Last Updated: April 29, 2025
At URL.rw, operated by Resident.Ventures, a U.S.-based company, we value your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when using URL.rw, menu.url.rw, and our link-in-bio, QR code generation, URL shortening, and digital menu services (collectively, the “Services”). We comply with the EU General Data Protection Regulation (GDPR) for EU users and Rwanda’s Law No. 058/2021 for applicable users.
1. Information We Collect
a. Information You Provide
-
Account Information: Name, email, password.
-
User Content: Links, QR codes, biolink content, menu details (e.g., items, prices).
-
Custom Domains: Domain information.
-
Communications: Support inquiries.
b. Automatically Collected Information
-
Usage Data: IP address, browser type, device info, pages visited.
-
Analytics Data: Clicks, geolocation, referral sources for URLs, QR codes, or menus.
-
Cookies/Tracking: We use cookies for functionality, analytics, and personalization.
c. Third-Party Information
Data from analytics or hosting providers.
2. How We Use Your Information
We use data to:
-
Provide Services (e.g., generate QR codes, manage menus).
-
Personalize experiences (e.g., biolink themes).
-
Analyze usage (e.g., click metrics).
-
Communicate (e.g., support, updates).
-
Comply with GDPR, Rwandan law, and other regulations.
Legal Basis (GDPR):
-
Consent (e.g., cookies, marketing).
-
Contract performance (e.g., account services).
-
Legitimate interests (e.g., analytics, security).
3. How We Share Your Information
We do not sell personal data. We may share with:
-
Service providers (e.g., hosting, analytics) under GDPR-compliant agreements.
-
Legal authorities to comply with laws or protect rights.
-
Business transfer recipients (e.g., mergers).
-
Anonymized data for industry insights.
4. Cookies and Tracking
-
Cookies enhance functionality and analytics. Manage via browser or our consent banner (EU users).
-
Analytics tools (e.g., Google Analytics) are GDPR-compliant.
-
EU users: Consent is obtained before non-essential cookies are set.
5. Data Subject Rights (GDPR)
If you are in the EU, you have the right to:
-
Access, correct, or delete your data.
-
Restrict or object to processing.
-
Data portability.
-
Withdraw consent.
-
Lodge a complaint with a Data Protection Authority.
Contact our Data Protection Officer (DPO) at privacy@URL.rw to exercise rights.
6. Data Security
We use encryption, access controls, and GDPR-compliant providers. No system is fully secure, but we strive to protect data.
7. Data Transfers (GDPR)
Data may be transferred to the U.S. or other non-EU countries. We use Standard Contractual Clauses (SCCs) to ensure GDPR-level protection.
8. Your Choices
-
Update/delete account via login or hi@URL.rw.
-
Disable cookies (may limit functionality).
-
Opt out of non-essential analytics or marketing emails.
9. International Users
Non-EU data may be processed in the U.S. EU users’ data is handled per GDPR. Rwandan users’ data complies with Law No. 058/2021.
10. Children’s Privacy
Services are not for users under 13 (16 in some EU states). We delete data if we learn it belongs to children.
11. Third-Party Links
URLs, QR codes, or biolink pages may link to third-party sites. We are not responsible for their practices.
12. Data Protection Officer
Our DPO can be reached at hi@URL.rw for GDPR or Rwandan law inquiries.
13. Changes to This Policy
Updates will be communicated via website or email. Continued use constitutes acceptance.
14. Contact Us
For questions or rights requests:
-
Email: hi@URL.rw