Handi
Legal

Privacy Policy

This policy explains what personal data Handi collects, why we collect it, and the choices you have. We keep it to what we need to run the marketplace and protect both buyers and artisans.

Last updated January 2026

1. Data we collect

  • Account data — your name, email address, and (if you sign in with Google) your profile photo.
  • Contact data — a phone number when you confirm it by SMS, or provide it for a mobile-money payment.
  • Order data — listings, purchases, commissions, customization answers, delivery confirmations and ratings.
  • Content you upload — product photos/videos, reference images and, for sellers, identity documents submitted for verification.
  • Technical data — basic device and log information needed to keep the service secure and working.

2. How we use your data

  • To create your account and let you buy, sell and communicate.
  • To process payments and hold funds in escrow.
  • To arrange delivery and release funds on confirmation.
  • To verify seller identity and keep the marketplace trustworthy and safe.
  • To send transactional notifications and service messages.
  • To detect and prevent fraud, abuse and illegal activity.

3. Who we share it with

  • Payment providers — Paypack and Pesapal process mobile-money and card payments on our behalf.
  • Authentication — Firebase Authentication handles sign-in and identity.
  • Storage — media you upload (product images, videos, reference images, verification documents) is stored in Cloudflare R2.
  • The other party — for an order, the artisan and buyer see the details needed to fulfil and confirm it.
  • Legal requirements — where we are required by law to disclose information.

We do not sell your personal data.

4. Media uploads

Images and videos you add to a listing are uploaded directly to Cloudflare R2 using short-lived, signed upload links generated by our API. Verification documents are kept private and are only shown to our administrators for review.

5. Cookies and storage

We use essential browser storage to keep you signed in and to remember your preferences. We do not use it to build advertising profiles.

6. Retention

We keep account and order records for as long as your account is active and for a period afterwards where we have a legal, tax or dispute reason to do so. Identity-verification documents are retained only as long as needed for verification and compliance.

7. Your choices

  • You can update your profile and storefront details in your account.
  • You can request access to, correction of, or deletion of your personal data.
  • You can turn off non-essential notifications where offered.

8. Security

We use HTTPS everywhere, keep secrets out of source control, and restrict access to personal data to those who need it to operate the service. No system is perfectly secure, but we work to protect your data.

9. Children

Handi is not intended for use by children under 16. If you believe a child has created an account, please contact us so we can remove it.

10. Contact

For any privacy question or request, email hello@handi.rw. See also our Terms of Use.