Privacy Policy

Pluraloop Technologies Ltd (“Pluraloop”, “we”, “us”) is a digital transformation company registered with the Rwanda Development Board and based in Nyarugenge, Kigali, Rwanda. We are the data controller for the personal data described in this policy.

You can reach us about anything in this policy at hello@pluraloop.rw.

This policy applies to:

• Our website at pluraloop.rw and its client portal.
• Our WhatsApp business messaging, including Loop Books, our WhatsApp-based transaction recording service, operated through the WhatsApp Business Platform (Meta Cloud API).
• Communication with us by email, WhatsApp, or through the website.

We process personal data in accordance with Rwanda’s Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (“the Data Protection Law”).

• To respond to your enquiries and provide our services.
• To operate Loop Books: turning your WhatsApp messages into bookkeeping records, answering your queries about your own records, and sending you summaries you have asked for.
• To manage subscriptions, verify numbers, and secure access to the client portal.
• To understand website usage in aggregate and improve the site.
• To comply with legal obligations under Rwandan law.

We do not sell personal data, and we do not use your business records for advertising or to train AI models.

• Our WhatsApp services run on the WhatsApp Business Platform provided by Meta. Messages between you and us travel through Meta’s infrastructure and are also subject to WhatsApp’s Privacy Policy.
• To turn a free-form message into a bookkeeping record, the message content is processed by Google’s Gemini API. We use it for inference only, with data use for model improvement disabled.
• Voice notes and photos are processed to extract the transaction, then the media bytes are discarded immediately. We keep only the extracted record; we do not store copies of your voice notes or photos on our servers.
• You only ever hear from us in response to your own messages, except for an optional daily summary that you can turn off at any time.

• Contract: providing the services you have subscribed to (Loop Books, projects, subscriptions).
• Consent: messaging us on WhatsApp, opting in to a trial or the daily digest, analytics cookies. You can withdraw consent at any time.
• Legitimate interest: securing our services, preventing abuse, and measuring website usage in aggregate.
• Legal obligation: records we must keep under Rwandan law.

We share personal data only with the service providers we need to operate, and only for the purposes above:

• Meta Platforms (WhatsApp Business Platform), for message delivery.
• Google: Google Analytics (website usage) and the Gemini API (message understanding, inference only).
• Cloud hosting and database providers: the infrastructure our website and records database run on.

We may also disclose data where required by law or a competent Rwandan authority. We never sell personal data to anyone.

• Business records (Loop Books) are kept for as long as your subscription is active, so your books stay complete. Corrections and deletions are recorded as updates to the ledger rather than silently erasing history, until you ask us to delete everything (section 9).
• Verification codes expire and are deleted automatically after a short period.
• Media (voice notes, photos) is discarded immediately after processing and is not retained.
• Delivery logs contain message identifiers and status only, never content.
• Analytics data is retained according to Google Analytics’ standard retention settings.

Under the Data Protection Law, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased.
• Object to or restrict processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time.

To exercise any other right, email hello@pluraloop.rw. If you believe we have not handled your data properly, you may lodge a complaint with the National Cyber Security Authority (NCSA), Rwanda’s supervisory authority for data protection.

• Google Analytics cookies (_ga and related), for website usage measurement.
• Session cookies: set only when you log in to the client portal, to keep you signed in.
• Local storage: your theme preference, stored on your device only.

You can block or delete cookies in your browser settings; the public website works fully without them.

We protect personal data with appropriate technical and organisational measures: encrypted connections (HTTPS) everywhere, signed and verified webhooks for WhatsApp events, signed session cookies for the client portal, access limited to those who need it, and a design that avoids storing sensitive media at all. No system is perfectly secure, but minimising what we keep is our first line of defence.

Our service providers (Meta, Google, and our hosting providers) may process data on servers outside Rwanda. Where that happens, we rely on those providers’ contractual safeguards and choose configurations that minimise what is shared, in line with the Data Protection Law’s requirements for transfers.

Our services are for businesses and are not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

When we change this policy we will update it here and revise the “last updated” date above. For significant changes affecting Loop Books clients, we will also tell you on WhatsApp.

Questions, requests, or concerns about your data: hello@pluraloop.rw · Pluraloop Technologies Ltd, Nyarugenge, Kigali, Rwanda.