Privacy

Who this is about

Three kinds of people use Rugero, and it keeps something different about each.

• People who sign in: a business's owner and its team.
• People a business writes down: its suppliers, and customers named on a sale.
• People who buy from a shop's online store.

What is kept

• When you sign in: your email address and your name. If you sign in with Google, the name and picture Google gives us. There are no passwords: you sign in with a link sent to your email, or with Google.
• What a business records: its products and their pictures, its stock, every sale, purchase, expense and movement of money, and who on its team recorded each. A supplier's name, phone number and email, and a customer's name and phone number, when the business enters them.
• When someone orders from a shop: the name they give, their mobile money number, any note about delivery, what they ordered and whether it was paid. This goes into that shop's records, and the shop sees it.
• Conversations with the agent: what you ask it, any file you attach, and what it answered, until you delete the conversation.
• In your browser: one cookie that keeps you signed in. How you set the app to look, and a shopper's cart, are kept in the browser itself and are not sent to us. There are no advertising cookies and nothing that follows you to other sites.

What it is used for

To run the service: to show a business its own records, to take and record its orders, to send sign-in links and invitations, and to tell a shop when an order has been paid. Nothing is used for advertising, and nothing is sold.

We look at a business's records only to fix a problem it has told us about, or to keep the service working and honest.

Who else sees it

Rugero is built on other companies' services. Each sees only its part.

• Cloudflare runs the service, stores the pictures, sends the email and, at checkout, checks that an order comes from a person.
• Our database provider stores the records.
• pawaPay and the buyer's mobile money operator are sent a buyer's number and the amount, to take the payment, and a shop's payout number, to pay it what it collected.
• Google, when a business uses the agent: what is asked, any attached file, and the records the agent reads to answer are sent to Google's model. A business that never opens the agent sends it nothing.

A product's picture is public: anyone with its link can open it. A shop's page shows what the shop chose to publish, and nothing else from its records.

How long it is kept

A business's records are kept for as long as the business is on Rugero. Books of account are not edited after the fact: a mistake is cancelled, and both the mistake and its cancellation stay. That is what makes them books.

When an owner asks us to delete their business, everything it recorded goes, for good: products, documents, its team's membership and its agent conversations. We cannot do this while money collected online is still waiting to be paid out to it.

Asking to see, correct or remove it

• If you sign in: write to us from the address you sign in with, and we will send you what we hold about you, correct it, or delete your account.
• If you bought from a shop, or a business wrote your details down: those records are the business's. Ask the shop first; if that does not work, write to us and we will pass it on.

When this changes

If what we keep or who sees it changes, this page changes first, and the date at the top with it. A change that matters is also sent to every owner by email.