Politiki y'Ibanga

1. Abo Turi Bo

Declara ni porogaramu (app) ikoresha ubuhanga bw’ubukorano (AI) ifasha ba nyiri ibigo bito n’ibiciriritse mu Rwanda kubahiriza amategeko y’imisoro, ikaba icungwa na Declara Ltd. Urubuga rwacu rufasha ba nyiri ubucuruzi gukurikirana konti zabo za EBM (Electronic Billing Machine), kumenya imiterere y’umusoro wabo ku nyongeragaciro (VAT), ndetse no gutegura no gutanga imimenyekanisho yabo ya VAT mu Kigo cy’Imisoro n’Amahoro (RRA) banyuze ku mbuga (portal) za MyRRA na eTax. Ushobora kandi kuganira n’umufasha wacu ukoresha ubuhanga bw’ubukorano (AI assistant) imbere muri porogaramu cyangwa kuri WhatsApp.

Aho mwatubariza: info@declara.rw Aho duherereye: Birembo, Kigali, Rwanda

2. Ibyo aya Mabwiriza Areba

Aya mabwiriza asonura amakuru bwite tukusanya, impamvu tuyakusanya, uko tuyakoresha, uko tuyarinda, n’uburenganzira ufite hashingiwe ku Itegeko ry’u Rwanda n° 058/2021 ryo ku wa 13/10/2021 ryerekeye kurinda amakuru bwite n’imibereho bwite y’umuntu.

Iyo ukoresheje urubuga rwa Declara, uba wemeye imikorere isobonuye muri aya mabwiriza.

3. Amakuru Dukusanya

3.1 Amakuru Utanga Ubwawe

• Izina ryose n’izina ry’ubucuruzi
• Numero iranga usora mu Rwanda (TIN)
• Imeyili (Email)
• Ijambo ry’ibanga ryo kwinjira ku rubuga rwa MyRRA
• Ijambo ry’ibanga ryo kwinjira ku rubuga rwa eTax (si pakanirwa, gusa niba ritandukanye n’irya MyRRA)
• Numero ya WhatsApp (si pakanirwa, gusa niba uhisemo kuganira n’umufasha kuri WhatsApp)
• Ururimi uhitamo gukoresha (Icyongereza, Ikinyarwanda, cyangwa Igiswahili)

3.2 Amakuru Akurwa kuri Porotali ya RRA mu Izina Ryawe

Ubifitiye uburenganzira (binyuze mu kuduha imyirondoro yawe yo kwinjira), twinjira muri konti yawe ya MyRRA maze tugakusanya:

• Amakuru y’inyemezabuguzi z’ibyo wagurishije (numero y’inyemezabuguzi, itariki, TIN y’umuguzi, amafaranga, VAT)
• Amakuru y’inyemezabuguzi z’ibyo waguze (numero y’inyemezabuguzi, itariki, TIN y’ugurisha, amafaranga, VAT)
• Amateka y’imimenyekanisho y’imisoro (ibihe, amatariki ntarengwa, amatariki yatangiweho, uko bihagaze)
• Amakuru y’ubwishyu (amafaranga agomba kwishyurwa, ayishyuwe, n’ibirarane)
• Amenyesha n’isuzuma bituruka kuri eTax
• Imyirondoro y’usora (izina, ubwoko bw’imisoro yiyandikishijeho)

3.3 Amakuru Atunganyirizwa ku Rubuga

• Imibare n’incamake by’imiterere ya VAT yawe
• Uko ubahiriza amategeko byerekanwa n’amateka y’imimenyekanisho yawe
• Amakuru y’imimenyekanisho yateguwe ikoherezwa muri RRA mu izina ryawe
• Amateka y’ibiganiro wagiranye n’umufasha wacu ukoresha AI (imbere muri porogaramu no kuri WhatsApp)

3.4 Amakuru ya Tekiniki

• Ibihe winjiriye kuri porogaramu (timestamps) n’ibimenyetso biranga igihe wamaze ufunguye konti (session tokens)
• Amakuru y’amakosa yabayemo (kugira ngo akorwe n’imikorere inozwe)

4. Impamvu Tukusanya aya Makuru

Tukusanya kandi tugatunganya amakuru yawe ku bw’izi mpamvu zikurikira:

• Kwinjira muri konti yawe ya RRA mu izina ryawe — hashingiwe ku bwumvikane bwawe bwuzuye (kuduha imyirondoro yo kwinjira)
• Gutegura no gutanga imimenyekanisho yawe ya VAT muri RRA igihe uhisemo kuyitanga — hashingiwe ku bwumvikane bwawe bwuzuye
• Kubara imiterere ya VAT yawe — mu rwego rwo gutanga serivisi y’ibanze
• Gukoresha umufasha wacu wa AI, imbere muri porogaramu no kuri WhatsApp — mu rwego rwo gutanga serivisi y’ibanze
• Gutunganya urubuga rwacu no gukosora amakosa — ku bw’inyungu zacu zemewe n’amategeko
• Kubahiriza amategeko y’u Rwanda — inshingano ziteganywa n’amategeko

Ntabwo dukoresha amakuru yawe mu kumenyekanisha ibikorwa (advertising), gusesengura imyitwarire (profiling), cyangwa ku yindi ntego iyariyo yose itari iyanditse haruguru.

