Privacy Policy
KenovaLabs is committed to protecting the privacy, confidentiality, and integrity of personal data entrusted to us, in strict compliance with Rwandan Law N° 058/2021 and international privacy benchmarks.
1. Data Controller Information
The data controller responsible for your personal data is:
2. Information We Collect
Depending on your interaction with our services, we may collect the following categories of personal data:
Full name, corporate email address, telephone / WhatsApp number, organization or company name, job title, and geographic location.
Details of the software, AI system, or automation pipeline you wish to build, budget expectations, timeline goals, and system architecture specifications.
IP addresses, browser type, operating system, pages viewed, time spent, and referral sources collected via security and performance logging.
3. Legal Bases for Processing
Under Rwandan Law N° 058/2021 (Articles 5 and 6), we only process personal data when we have a recognized legal basis:
- Performance of a Contract: To assess feasibility, prepare technical proposals, execute Statements of Work, and deliver software solutions requested by you.
- Consent: When you voluntarily submit project details through our "Talk to our team" form or newsletter subscription.
- Legitimate Interests: To maintain secure digital infrastructure, prevent fraudulent access, and refine our enterprise technology offerings.
- Legal Obligation: To comply with applicable financial, statutory, and regulatory duties under Rwandan jurisdiction.
4. Zero Data Monetization & Third-Party Sharing
We do not sell, rent, trade, or monetize personal data under any circumstances.
Personal data is accessed only by authorized KenovaLabs engineers and architects under strict confidentiality obligations. Trusted third-party cloud infrastructure providers (e.g., encrypted hosting and version control providers) only process data on our verified instructions and under binding data processing agreements.
5. Technical & Organizational Security
KenovaLabs enforces state-of-the-art cybersecurity defenses to safeguard data against accidental loss, unauthorized access, alteration, or disclosure:
6. Your Rights as a Data Subject
Pursuant to Law N° 058/2021 (Articles 15 to 22), you hold guaranteed rights concerning your personal data:
- Right to be Informed: To receive concise, transparent information on how your data is used.
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To have inaccurate or incomplete data updated promptly.
- Right to Erasure ("Right to be Forgotten"): To request deletion of your personal data where no statutory justification for retention persists.
- Right to Restrict or Object to Processing: To challenge processing conducted under legitimate interests.
- Right to Data Portability: To receive your personal data in a structured, machine-readable format.
7. Privacy Contacts & Data Protection Officer
To exercise any of your data protection rights, request information, or submit a privacy inquiry, please contact our Data Protection desk:
Require specialized compliance or Enterprise NDA terms?
We regularly tailor security protocols and bilateral NDAs for government agencies, regulated fintechs, and healthtech platforms.
