CodeMateRwa ("we", "us", or "our") is committed to protecting the personal information of all individuals who visit codematerwa.co.rw (the "Platform"). This Privacy Policy explains what data we collect, how we use it, and what rights you have over it. By using our Platform, you agree to the practices described below.
1. Information We Collect
-
›
Account Information — When you register, we collect your full name, email address, phone number, password (stored as a secure bcrypt hash), and profile type (Trainee or Business Client).
-
›
Trainee Profile Data — Education level, institution name, field of study, skills assessment, GitHub and LinkedIn URLs, and uploaded CV/resume documents.
-
›
Client Profile Data — Company name, industry, company size, website, office address, and business registration number.
-
›
Usage & Session Data — IP address, browser user-agent string, and login timestamps stored in our session audit log.
-
›
Contact Form Data — Name, email, subject, and message body submitted through our contact form.
-
›
Google Sign-In Data — If you use "Continue with Google", we receive your Google account ID, name, and verified email address via the OAuth 2.0 protocol. We do not receive or store your Google password.
2. How We Use Your Information
-
›
To create and manage your user account and associated profile.
-
›
To process and respond to internship applications, training enrolments, and service consultation requests.
-
›
To send transactional emails such as email verification codes and service notifications from noreply@codematerwa.co.rw.
-
›
To log security events and detect suspicious access patterns.
-
›
To improve the Platform's content, features, and user experience.
-
›
To communicate important platform updates or respond to your inquiries.
3. Legal Basis for Processing
-
›
Contractual necessity — Processing required to fulfil a service you requested (e.g., account creation, internship applications).
-
›
Legitimate interests — Security logging, fraud prevention, and platform improvement.
-
›
Consent — Where you have actively opted in (e.g., newsletter subscriptions).
-
›
Legal obligation — Where we are required to process data under applicable Rwandan law.
4. Data Sharing & Third Parties
-
›
We do not sell your personal data to any third party.
-
›
Google OAuth 2.0 — If you sign in with Google, you are subject to Google's Privacy Policy (policies.google.com/privacy).
-
›
cPanel Hosting — Our production server is hosted on cPanel infrastructure. Server-level logs may be retained as per the hosting provider's policies.
-
›
Email Delivery — Transactional emails are sent via PHP's mail() function using our registered domain email infrastructure.
-
›
Data may be disclosed to law enforcement or regulatory authorities only when required by Rwandan law.
5. Data Retention
-
›
Account data is retained for as long as your account is active.
-
›
If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
-
›
Uploaded documents (CV/Resume) are stored on our server and deleted when you remove them from your profile or close your account.
-
›
Session audit logs are retained for up to 12 months for security purposes.
6. Security
-
›
All passwords are hashed using the industry-standard bcrypt algorithm — we cannot read your password.
-
›
All production traffic is served over HTTPS (SSL/TLS encryption).
-
›
Session tokens and email verification codes are randomly generated using cryptographically secure functions.
-
›
Database credentials are stored in server-side configuration files not accessible via the web.
7. Cookies
-
›
We use a session cookie to maintain your logged-in state. This cookie is HTTP-only and is not accessible by JavaScript.
-
›
If you use "Remember Me" on the admin login, a secure authentication token is stored as a cookie.
-
›
We do not use advertising cookies or third-party tracking cookies.
8. Your Rights
-
›
Access — You may request a copy of the personal data we hold about you.
-
›
Correction — You may update your profile information at any time via your Dashboard.
-
›
Deletion — You may request deletion of your account and associated data.
-
›
Portability — You may request your data in a structured, machine-readable format.
-
›
To exercise any of these rights, please email us at info@codematerwa.co.rw.
9. Children's Privacy
-
›
Our Platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us immediately.
10. Changes to This Policy
-
›
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
-
›
If you have any questions or concerns about this Privacy Policy, please contact us:
-
›
📧 Email: info@codematerwa.co.rw
-
›
📍 Address: Kigali Innovation Hub, Kigali, Rwanda
-
›
🌐 Website: codematerwa.co.rw