5. Uko Turinda Amakuru Yawe

5.1 Gufunga Imyirondoro mu Buryo bw’Ibanga (Encryption)

Amagambo yawe y’ibanga ya porotali za MyRRA na eTax afungirwa mu buryo bw’ibanga hakoreshejwe uburyo bwa "Fernet symmetric encryption" (AES-128-CBC ifite HMAC-SHA256) mbere y’uko abikwa mu bubiko bwacu bw’amakuru (database). Urufunguzo rwifashishwa mu gufunga ayo makuru rubikwa ukwayo kure y’amakuru yawe, kandi ntirwigera rwandikwa mu bubiko bw’amakuru.

5.2 Amakuru mu Nzirakuyohereza

Amakuru yose yoherezwa hagati y’igikoresho cyawe n’imashini zacu zibikurwamo amakuru (servers) afungirwa mu buryo bw’ibanga hakoreshejwe HTTPS/TLS.

5.3 Kugenzura Abemerewe Kwinjira

Abakozi ba Declara Ltd babyemerewe kandi bafite impamvu ifatika gusa ni bo bashobora kugera ku makuru yawe.

5.4 Umutekano wa Server

Server zacu ziri mu Rwanda. Dushyiraho amavugururwa y’umutekano buri gihe kandi tukazitira isura rusange, aho twemera gusa inzira (ports) zikenewe ngo serivisi yacu ikore.

6. Gusangira Amakuru n’Abandi

Ntabwo tugurisha amakuru yawe. Ntabwo dusangira amakuru yawe n’abamamaza cyangwa ibigo byamamaza.

6.1 Isuzuma rya AI (Google Gemini)

Umufasha wacu wa AI akorera kuri API ya Gemini ya Google. Iyo ukoresheje uburyo bwo kuganira, incamake y’amakuru ya konti yawe (isigara rya VAT, amatariki ntarengwa ari hafi, inyemezabuguzi za vuba) yoherezwa kuri API ya Google kugira ngo hategurwe igisubizo. Aya makuru atunganywa hashingiwe ku mategeko n’amabwiriza y’itunganyamakuru ya Google. Tugabanya cyane amakuru yoherezwa kuri Google tukohereza gusa ayo gushaka igisubizo cy’ikibazo cyawe.

6.2 Kohereza Ubutumwa kuri WhatsApp (Meta)

Niba uhujije WhatsApp yawe, ubutumwa wohereza n’ubwo bwohererezwa n’umufasha bwinjira binyuze ku rubuga rwa WhatsApp Business rucungwa na Meta. Meta itunganya numero yawe ya WhatsApp n’ibirimo mu butumwa kugira ngo ubwo butumwa bugere aho bugomba kugera. Twatsa iyi nzira gusa nyuma y’uko wihujirije ubwawe numero yawe ya WhatsApp imbere muri porogaramu.

6.3 Ibisabwa n’Amategeko

Dushoobora kugaragaza amakuru yawe igihe bisabwe n’amategeko y’u Rwanda, icyemezo cy’urukiko, cyangwa ubusabe bwemewe n’amategeko buturutse ku nzego zigenzura zirimo RRA cyangwa NCSA.

6.4 Guhindura Nyir’ubucuruzi

Niba Declara iguze cyangwa yivanga n’ikindi kigo, amakuru yawe ashobora kwimurwa nk’igice cy’iryohererezanya. Tuzabimenyesha mbere y’uko ibyo biba.

7. Kwimura Amakuru mu Mahanga

Bamwe mu batunganya amakuru bacu — barimo Google (itunganya AI) na Meta (ubutumwa bwa WhatsApp) — bafite icyicaro hanze y’u Rwanda. Iyo amakuru yawe yoherejwe kuri bo, twemeza ko hari uburyo bukwiye bwo kuyarinda buhuye n’itegeko ry’u Rwanda ryerekeye kurinda amakuru bwite.

8. Kubika Amakuru

Tubika amakuru ya konti n’imyirondoro yawe mu gihe cyose konti yawe ya Declara igifite agaciro.

