Privacy Policy

Who we are

AI7 Optivaro Ltd ("AI7 Optivaro", "we", "us") is a company registered in Rwanda — RDB Registration No. 260611043184510, TIN 155865478 — with offices at KG 313 St, Kibagabaga, Kigali and 50 KK 15 Rd, Sonatube, Kicukiro, Kigali.

We are the data controller for the personal data described in this policy. For anything relating to your data, contact us at info@ai7optivaro.com or +250 783 282 759.

What we collect

We only collect what you give us. Specifically:

• When you submit a form or message us: your name, business name, phone/WhatsApp number, email address, and whatever you write in the message field.
• When you use the site: standard technical data your browser sends (IP address, browser type, pages visited) and anonymous usage analytics. We do not use this to identify you personally.

We do not collect payment card details on this website, and we do not knowingly collect data from anyone under 18.

Why we use it

Your data is used for one thing: responding to you and delivering work you asked for.

• To reply to your enquiry and arrange a call or audit.
• To follow up about the specific service you asked about.
• To deliver, support and improve services you have engaged us for.
• To meet our legal, tax and accounting obligations in Rwanda.

We do not sell your data. We do not rent it, trade it, or share it with advertisers. We do not add you to unrelated marketing lists.

Legal basis

We process your data on the basis of your consent (you chose to contact us), the performance of a contract where you become a client, and our legitimate interestin responding to business enquiries — as provided under Rwanda's Law N°058/2021 relating to the protection of personal data and privacy.

Where it is stored and who can see it

Enquiries are stored in our secured database (Supabase) and routed to our internal workflow system so a human replies quickly. Access is limited to AI7 Optivaro staff who need it to respond to you. These providers may store data on servers outside Rwanda; where that happens, we rely on providers that apply recognised security and data-protection standards.

We use service providers strictly as processors acting on our instructions — including hosting (Vercel), database (Supabase), email, and workflow automation (n8n on our own server). They may not use your data for their own purposes.

How long we keep it

Enquiries that don't become projects are kept for up to 24 months, then deleted. Client records are kept for the length of the engagement plus the period Rwandan tax and company law requires us to retain business records. You can ask us to delete yours sooner.

Your rights

Under Rwandan data protection law you have the right to:

• Ask what personal data we hold about you, and get a copy.
• Have inaccurate data corrected.
• Have your data deleted.
• Object to or restrict how we process it.
• Withdraw consent at any time.
• Lodge a complaint with Rwanda's National Cyber Security Authority (NCSA).

To exercise any of these, email info@ai7optivaro.com. We respond within 30 days, free of charge.

Security

The site is served over HTTPS with a strict content security policy. Our database enforces row-level access control, administrative access requires authentication, and credentials are never exposed in the browser. No system is perfect — if you believe your data has been affected, tell us immediately and we will investigate and notify you and the authorities as required by law.

Cookies and analytics

We use only what's needed to run the site plus privacy-respecting analytics to understand which pages are useful. We do not use advertising cookies or cross-site tracking pixels for profiling. You can block cookies in your browser without losing access to the site.

Changes

If we change this policy we will update the date at the top of this page. Material changes affecting existing clients will be communicated directly.