Privacy Policy

RDX LTD ("RDX", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Rwanda Digital Exchange platform at rwandadigitalexchange.com and our mobile applications.

1. Information We Collect

Account Information: email address, first name, last name, phone number, and password (stored securely hashed).

Identity Verification: government-issued identification documents, selfie photos, and proof of address as required by AML/KYC regulations.

Transaction Data: deposit and withdrawal amounts, wallet addresses, mobile money phone numbers, transaction dates, and blockchain transaction hashes.

Device & Usage Data: IP address, browser type, device type, operating system, pages visited, and session duration.

2. How We Use Your Information

We use your data to: provide and maintain our exchange services; process deposits, withdrawals, and swaps; verify your identity as required by law; prevent fraud and money laundering; send transaction confirmations and security alerts; improve our platform and user experience; comply with legal and regulatory requirements.

3. Data Sharing

We do not sell your personal data. We may share information with: payment processors (PawaPay for mobile money, OxaPay for crypto) to process your transactions; law enforcement or regulatory bodies when required by Rwandan law; service providers who help us operate the platform (hosting, email delivery), under strict confidentiality agreements.

4. Data Security

We implement industry-standard security measures: HTTPS/TLS encryption for all data in transit; bcrypt password hashing; two-factor authentication (2FA); encrypted storage for sensitive credentials; database-level access controls and audit logging.

5. Data Retention

We retain your account data for as long as your account is active. Transaction records are kept for a minimum of 5 years as required by anti-money laundering regulations. You may request account deletion by contacting us, subject to legal retention requirements.

6. Your Rights

You have the right to: access your personal data; correct inaccurate information; request deletion of your account (subject to legal requirements); withdraw consent for marketing communications; receive a copy of your data in a portable format.

7. Cookies

We use essential cookies for session management and security (CSRF protection). We do not use advertising or tracking cookies.

8. Children's Privacy

Our services are not available to individuals under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance.

10. Contact

For privacy inquiries: byiringirodigson@gmail.com | +250 786 602 770
RDX LTD, Gatsibo, Eastern Province, Rwanda