connection only to provide the service to that business. The customer can withdraw authorisation or disconnect the account through the platform's options or from within TalkToMe.
We do not sell data
We do not sell platform or customer-conversation data, and we do not use authorised data for purposes unrelated to providing the service to the customer that granted access. We do not use our customers' conversation content for advertising or build advertising profiles from it.
Retention principles
We retain data only for as long as is reasonably necessary to provide the service, protect and secure it, meet applicable contractual and legal obligations, and resolve disputes. When data is no longer needed, we take reasonable steps to delete or de-identify it. Retention periods vary depending on the type of data, the purpose and applicable requirements.
Security principles
We apply reasonable technical and organisational measures to protect data, including access controls, encryption of credentials for connected channels, security event logging and permission reviews. No method of electronic transmission or storage is completely secure, so we continually work to improve our controls.
Business customer rights and requests
A business customer, as the party controlling its data, may contact us to exercise rights regarding access to, correction of or deletion of its data, to object to certain processing, or to request a copy of its data, within the limits permitted by law and consistent with our obligations. We respond to lawful requests within a reasonable period and may ask for information needed to verify the requester's identity and authority.
Disconnecting an account or channel
A business may disconnect a connected channel or account from TalkToMe, or close its platform account. After disconnection we stop processing data received through that channel to provide the service, and we apply the retention principles above to any remaining data, in line with applicable legal obligations.
Business service, not for children
TalkToMe is intended for business accounts and is not directed at children, and we do not knowingly collect data from children.
Updates to this policy
We may update this policy from time to time to reflect changes in the service or applicable requirements. The updated version will be published on this page with a revised "last updated" date.
Contact
For privacy enquiries or data requests, contact us by email:
Operating entity: Rwandeka LTD — product: TalkToMe.