Politiki y'Ibanga

1. Abo Turi Bo

Declara ni porogaramu (app) ikoresha ubuhanga bw’ubukorano (AI) ifasha ba nyiri ibigo bito n’ibiciriritse mu Rwanda kubahiriza amategeko y’imisoro, ikaba icungwa na Declara Ltd. Urubuga rwacu, ruboneka kuri interineti (web) no nka porogaramu ya telefoni, rufasha ba nyiri ubucuruzi gukurikirana konti zabo za EBM (Electronic Billing Machine), kumenya imiterere y’umusoro wabo ku nyongeragaciro (VAT), ndetse no gutegura no gutanga imimenyekanisho yabo ya VAT mu Kigo cy’Imisoro n’Amahoro (RRA) banyuze ku mbuga (portal) za MyRRA na eTax, no kumenyekanisha ipatanti banyuze kuri porotali y’imisoro y’inzego z’ibanze. Ushobora kandi kuganira n’umufasha wacu ukoresha ubuhanga bw’ubukorano (AI assistant) imbere muri porogaramu cyangwa kuri WhatsApp.

Declara Ltd ni ikigo cyigenga. Declara ntabwo icungwa n’Ikigo cy’Imisoro n’Amahoro (RRA) cyangwa urundi rwego rwa Leta, ntaho ihuriye na byo, kandi ntiyemejwe na byo.

Aho mwatubariza: info@declara.rw Aho duherereye: Birembo, Kigali, Rwanda

2. Ibyo aya Mabwiriza Areba

Aya mabwiriza asonura amakuru bwite tukusanya, impamvu tuyakusanya, uko tuyakoresha, uko tuyarinda, n’uburenganzira ufite hashingiwe ku Itegeko ry’u Rwanda n° 058/2021 ryo ku wa 13/10/2021 ryerekeye kurinda amakuru bwite n’imibereho bwite y’umuntu.

Iyo ukoresheje urubuga rwa Declara, uba wemeye imikorere isobonuye muri aya mabwiriza.

3. Amakuru Dukusanya

3.1 Amakuru Utanga Ubwawe

• Izina ryose n’izina ry’ubucuruzi
• Numero iranga usora mu Rwanda (TIN)
• Imeyili (Email)
• Ijambo ry’ibanga ryo kwinjira ku rubuga rwa MyRRA, ari na ryo ukoresha winjira muri Declara
• Ijambo ry’ibanga ryo kwinjira ku rubuga rwa eTax (si pakanirwa, gusa niba ritandukanye n’irya MyRRA)
• Ijambo ry’ibanga rya porotali y’imisoro y’inzego z’ibanze (si ngombwa, gusa niba ukoresha serivisi y’ipatanti)
• Numero ya Mobile Money wandika igihe wishyura ifatabuguzi ukoresheje MTN Mobile Money
• Ibisubizo utanga ku bucuruzi bwawe bidufasha gutegura imenyekanisha rya VAT (niba ugurisha ku nzego za Leta, na niba utumiza ibicuruzwa mu mahanga)
• Ubutumwa wohereza itsinda ryacu rishinzwe ubufasha, na numero ya telefoni cyangwa ya WhatsApp uduha kugira ngo tugusubize
• Numero ya WhatsApp (si pakanirwa, gusa niba uhisemo kuganira n’umufasha kuri WhatsApp)
• Ururimi uhitamo gukoresha (Icyongereza, Ikinyarwanda, cyangwa Igiswahili)

3.2 Amakuru Akurwa kuri Porotali ya RRA mu Izina Ryawe

Ubifitiye uburenganzira (binyuze mu kuduha imyirondoro yawe yo kwinjira), twinjira muri konti zawe za MyRRA, eTax na porotali y’imisoro y’inzego z’ibanze maze tugakusanya:

• Amakuru y’inyemezabuguzi z’ibyo wagurishije (numero y’inyemezabuguzi, itariki, TIN y’umuguzi, amafaranga, VAT)
• Amakuru y’inyemezabuguzi z’ibyo waguze (numero y’inyemezabuguzi, itariki, TIN y’ugurisha, amafaranga, VAT)
• Amateka y’imimenyekanisho y’imisoro (ibihe, amatariki ntarengwa, amatariki yatangiweho, uko bihagaze)
• Amakuru y’ubwishyu (amafaranga agomba kwishyurwa, ayishyuwe, n’ibirarane)
• Amenyesha n’isuzuma bituruka kuri eTax
• Amakuru y’ipatanti (amashami y’ubucuruzi, ibihembwe, amafaranga, uko bihagaze)
• Imyirondoro y’usora (izina, imeyili, numero ya telefoni, ubwoko bw’imisoro yiyandikishijeho)

