Privacy Policy

1. Introduction

SHEREHE ("we", "our", or "us") operates the SHEREHE platform (sherehe.io) and the Keza AI assistant accessible via WhatsApp, Telegram, and web. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Personal Information

• Full name and email address (during registration)
• Phone number (for WhatsApp/SMS communication and Mobile Money payments)
• Event details (dates, locations, guest lists, budgets)
• Payment information processed through PawaPay (MTN MoMo, Airtel Money)

Automatically Collected Information

• Device information and browser type
• IP address and approximate location
• Usage data and interaction patterns with our platform
• WhatsApp and Telegram message content for AI assistant functionality

3. How We Use Your Information

• To provide and maintain our event planning services
• To process Mobile Money contributions and payments
• To send event notifications, reminders, and invitations
• To power the Keza AI assistant for personalized event planning
• To improve our services and user experience
• To communicate with you about your account and events
• To detect and prevent fraud or abuse

4. WhatsApp & Messaging Data

When you interact with Keza via WhatsApp or Telegram, we process your messages to provide AI-powered event planning assistance. We store conversation history to maintain context and improve our service.

We do not share your WhatsApp messages with third parties. Message data is used solely for providing our services and is processed in accordance with Meta's WhatsApp Business Platform policies.

5. Payment Data

Mobile Money payments are processed securely through PawaPay. We do not store your full Mobile Money PIN or account details. We retain transaction references, amounts, and status for record-keeping and dispute resolution.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: PawaPay (payments), Meta (WhatsApp), hosting providers
• Event participants: Guest names and RSVP status visible to event organizers
• Vendors: Booking details shared with selected vendors
• Legal requirements: When required by Rwandan law or to protect rights

7. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing (bcrypt), JWT token authentication, and webhook signature verification. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Event data and contributions are kept for financial record-keeping as required by Rwandan regulations. You may request deletion of your account and associated data at any time.

9. Your Rights

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Withdraw consent for WhatsApp/Telegram communications

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: support@sherehe.io
• Website: sherehe.io
• Location: Kigali, Rwanda