Privacy policy

SafarisCon ("SafarisCon", "we", "us", or "our") operates a Rwanda-focused travel and services marketplace that connects customers with verified providers (accommodation, transport, experiences, dining, venues, and related services).

For privacy requests, the primary contact is [email protected] or +250 788 836 180. Business location: Kigali, Rwanda.

This policy applies to personal data processed when you use:

• Our website at https://safariscon.eserveconn.com (including /privacy)
• The SafarisCon Android / iOS mobile applications (package com.safariscon.app)
• Related booking, provider, and account services we operate

It covers guests (customers), invited service providers, and visitors who browse listings without signing in. It does not cover third-party websites, payment apps, or provider systems you use outside SafarisCon.

We collect data you provide, data generated by your use of the service, and limited technical data needed to run security and product features. Categories below reflect the current SafarisCon product.

Permissions on mobile devices

• Location — used when needed to show directions from you to a paid / confirmed booking service, and for location fields you submit on booking requests.
• Camera — used to scan booking QR codes for secure verification by providers or authorised staff, and (where offered) to capture listing or licence photos.
• Photos / media — used when you upload business images or profile media.
• Notifications — used to deliver booking and account alerts when you allow them.

What we do not do

• We do not sell your personal data.
• We do not show other customers your email, phone, or booking details.
• We do not put a provider's phone, exact address, or map pin on the public home page before unlock rules allow it.
• We do not collect customer service payments through SafarisCon. Customers pay providers directly for the booked service.
• Using the app to harvest contacts without a legitimate booking is not allowed.

• Operate accounts, email verification, and login security (including one-time codes).
• Create bookings, issue booking proof, and let providers verify service consumption.
• Unlock provider contact or precise location only when booking rules allow (for example after a valid booking is confirmed).
• Calculate and reconcile provider commission after eligible completed bookings; settle commission via supported payment partners.
• Send transactional email and in-app / push notifications about your account or bookings.
• Moderate listings, prevent abuse (OTP, bookings, listings), and meet legal or regulatory requests.
• Improve reliability and product experience using limited analytics when that feature is enabled.

Where applicable privacy laws require a legal basis, we rely on one or more of the following:

• Contract — to provide the marketplace, bookings, receipts, and provider tools you request.
• Legitimate interests — security, fraud prevention, product improvement, and marketplace integrity, balanced against your rights.
• Consent — where required for optional device permissions (camera, location, notifications) or similar choices. You can withdraw device permissions in system settings.
• Legal obligation — when we must keep or disclose records to comply with law.

We share personal data only as needed to run SafarisCon, and with appropriate safeguards:

• Service providers on the other side of a booking — limited booking and contact details needed to fulfil the service, subject to unlock rules.
• XentriPay — used for provider → SafarisCon commission settlement only (not for collecting customer service payments).
• Email delivery providers — OTP, booking, and account messages.
• Maps / geo services — Google Maps and/or place-search providers (for example Photon / routing services) to show maps, directions, and location search.
• Infrastructure & storage — hosting, database, and file storage for listings, avatars, and receipts we operate.
• Legal / safety — when required by law, or to protect users, providers, or SafarisCon against abuse or fraud.

We do not sell personal data to advertisers or data brokers.

We keep personal data only as long as needed for the purposes described above, including:

• Active account data while your account remains open and for a reasonable period afterward for security and dispute handling.
• Booking, receipt, and commission records for the period needed to fulfil services, reconcile commission, and meet accounting or legal requirements.
• Authentication codes and short-lived session material only for their operational window.

When you delete your account (where eligible), we remove or de-identify personal data according to our deletion rules, except where we must retain limited records (for example unpaid obligations, disputes, or legal retention).

We apply technical and organisational measures appropriate to a booking marketplace, including:

• HTTPS transport encryption
• Hashed passwords and protected authentication flows
• Bearer access tokens, role-based authorization, and protected private routes
• CORS and security headers on API services we control
• Limits so signed-in users manage their own bookings (and providers manage their own listings / fulfilment tools)

No method of transmission or storage is 100% secure. Please use a strong unique password and protect your device and email inbox (used for OTP codes).

Depending on applicable law, you may be able to:

• Access the personal data we hold about you
• Correct inaccurate profile information
• Request deletion of your account (subject to blockers such as active bookings or provider obligations)
• Request a copy / export of your data
• Object to or restrict certain processing
• Withdraw consent for optional device permissions
• Log out to end a remembered session

In the product today you can update profile details where the account screens allow, manage sessions by signing out, and use self-service account deletion when the app reports you are eligible. For data export or other privacy requests, email [email protected].

Related policies: Terms of use, How it works, and Booking & commission.

SafarisCon is directed at adults arranging travel and related services. We do not knowingly collect personal data from children under 13 (or the higher age required in your country) for the purpose of creating their own accounts. If you believe a child has provided personal data, contact us and we will take appropriate steps.

SafarisCon is operated with a primary focus on Rwanda. Your data may be processed on servers or by vendors in other countries when needed for hosting, email, maps, or commission settlement. Where we transfer personal data internationally, we take steps appropriate to the risk and applicable law.

Our website and apps use technologies needed to keep you signed in, remember preferences (such as theme), and operate security features. On the web, session information may be stored in browser storage. On mobile, sensitive session material may be stored in the device secure store.

Maps embeds or third-party SDKs may set their own cookies or identifiers subject to their policies. You can control cookies through your browser settings; disabling essential storage may prevent sign-in or booking features from working.

We may update this privacy policy to reflect product, legal, or operational changes. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be communicated in-product or by email where appropriate. Continued use after an update means you acknowledge the revised policy.

Privacy, data access, correction, export, or deletion requests:

• Email: [email protected]
• Phone: +250 788 836 180
• Location: Kigali, Rwanda
• Policy URL: https://safariscon.eserveconn.com/privacy

For general product help, see Contact.