3.3 Amakuru Atunganyirizwa ku Rubuga

• Imibare n’incamake by’imiterere ya VAT yawe
• Uko ubahiriza amategeko byerekanwa n’amateka y’imimenyekanisho yawe
• Amakuru y’imimenyekanisho yateguwe ikoherezwa muri RRA mu izina ryawe
• Amateka y’ibiganiro wagiranye n’umufasha wacu ukoresha AI (imbere muri porogaramu no kuri WhatsApp)
• Imibare ijyanye n’ikoreshwa ry’umufasha (ururimi, igihe igisubizo cyafashe, ibikoresho byakoreshejwe, n’icyo uvuga ku gisubizo wahawe)
• Amakuru y’ifatabuguzi n’ubwishyu (ubwoko bw’ifatabuguzi, amafaranga, itariki, uburyo bwo kwishyura, numero iranga ubwishyu, uko bihagaze)
• Inyandiko za buri guhuza amakuru (sync) na buri gikorwa cyo gutanga imenyekanisha

3.4 Amakuru ya Tekiniki

• Amateka yo kwinjira: itariki n’isaha, aderesi ya IP, ubwoko bwa mushakisha (browser) cyangwa bw’igikoresho, n’ahantu hagereranyije (igihugu, intara, umujyi) hashakishwa hashingiwe kuri aderesi ya IP kuri server yacu bwite
• Ibimenyetso biranga igihe wamaze ufunguye konti (session tokens)
• Amakuru y’amakosa yabayemo (kugira ngo akorwe n’imikorere inozwe)

3.5 Amakuru Abikwa ku Gikoresho Cyawe

Porogaramu ya telefoni ibika TIN n’ijambo ry’ibanga byawe mu bubiko bwizewe bwa telefoni yawe kugira ngo ugume winjiye. Bikurwa ku gikoresho iyo usohotse muri konti.

4. Impamvu Tukusanya aya Makuru

Tukusanya kandi tugatunganya amakuru yawe ku bw’izi mpamvu zikurikira:

• Kwinjira muri konti yawe ya RRA mu izina ryawe - hashingiwe ku bwumvikane bwawe bwuzuye (kuduha imyirondoro yo kwinjira)
• Gutegura no gutanga imimenyekanisho yawe ya VAT muri RRA igihe uhisemo kuyitanga - hashingiwe ku bwumvikane bwawe bwuzuye
• Gutegura no gutanga imenyekanisha ryawe ry’ipatanti igihe uhisemo kuritanga - hashingiwe ku bwumvikane bwawe bwuzuye
• Kubara imiterere ya VAT yawe - mu rwego rwo gutanga serivisi y’ibanze
• Gukoresha umufasha wacu wa AI, imbere muri porogaramu no kuri WhatsApp - mu rwego rwo gutanga serivisi y’ibanze
• Gutunganya ubwishyu bw’ifatabuguzi ryawe - mu rwego rwo kubahiriza amasezerano dufitanye
• Gusubiza ubusabe bwawe bw’ubufasha - mu rwego rwo gutanga serivisi y’ibanze
• Kurinda umutekano wa konti yawe no gutahura abinjira batabifitiye uburenganzira - ku bw’inyungu zacu zemewe n’amategeko
• Gutunganya urubuga rwacu no gukosora amakosa - ku bw’inyungu zacu zemewe n’amategeko
• Kubika inyandiko z’ubwishyu n’iz’ibaruramari - inshingano ziteganywa n’amategeko
• Kubahiriza amategeko y’u Rwanda - inshingano ziteganywa n’amategeko

Ntabwo dukoresha amakuru yawe mu kumenyekanisha ibikorwa (advertising), gusesengura imyitwarire (profiling), cyangwa ku yindi ntego iyariyo yose itari iyanditse haruguru.

5. Uko Turinda Amakuru Yawe

5.1 Gufunga Imyirondoro mu Buryo bw’Ibanga (Encryption)

Amagambo yawe y’ibanga ya porotali za MyRRA, eTax n’iy’imisoro y’inzego z’ibanze afungirwa mu buryo bw’ibanga hakoreshejwe uburyo bwa "Fernet symmetric encryption" (AES-128-CBC ifite HMAC-SHA256) mbere y’uko abikwa mu bubiko bwacu bw’amakuru (database). Urufunguzo rwifashishwa mu gufunga ayo makuru rubikwa ukwayo kure y’amakuru yawe, kandi ntirwigera rwandikwa mu bubiko bw’amakuru.

