What Inzira collects and what you control.

Inzira is the operator of the Inzira platform, based in Kigali, Rwanda. We decide what personal data is collected through the platform and how it is used, which makes us the data controller. Privacy contact: privacy@inzira.app.

Information you give us directly:

• Email address
• Name, where you choose to give it
• Country of residence and nationality, where voluntarily provided
• Investor type and investment stage
• Investment interests and intended business activity
• Company, project, funding, employment, premises and timing details you add to your private workspace
• Editable application draft content and the acknowledgement recorded before each draft is created
• Questionnaire and market research responses
• Ratings, feedback and messages you send us

Information generated as you use Inzira:

• Pages visited and features used
• Roadmap interactions, such as stages marked complete or documents ticked off
• Events such as opening an application link or submitting a form
• A random session identifier stored in your browser
• Basic device and browser information where your browser sends it

Signed-in client profiles, stored projects, document readiness, draft sections and draft acknowledgements are kept in your private account. Device-saved project and checklist information may also remain in your browser to keep your work available. Inzira does not ask for passport numbers or identity-document uploads in the draft workspace.

• Creating your personalized investor roadmap
• Providing the service or follow-up you asked for
• Prefilling editable working drafts from information you provide
• Conducting market research into the investment journey across Africa
• Improving Inzira and deciding what to map or verify next
• Understanding how investors move through the platform
• Responding to your feedback, questions and requests
• Sending newsletters and updates, only where you have consented
• Security, fraud prevention and keeping the platform working
• Meeting legal or regulatory obligations where they apply

Your answers to the path builder shape which procedures, incentives, zones and market options you see. Email is used for the follow-up or updates you asked for. Survey and feedback answers are read in aggregate to decide which parts of the journey to map, verify and fix first. Usage events tell us which pages help and which links fail.

We do not sell personal data, and we do not use it for automated decisions that produce legal effects for you.

We share personal data only with service providers that help us run Inzira:

• Hosting and application delivery providers
• Managed database and backend infrastructure providers
• Email delivery providers, for updates you asked to receive
• Analytics and error-monitoring tooling used inside the platform
• Professional advisers, and authorities where the law requires disclosure

These providers process data on our instructions. We do not pass your details to government institutions, professionals or commercial providers listed on Inzira.

Data is held in our managed backend infrastructure. We keep it only as long as it is useful for the purpose it was collected for:

• Email and signup details: until you withdraw consent or ask for deletion, and reviewed at least every 24 months
• Market research responses: up to 36 months, then aggregated or deleted
• Ratings and feedback: up to 24 months
• Usage events: up to 24 months
• Private profiles, projects and drafts: while your account remains active or until you delete them or request deletion
• Draft acknowledgements: retained with the related draft to record the warning accepted when it was generated
• Privacy requests and consent records: kept for as long as needed to show we handled them properly

Our infrastructure providers may store or process data on servers outside Rwanda. Where that happens, we rely on contractual safeguards with those providers requiring a level of protection consistent with Rwanda’s personal data protection framework, and we limit what is transferred to what the service needs. You can ask us which providers are involved at any time.

You can ask us to:

• Give you a copy of the personal data we hold about you
• Correct information that is wrong or out of date
• Delete your data
• Restrict how we use it
• Object to a particular use
• Withdraw consent for newsletters or research use, at any time

Use the privacy & data requests page, or write to privacy@inzira.app. Withdrawing consent is as easy as giving it and does not affect anything done before the withdrawal. You also have the right to complain to Rwanda’s supervisory authority for data protection.

Inzira is intended for adults making business and investment decisions. We do not knowingly collect data from children.

When we make material changes we update the version number and effective date shown at the top of this page, and where appropriate we notify people who have given us an email. Where the law requires it, we ask for renewed consent.

Privacy questions, access, correction, deletion, consent withdrawal and complaints: privacy@inzira.app. Security concerns: security@inzira.app. General support: hello@inzira.app.

Note. Publishing these documents does not by itself make Inzira legally compliant. Inzira separately assesses its obligations as a data controller under Rwanda’s personal data protection framework, including registration with the supervisory authority. Liability and governing-law wording is subject to review by qualified legal counsel before launch.