Privacy Policy

This describes what Scriptylabs collects through Safaris.rw, why, and how it's handled — both for tenant businesses running a site on the platform, and for their customers booking through it.

What we collect

• Account & business info: your name, email, phone, business name and address, and the team members you invite.
• Site content: whatever you add to your site — descriptions, photos, tours, room types, pricing, branding.
• Booking & customer data: when a traveler books or inquires through your site, we collect what they submit — name, email, phone, and the details of their request — so it can reach your dashboard.
• Payment records: transaction references and amounts from Mobile Money and card payments. We don't store full card numbers — those are handled directly by our payment processor.
• Usage data: basic technical logs (like sign-in activity and error logs) used to keep the platform secure and working.

How we use it

• To run the platform: hosting your site, processing bookings, and handling payments.
• To communicate with you: verification codes, booking notifications, renewal reminders, and support replies — sent by email, SMS, or WhatsApp depending on what's relevant and configured.
• To keep things secure: detecting abuse, investigating suspected fraud, and enforcing our Terms of Service.
• We do not sell your data, or a traveler's data, to third parties, and we don't use it for advertising.

Who we share it with

Data only goes to the providers that actually need it to do their job:

• Payment processors (MTN Mobile Money, and card payments via Polar) — to collect and settle payments.
• SMS and WhatsApp providers (FDI SMS, Meta's WhatsApp Cloud API) — to deliver verification codes and notifications, when those channels are configured.
• Flight search (Amadeus) — only for the flight-related parts of the platform, and only the query details needed to return results.
• Infrastructure providers who host the platform's servers and database.

We don't share tenant data across tenants — each business's data is isolated from every other's.

Support access

Our support team can access a tenant's dashboard, when needed to help with an issue, through a logged impersonation session — see the Terms of Service for how that works.

Cookies

We use a session cookie to keep you signed in across the platform's subdomains. It's what makes login work — we don't use third-party advertising or tracking cookies.

Data retention

We keep account and booking data for as long as your account is active, plus a reasonable period afterward for legal, accounting, and dispute-resolution purposes. If your site is suspended for non-payment, your content is kept (not deleted) so you can pick up where you left off if you reactivate.

Your rights

You can review and update most of your account and business information directly from your dashboard. To request a copy of your data, a correction, or deletion, contact us at hello@safaris.rw. If you're a traveler who booked through a tenant's site, reach out to that business directly, or to us if you're not sure who to contact.

Security

Passwords are stored hashed, not in plain text. Sensitive credentials (like a tenant's own payment API keys, where applicable) are encrypted at rest. Access to production data is limited to what our team needs to operate and support the platform.

Changes to this policy

We may update this policy as the platform changes. We'll update the date at the top of this page, and for material changes, we'll let account owners know by email.

Contact

Questions about this policy or your data? Reach us at hello@safaris.rw or through the contact page.