5.2 Amakuru mu Nzirakuyohereza

Amakuru yose yoherezwa hagati y’igikoresho cyawe n’imashini zacu zibikurwamo amakuru (servers) afungirwa mu buryo bw’ibanga hakoreshejwe HTTPS/TLS.

5.3 Kugenzura Abemerewe Kwinjira

Abakozi ba Declara Ltd babyemerewe kandi bafite impamvu ifatika gusa ni bo bashobora kugera ku makuru yawe. Abakozi bashinzwe ubufasha bashobora kureba konti yawe kugira ngo bagufashe, kandi bashobora gukosora ibyanditswe mu makuru ya VAT yawe ari muri Declara. Ibikorwa by’abakozi byandikwa mu gitabo cy’igenzura (audit log).

5.4 Umutekano wa Server

Server zacu ziri mu Rwanda. Dushyiraho amavugururwa y’umutekano buri gihe kandi tukazitira isura rusange, aho twemera gusa inzira (ports) zikenewe ngo serivisi yacu ikore.

6. Gusangira Amakuru n’Abandi

Ntabwo tugurisha amakuru yawe. Ntabwo dusangira amakuru yawe n’abamamaza cyangwa ibigo byamamaza.

6.1 Isuzuma rya AI (Google Gemini)

Umufasha wacu wa AI akorera kuri API ya Gemini ya Google. Iyo ukoresheje uburyo bwo kuganira, incamake y’amakuru ya konti yawe (isigara rya VAT, amatariki ntarengwa ari hafi, inyemezabuguzi za vuba) yoherezwa kuri API ya Google kugira ngo hategurwe igisubizo. Aya makuru atunganywa hashingiwe ku mategeko n’amabwiriza y’itunganyamakuru ya Google. Tugabanya cyane amakuru yoherezwa kuri Google tukohereza gusa ayo gushaka igisubizo cy’ikibazo cyawe.

6.2 Kohereza Ubutumwa kuri WhatsApp (Meta)

Niba uhujije WhatsApp yawe, ubutumwa wohereza n’ubwo bwohererezwa n’umufasha bwinjira binyuze ku rubuga rwa WhatsApp Business rucungwa na Meta. Meta itunganya numero yawe ya WhatsApp n’ibirimo mu butumwa kugira ngo ubwo butumwa bugere aho bugomba kugera. Twatsa iyi nzira gusa nyuma y’uko wihujirije ubwawe numero yawe ya WhatsApp imbere muri porogaramu.

6.3 Abatunganya Ubwishyu (MTN Rwanda na IremboPay)

Ubwishyu bw’ifatabuguzi butunganywa na MTN Rwanda (Mobile Money) na IremboPay. Kugira ngo dusabe ubwishyu, twoherereza utunganya ubwishyu amafaranga agomba kwishyurwa, numero iranga ubwishyu, ndetse, kuri Mobile Money, numero ya Mobile Money wanditse. Amakuru y’ikarita cyangwa aya banki wandika ku rupapuro rw’ubwishyu rwa IremboPay acungwa na IremboPay kandi ntagera kuri server zacu.

6.4 Ikigo cy’Imisoro n’Amahoro (RRA)

Iyo utanze imenyekanisha unyuze muri Declara, imenyekanisha n’imigereka yaryo byoherezwa muri RRA binyuze muri konti yawe bwite ya porotali.

6.5 Kumenya Ahantu Hashingiwe kuri Aderesi ya IP

Kugira ngo twandike ahantu hagereranyije umuntu yinjiriye, dushakisha aderesi ya IP yakoreshejwe mu kwinjira mu bubiko bw’amakuru y’ahantu (DB-IP) buri kuri server yacu bwite, bukaduha igihugu, intara n’umujyi. Aderesi ya IP ntiyoherezwa ku kindi kigo icyo ari cyo cyose.

6.6 Ubutumwa bw’Imenyesha (Expo, Apple na Google)

Niba wemereye porogaramu ya telefoni kukohereza imenyesha, twohereza ibyibutsa by’amatariki ntarengwa n’ibyemeza ko imenyekanisha ryatanzwe binyuze kuri serivisi y’imenyesha ya Expo (650 Industries, Inc., Leta Zunze Ubumwe z’Amerika), nayo ikabiha Apple (iPhone) cyangwa Google (Android) kugira ngo bigere kuri telefoni yawe. Expo ibona ikimenyetso kiranga igikoresho cyawe (push token) n’inyandiko y’imenyesha (urugero: ubwoko bw’umusoro, igihe, itariki ntarengwa cyangwa amafaranga agomba kwishyurwa), igasiba imenyesha rimaze guhabwa Apple cyangwa Google, kandi ikagumana icyo kimenyetso gusa kugira ngo ishobore kugera ku gikoresho cyawe. Imenyesha ntirigera ririmo amagambo yawe y’ibanga cyangwa TIN yawe. Ushobora kuzimya imenyesha igihe icyo ari cyo cyose mu igenamiterere rya telefoni yawe.

