Privacy policy

1. Who is responsible

Biligeti Ltd, Norrsken Kigali House, Kigali, Rwanda, is responsible for the personal data processed on Sauundi. We process it in line with Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy.

2. What we collect

• Account details: your name, email address and a securely hashed password. We never store your password itself.
• Profile details you choose to add, such as a producer or artist name, biography, country and picture.
• Orders, licenses and downloads, and the result of each payment. Card and mobile money details are handled by our payment provider, not stored by us.
• What you upload: music, artwork, stems, voice recordings and messages in made-to-order requests.
• Technical data needed for security: IP address, device and browser information, and sign-in sessions.

3. Why we use it

• To run your account and the services you use: listening, buying, licensing, downloads, publishing and music made to order.
• To send the emails the service needs: confirming your email, resetting your password, receipts and updates on your requests.
• To keep Sauundi secure, prevent fraud and misuse, and keep an audit trail of important actions.
• To keep accounting records and meet our legal obligations.

We rely on the contract with you, our legitimate interest in running a safe service, our legal obligations and, where needed, your consent.

4. Who sees it

• Producers see the name of each buyer of their music, and the producer you send a made-to-order request to sees your request, files and messages.
• Our payment provider processes payments; our email provider delivers messages; our hosting and storage providers keep the service running. Each receives only what it needs.
• Authorities, when the law requires it.

We do not sell personal data and we do not use it for advertising.

5. Cookies

Sauundi uses only the cookies needed to keep you signed in securely. There are no advertising or tracking cookies.

6. Where it is kept and for how long

Our servers and providers may be outside Rwanda; where data leaves the country we apply the safeguards the law requires.

We keep account data while your account is open, and order, payment and accounting records for as long as the law requires. Private files are reachable only through signed, expiring links.

7. Your rights

You can ask to access, correct or delete your personal data, to object to or restrict its use, and to receive a copy of it. Write to info@biligeti.com. We answer within the time the law allows. If you are not satisfied, you can complain to the National Cyber Security Authority, Rwanda’s supervisory authority for personal data protection.

8. Changes

We update this policy when what we do with personal data changes, and show the date of the latest version above.