Legal
Privacy & Cookie Policy
Last updated: 31 October 2026
This policy explains how WeCall LTD collects, uses and protects personal data when you visit wecall.rw, contact us, use our customer portal or become a WeCall partner. We process personal data in line with Rwanda's Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy.
1. Who we are
WeCall LTD, company code / TIN 157085256, registered office KN 4 Ave, Kiyovu, Nyarugenge, Kigali, Rwanda.
WeCall LTD is the data controller for the data described here.
Privacy questions and requests: Customer@talk.wecall.rw.
2. What we collect
- Plans form: your name, company, e-mail, phone or WhatsApp number, the product you are interested in, and your agreement to be contacted.
- Live chat: the name you give (optional) and your messages.
- Customer portal accounts: name, e-mail, phone, company and role; your support tickets, e-mails and chats with us; and a record of actions in the portal (log in, changes) kept for security.
- Partners: your contact details, and the contacts you introduce to us. A contact is only followed up after they confirm they agree to be contacted by WeCall.
- Website use: only if you accept analytics or advertising cookies (see section 7).
Calls, numbers and recordings handled by the WeCall phone service itself are covered by your service agreement with WeCall.
3. Why we use it
- To answer your request and send you information and prices (your consent, given on the form).
- To provide, support and bill the WeCall service to customers (performance of our contract).
- To keep the portal secure and prevent fraud (our legitimate interest and legal obligations).
- To keep accounting and tax records (legal obligation).
- To measure visits and our advertising, only with your consent (cookies, section 7).
We do not sell personal data.
4. Who receives it
Only WeCall staff who need it for their role. We also use these service providers, who process data for us under contract:
- Supabase: database and login of the customer portal.
- hosting.com: hosting of the website and our e-mail.
- Google (Analytics and Ads): only if you accept those cookies.
Some of these providers store data on servers outside Rwanda. We only use providers that protect personal data with appropriate safeguards, as required by Rwandan law.
5. How long we keep it
- Requests that do not become customers: up to 2 years after our last contact, unless you ask us to delete them sooner.
- Customer records: for the duration of the service, then as long as Rwandan tax and accounting law requires.
- Security records of portal activity: as long as needed to protect the service and investigate incidents.
6. Your rights
You may ask to see the personal data we hold about you, to correct or delete it, to object to its use or restrict it, to receive a copy, and to withdraw your consent at any time (this does not affect what was done before). Write to Customer@talk.wecall.rw; we answer within 30 days. If you are not satisfied, you may complain to the National Cyber Security Authority (NCSA), the Rwandan data protection authority.
7. Cookies
Cookies are small files that a website stores in your browser. We use the following. Optional cookies are only set if you accept them in the cookie banner; you can change your choice at any time with Cookie settings (also at the bottom of every page).
| Name | Type | Purpose | Kept for |
|---|---|---|---|
| sb-…-auth-token | Essential | Keeps you logged in to the customer portal | Until you log out |
| wecall_chat_id | Essential | Reopens your live chat conversation | Until the chat is closed |
| wecall_ref | Essential | Credits the WeCall partner whose link you opened | 60 days |
| wecall_consent | Essential | Remembers your cookie choice | 6 months |
| _ga, _ga_* | Site improvement | Google Analytics: counts visits and how pages are used | 13 months |
| _gcl_au and Google Ads cookies | Relevant offers | Google Ads: measures which ads lead to requests, and may show WeCall ads on other sites | Up to 13 months |
The essential items are stored in your browser's local storage and are not used to follow you on other websites. How Google uses data: policies.google.com/technologies/partner-sites. You can also control personalised ads at adssettings.google.com.
8. Security
The website and portal are only reachable over encrypted connections (HTTPS). Each staff member only sees what their role needs, and every action in the portal is recorded in an activity log that cannot be changed.
9. Children
Our services are for businesses and are not directed at children under 18.
10. Changes
We may update this policy. The date at the top shows the latest version.