6.7 Raporo z’Amakosa (Sentry)

Iyo porogaramu cyangwa server zacu zihuye n’ikosa, raporo irimo amakuru ya tekiniki (icyapfuye, ubwoko bw’igikoresho na verisiyo ya porogaramu, n’intambwe zabanjirije ikosa) yoherezwa kuri Sentry, serivisi yo gukurikirana amakosa icungwa na Functional Software, Inc. muri Leta Zunze Ubumwe z’Amerika. Amagambo y’ibanga na TIN bikurwamo mbere y’uko raporo yoherezwa, izo raporo ntizigera zirimo inyemezabuguzi cyangwa ubutumwa bwawe, kandi Sentry izisiba nyuma y’iminsi 90.

6.8 Ibisabwa n’Amategeko

Dushoobora kugaragaza amakuru yawe igihe bisabwe n’amategeko y’u Rwanda, icyemezo cy’urukiko, cyangwa ubusabe bwemewe n’amategeko buturutse ku nzego zigenzura zirimo RRA cyangwa NCSA.

6.9 Guhindura Nyir’ubucuruzi

Niba Declara iguze cyangwa yivanga n’ikindi kigo, amakuru yawe ashobora kwimurwa nk’igice cy’iryohererezanya. Tuzabimenyesha mbere y’uko ibyo biba.

7. Kwimura Amakuru mu Mahanga

Bamwe mu batunganya amakuru bacu - Google (itunganya AI), Meta (ubutumwa bwa WhatsApp), Expo, Apple na Google (ubutumwa bw’imenyesha) na Sentry (raporo z’amakosa) - bafite icyicaro hanze y’u Rwanda, muri Leta Zunze Ubumwe z’Amerika. Buri wese muri bo abona gusa amakuru asobanuwe mu gice cya 6 kandi agengwa n’amasezerano yanditse agabanya uko ashobora kuyakoresha. Iyo amakuru yawe yoherejwe kuri bo, twemeza ko hari uburyo bukwiye bwo kuyarinda buhuye n’itegeko ry’u Rwanda ryerekeye kurinda amakuru bwite.

8. Kubika Amakuru

Tubika amakuru ya konti n’imyirondoro yawe mu gihe cyose konti yawe ya Declara igifite agaciro.

Tubika amakuru y’inyemezabuguzi n’imisoro yakuwe muri RRA mu gihe konti y’ubucuruzi ifitanye isano nayo igifite agaciro. Mu gihe cyo guhuza amakuru (sync) rya buri gihe, dukuraho amakuru y’ibyakurijwe n’ibyaguzwe biri hanze y’igihe cyagenwe cyo guhuza amakuru.

Imimenyekanisho y’imisoro, ubwishyu, n’amenyesha rya eTax bibikwa mu gihe konti y’ubucuruzi ifitanye isano nayo ikiri nzima.

Imyirondoro yawe yo kwinjira kuri porotali za MyRRA, eTax n’iy’imisoro y’inzego z’ibanze ibikwa mu buryo bw’ibanga mu gihe konti y’ubucuruzi ifitanye isano nayo igifite agaciro.

Amakuru y’ifatabuguzi n’ubwishyu, amateka yo kwinjira, n’inyandiko zo guhuza amakuru no gutanga imimenyekanisho bibikwa mu gihe konti yawe igifite agaciro, ndetse na nyuma yo kuyisiba nk’uko bisobanuwe hasi.

Amateka y’ibiganiro wagiranye n'umufasha abikwa mu gihe konti y’ubucuruzi ifitanye isano nayo ikiri nzima.

Ibimenyetso byo kwemeza umwirondoro (authentication tokens) bita agaciro nyuma y’iminota 30. Ntabwo tubika ibimenyetso biranga igihe wamaze ufunguye konti (session tokens) kuri server zacu kurenza ibikenewe kugira ngo twemere umwirondoro wawe.

Amakuru y’amakosa n’ay’imikorere ya sisitemu (error and system logs) abikwa mu gihe kigera ku minsi 90 mu rwego rwo kugenzura umutekano no kunoza serivisi.

