Privacy notice
This notice covers the WeConfirm website, shop accounts, Android app and online store verification. Contact WeConfirm at [email protected] about your information.
Records on your phone
The app reads operator payment SMS to announce payments and maintain your local ledger. That ledger can contain payer names, numbers, amounts and original SMS. Your full ledger is not uploaded to the subscription service. Backups, PDF reports and shared records leave your phone when you choose to export or share them. Protect those copies and the phone itself.
Shop accounts and subscriptions
Creating an account sends your shop name, phone number, optional email and password to the account service. Passwords are stored as protected hashes. The service retains account details, subscription dates, device and store connections, security records, renewal records and owner support history to operate your account and investigate problems. These records currently have no automatic account deletion deadline. Ask us to review an access, correction or deletion request.
Online payment checks
Your store sends the submitted payer name and number, order reference and amount, and one receipt text or screenshot to the relay. The paired phone compares this evidence with received operator SMS. Results include matching and receipt identifiers used to prevent reuse. The service processes this information to check that order payment, rather than for advertising. The store can automatically mark a verified order paid. Unclear results require merchant review.
Proof retention
The store encrypts submitted proof for retries until 24 hours after order creation, then queues deletion. Earlier payment confirmation also schedules deletion. Relay proof expires after 15 minutes and is erased at the next five minute cleanup, normally within 20 minutes, or sooner when a final result is recorded. A stopped scheduler can delay physical deletion. Payer name and number remain store order metadata. Receipt claims and settlement records remain to prevent receipt reuse and currently have no automatic expiry. Store and service backups have separate retention and must be managed separately.
Hosting and international processing
Cloudflare hosts the website, account service and verification relay. Processing may occur outside Rwanda. Hosting services process request information for delivery and security. Short proof retention does not remove the need to assess international processing requirements. Contact us if you need hosting and data processing details before connecting your store.
Browser storage and website help
The customer dashboard stores sign in information in your browser so it can maintain your session. The owner dashboard keeps an interrupted change draft in the current browser tab until its result is resolved. The public website guide uses answers stored on the website. Its conversation stays in memory and clears on refresh. The currently published guide does not send questions to an external language service. The website has no advertising analytics integration.
Support and your requests
When you email us, we use your message and contact details to respond and investigate the request. Send only the information needed for support. Never send a wallet PIN or account password. Contact [email protected] to request access, correction, restriction, deletion, to object to processing, or to ask about an automated payment result. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may raise a complaint with the Rwanda Data Protection and Privacy Office. We verify identity, review what can be removed, and explain any records that must remain. Customers of a shop should contact that shop about its order records and backups.
Merchant responsibilities
The merchant chooses to use verification and controls its own shop records, website orders and backups. Each store needs a privacy notice covering its own practices and a working cleanup scheduler. This notice does not replace the store privacy policy. Material changes to this notice will be dated here.