Privacy Policy

1. Who we are

Zuri Finance (“ZuriFi”, “we”, “us”) is a financial technology company based in Kigali, Rwanda. We are the data controller for the personal data described in this policy. You can reach us about anything in this policy at info@zuri.finance.

We process personal data in accordance with Rwanda’s Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy, and other laws that apply to our services.

2. What this policy covers

This policy covers the website at zurifi.com, including the careers pages, and summarises how personal data is handled when you use ZuriFi services such as ZuriFi Terminal and the developer platform.

3. Data we collect on this website

• Job applications. Applications are sent to us directly by email. We receive whatever you choose to send, such as your CV and cover note.
• Correspondence. If you email us, we keep the correspondence for as long as needed to handle your request.
• Technical data. Our hosting provider (Vercel) and network provider (Cloudflare) process connection data such as IP addresses and browser information in server logs, to deliver the site and protect it from abuse.

This website does not use analytics or advertising trackers, and does not set tracking cookies. Your light/dark theme preference is kept in your browser’s local storage and never leaves your device.

4. Data we process when you use ZuriFi services

ZuriFi is built to hold as little personal data as possible. Signing in to ZuriFi Terminal uses passkeys, and both authentication and wallet provisioning are handled by Turnkey, our wallet-infrastructure provider — we do not store passwords and we do not hold your private keys. Payouts to local rails are executed by a licensed payments partner, which receives the details needed to deliver each payout, such as the recipient’s mobile-money or bank details.

What we keep ourselves are transaction records: amounts, assets, timestamps and the identifiers needed to execute and account for each transaction. We keep them to provide the service, to keep it secure, and to meet our obligations under applicable financial laws, including anti-money-laundering requirements.

5. Why we are allowed to process your data

• Consent — when you submit a job application, or otherwise choose to share information with us.
• Contract — to provide services you have signed up for.
• Legal obligation — where financial, tax or anti-money-laundering laws require us to collect or keep records.
• Legitimate interest — to secure and operate our website and infrastructure.

6. Sharing and international transfers

We do not sell personal data. We share it only with the service providers named in this policy — Turnkey (authentication and wallet infrastructure), our payments partner (payout execution), and Vercel and Cloudflare (website delivery) — and with authorities where the law requires us to. Where data is stored or processed outside Rwanda, we do so in accordance with the transfer requirements of Law N° 058/2021.

7. How long we keep data

Job applications are kept for as long as we are evaluating them and for a reasonable period afterwards, in case a future opportunity fits. Correspondence is kept as long as needed to resolve the matter. Account and transaction records are kept for the periods required by the financial laws that apply to us, and are deleted or anonymised after that.

8. Your rights

Under Law N° 058/2021 you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where we no longer have a lawful reason to keep it;
• object to or restrict certain processing;
• receive a portable copy of data you provided to us;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info@zuri.finance. You also have the right to lodge a complaint with Rwanda’s supervisory authority for data protection, the National Cyber Security Authority.

9. Security

We apply technical and organisational measures appropriate to the data we handle, including passkey-based authentication, encryption in transit, access controls, and signed webhooks for platform events. No system is perfectly secure; if a breach affects your personal data, we will notify you and the supervisory authority as the law requires.

10. Children

Our website and services are not directed at children, and we do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

When we change this policy we will update it here and revise the effective date above. Material changes to how we handle service data will also be communicated to account holders directly.

12. Contact

Questions, requests or complaints about personal data: info@zuri.finance.