8.1 Iyo Usibye Konti Yawe

Ushobora gusiba konti yawe muri porogaramu (Konti, hanyuma Igenamiterere, hanyuma Siba konti) cyangwa ukatwandikira kuri info@declara.rw.

Iyo usibye konti yawe, dusiba burundu:

• Amagambo yawe y’ibanga ya porotali
• Inyemezabuguzi, imimenyekanisho n’andi makuru yose y’imisoro yakuwe kuri porotali
• Ubutumwa wagiranye n’umufasha
• Ihuzwa ryawe rya WhatsApp
• Izina ryawe, imeyili na numero ya telefoni

Ifatabuguzi ryose rigifite agaciro rirahagarikwa kandi ugasohorwa muri konti.

Nyuma yo gusiba, tugumana amakuru make:

• TIN yawe
• Amakuru y’ifatabuguzi n’ubwishyu
• Amateka yo kwinjira
• Inyandiko zo guhuza amakuru n’iz’imimenyekanisho yatanzwe mu izina ryawe
• Ubutumwa bw’ubusabe bw’ubufasha wohereje, numero yawe yo kuguhamagaraho yakuwemo
• Imibare ijyanye n’ikoreshwa ry’umufasha, hatarimo ubutumwa ubwabwo

Aya makuru tuyagumana ku mpamvu z’ibaruramari, imisoro, umutekano no gukumira uburiganya, ndetse no gukemura impaka. Niba ugarutse kuri Declara ukoresheje TIN imwe, ahuzwa na konti yawe nshya. Ushobora kudusaba gusiba aya makuru utwandikiye kuri info@declara.rw, kandi tuzabikora keretse amategeko adutegeka kuyagumana.

9. Uburenganzira Bwawe

Hashingiwe ku Itegeko ry’u Rwanda n° 058/2021, ufite uburenganzira bukurikira:

• Uburenganzira bwo kubona amakuru - gusaba kopi y’amakuru bwite tukubitseho
• Uburenganzira bwo gukosora - kudusaba gukosora amakuru yose atari yo
• Uburenganzira bwo gusiba - gusiba konti yawe muri porogaramu, cyangwa kudusaba gusiba amakuru yawe mu gihe cy’iminsi 30, uretse aho amategeko abitegeka ukundi
• Uburenganzira bwo gukuraho uburenganzira watanze - ushobora gukuraho uburenganzira twari dufite bwo kwinjira muri konti yawe ya RRA igihe cyose usibye konti yawe; ibi ntibizagira icyo bihindura ku makuru yari yamaze gukusanywa
• Uburenganzira bwo kutabyemera - kutanyurwa n’itunganywa ry’amakuru rishingiye ku nyungu zacu zemewe n’amategeko
• Uburenganzira bwo kwimura amakuru - gusaba amakuru yawe mu buryo bushobora gusomwa n’imashini

Kugira ngo ukoreshe ubwo buryo bw’uburenganzira, twandikire kuri info@declara.rw. Tuzagusubiza mu gihe cy’iminsi 15 y’akazi.

10. Cookies n’Ikinyurwamo (Tracking)

Urubuga rwacu rukoresha gusa cookies za ngombwa mu rwego rwa tekiniki zikenewe mu kwemeza umwirondoro no kumenya igihe wamaze ufunguye konti. Ntabwo dukoresha cookies zikurikirana ibyo ukora (tracking cookies), izamamazwa (advertising cookies), cyangwa isesengura (analytics) rishobora kumenya umwirondoro wawe bwite.

11. Guhinduka kw’aya Mabwiriza

Dushobora kuvugurura aya mabwiriza igihe icyo ari cyo cyose. Iyo dukoze impinduka z’ingenzi, dushyira hano inyandiko ivuguruye kandi tugahindura itariki iri hejuru y’iyi paji. Iyo impinduka igira ingaruka zikomeye ku burenganzira bwawe, tuzabikumenyesha kandi muri porogaramu cyangwa kuri imeyili (email).

12. Twandikire

Declara - icungwa na Declara Ltd Birembo, Kigali, Rwanda info@declara.rw

Niba utanyuzwe n’ibisubizo cyacu, ufite uburenganzira bwo gutanga ikirego mu Rwego rw’Igihugu rushinzwe Umutekano mu Kijyanye n’Ikoranabuhanga (NCSA) unyuze kuri www.ncsa.gov.rw.

Aya mabwiriza yerekeye ubuzima bwite n'amakuru bwite agengwa n’amategeko y’u Rwanda, harimo n’Itegeko n° 058/2021 ryo ku wa 13/10/2021 ryerekeye kurinda amakuru bwite n’imibereho bwite y’umuntu.