Tubika amakuru y’inyemezabuguzi n’imisoro yakuwe muri RRA mu gihe konti y’ubucuruzi ifitanye isano nayo igifite agaciro. Mu gihe cyo guhuza amakuru (sync) rya buri gihe, dukuraho amakuru y’ibyakurijwe n’ibyaguzwe biri hanze y’igihe cyagenwe cyo guhuza amakuru.

Imimenyekanisho y’imisoro, ubwishyu, n’amenyesha rya eTax bibikwa mu gihe konti y’ubucuruzi ifitanye isano nayo ikiri nzima.

Imyirondoro yawe yo kwinjira kuri porotali za MyRRA na eTax ibikwa mu buryo bw’ibanga mu gihe konti y’ubucuruzi ifitanye isano nayo igifite agaciro.

Amateka y’ibiganiro wagiranye n'umufasha abikwa mu gihe konti y’ubucuruzi ifitanye isano nayo ikiri nzima.

Ibimenyetso byo kwemeza umwirondoro (authentication tokens) bita agaciro nyuma y’iminota 30. Ntabwo tubika ibimenyetso biranga igihe wamaze ufunguye konti (session tokens) kuri server zacu kurenza ibikenewe kugira ngo twemere umwirondoro wawe.

Amakuru y’amakosa n’ay’imikorere ya sisitemu (error and system logs) abikwa mu gihe kigera ku minsi 90 mu rwego rwo kugenzura umutekano no kunoza serivisi.

Iyo usibye konti y’ubucuruzi ifitanye isano, dusiba burundu imyirondoro yawe yo kwinjira ku mbuga ndetse n’amakuru yose y’imisoro yari yahujijwe, amateka y’ibiganiro, n’andi makuru yose ajyana n’iyo konti.

9. Uburenganzira Bwawe

Hashingiwe ku Itegeko ry’u Rwanda n° 058/2021, ufite uburenganzira bukurikira:

• Uburenganzira bwo kubona amakuru — gusaba kopi y’amakuru bwite tukubitseho
• Uburenganzira bwo gukosora — kudusaba gukosora amakuru yose atari yo
• Uburenganzira bwo gusiba — kudusaba gusiba amakuru yawe mu gihe cy’iminsi 30, uretse aho amategeko abitegeka ukundi
• Uburenganzira bwo gukuraho uburenganzira watanze — ushobora gukuraho uburenganzira twari dufite bwo kwinjira muri konti yawe ya RRA igihe cyose usibye konti yawe; ibi ntibizagira icyo bihindura ku makuru yari yamaze gukusanywa
• Uburenganzira bwo kutabyemera — kutanyurwa n’itunganywa ry’amakuru rishingiye ku nyungu zacu zemewe n’amategeko
• Uburenganzira bwo kwimura amakuru — gusaba amakuru yawe mu buryo bushobora gusomwa n’imashini

Kugira ngo ukoreshe ubwo buryo bw’uburenganzira, twandikire kuri info@declara.com. Tuzagusubiza mu gihe cy’iminsi 15 y’akazi.

10. Cookies n’Ikinyurwamo (Tracking)

Urubuga rwacu rukoresha gusa cookies za ngombwa mu rwego rwa tekiniki zikenewe mu kwemeza umwirondoro no kumenya igihe wamaze ufunguye konti. Ntabwo dukoresha cookies zikurikirana ibyo ukora (tracking cookies), izamamazwa (advertising cookies), cyangwa isesengura (analytics) rishobora kumenya umwirondoro wawe bwite.

11. Guhinduka kw’aya Mabwiriza

Dushobora kuvugurura aya mabwiriza igihe icyo ari cyo cyose. Iyo dukoze impinduka z’ingenzi, tuzabimenyesha binyuze kuri imeyili (email) nibura iminsi 14 mbere y’uko impinduka zitangira gukoreshwa. Itariki iri hejuru y’iyi paji yerekana igihe aya mabwiriza aherukiraga kuvugururwa.

12. Twandikire

Declara — icungwa na Declara Ltd Birembo, Kigali, Rwanda info@declara.rw

Niba utanyuzwe n’ibisubizo cyacu, ufite uburenganzira bwo gutanga ikirego mu Rwego rw’Igihugu rushinzwe Umutekano mu Kijyanye n’Ikoranabuhanga (NCSA) unyuze kuri www.ncsa.gov.rw.

Aya mabwiriza yerekeye ubuzima bwite n'amakuru bwite agengwa n’amategeko y’u Rwanda, harimo n’Itegeko n° 058/2021 ryo ku wa 13/10/2021 ryerekeye kurinda amakuru bwite n’imibereho bwite y’umuntu.