Privacy Policy

1. Who we are

E-NJIZA ("we", "us") runs the E-NJIZA marketplace at injiza.com and the E-NJIZA mobile apps for iOS and Android. It connects businesses with publishers (influencers, creators and media houses) for advertising campaigns. This policy covers all of them.

• Questions about this policy, or requests about your data, go to support@injiza.com.

2. Information we collect

We only collect what we need to run the marketplace:

• Account details: your name or company name, email address, phone number, password (stored only as a secure hash), account type, and business or content categories.
• Profile content: profile photo, bio, social media links, channels, packages, and products and campaigns you create.
• Verification documents: identity, company or tax documents you upload so we can verify your account and prevent fraud.
• Financial information: account balances, earnings, commissions, transaction history, the mobile money or bank payout details you save, and proof-of-payment files you upload. We do not collect or store card numbers.
• Messages: conversations and attachments you send in in-app chat, including with our support team, and reports you file about other users.
• Usage data: clicks and conversions on affiliate links, used to calculate commissions and to show you your own campaign statistics.
• Device data: a push notification token if you allow notifications, plus basic technical information (device type, operating system and app version) needed to keep the service secure and working.

3. Camera, photos and notifications

• The app uses your camera or photo library only when you choose to add a profile photo, a document or a chat attachment. We only receive the files you pick.
• Notifications are optional. You can turn them off at any time in your device settings, and in-app notifications keep working.
• The app does not access your microphone, contacts or precise location.

4. How we use your information

• To create and secure your account, sign you in, and verify businesses and publishers.
• To run campaigns, ad requests and the marketplace, and to track affiliate links so commissions are calculated correctly.
• To process deposits, payouts and refunds, keep accurate financial records, and resolve disputes.
• To deliver messages and notifications, and to answer support requests.
• To keep the community safe: reviewing reports, removing content that breaks our Terms, and preventing fraud and abuse.
• To meet our legal, tax and accounting obligations.

5. What other users can see

• Your public profile (name, photo, bio, categories, social links and campaign statistics) is visible to other signed-in users so businesses and publishers can find each other.
• Messages are visible to the people in the conversation.
• Verification documents, phone numbers, financial details and payout information are never shown to other users.

6. Sharing your information

We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking. We share it only:

• With service providers that run the platform for us: cloud hosting, file storage (Cloudinary), email delivery, and push notification delivery (Expo, Apple Push Notification service and Firebase Cloud Messaging). They may use the data only to provide their service to us.
• With the other party to a campaign or ad request, limited to what is needed to deliver it.
• When the law requires it, or to protect the rights, safety or property of our users or E-NJIZA.
• With a successor if E-NJIZA is merged or acquired, in which case this policy continues to apply.

7. Storage, security and retention

• Data is encrypted in transit (HTTPS). Passwords are hashed, and sign-in tokens are kept in your device's secure storage (Keychain on iOS, Keystore on Android).
• Our providers may store data outside Rwanda. Where they do, we require safeguards that protect it to the standard of this policy.
• We keep your data while your account is open. When you delete your account, your personal information is removed straight away, except the records described in section 8.

8. Deleting your account

• You can delete your account at any time: in the app under Account → Delete account, or on the web under Settings → Delete Account. Deletion takes effect immediately.
• We delete your name, photo, bio, phone number, social links, verification documents, saved payment methods, notifications and signed-in sessions, and we take down your channels and active campaigns.
• We keep payment, earnings and commission records, with your personal details removed, for as long as accounting and tax law requires. Messages you sent remain visible to their recipients.
• If you can't sign in, email support@injiza.com from your account's email address and we will delete your account within 30 days.

9. Your rights

• You can view and update most of your information in the app or on the website at any time.
• Under Rwanda's data protection law (Law No. 058/2021) and similar laws, you may ask us for a copy of your data, ask us to correct or delete it, object to some processing, or withdraw consent. Email support@injiza.com and we will reply within 30 days.
• You can also complain to Rwanda's data protection authority, the National Cyber Security Authority (NCSA).

10. Children

• E-NJIZA is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, contact us and we will delete it.

11. Changes to this policy

• We may update this policy as the service changes. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.