Privacy Policy

Fosia Ltd ("KURA", "we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the KURA platform.

We comply with applicable Rwandan data protection law and, where applicable, the General Data Protection Regulation (GDPR) for users in the European Union.

Account data: Name, email address, password (hashed), profile photo, country, and role (entrepreneur, investor, mentor, institution).

Profile data: Biography, expertise areas, sector focus, investment thesis, company details, and any other information you add to your profile.

Pitch data: Project names, descriptions, financial information, uploaded documents, and media files you submit as pitch content.

Usage data: Pages visited, features used, session duration, search queries, and interaction events. Collected via server logs and analytics.

Communication data: Messages sent through the platform, booking requests, and support inquiries.

Payment data: Payment method type and last 4 digits (full card data is processed by Stripe and never stored by KURA).

• To operate and improve the KURA platform and its features
• To match entrepreneurs with investors and mentors using AI scoring
• To send transactional emails (booking confirmations, notifications)
• To process payments for mentor sessions and credit purchases
• To enforce our Terms of Service and prevent fraud
• To comply with legal obligations
• To send platform updates and product news (you may opt out at any time)

We do not sell your personal data to third parties. We do not use your data for advertising outside of the KURA platform.

KURA uses Claude (by Anthropic) to power AI features including pitch scoring, investor matching, mentor recommendations, and content generation. When you use AI features, relevant portions of your pitch or profile data are sent to Anthropic's API for processing.

Anthropic processes this data in accordance with their API Data Privacy terms. We do not use AI outputs to make automated decisions that have legal or similarly significant effects without human review.

We share your data only with:

• Other platform users — profile information is visible to matched investors/mentors as per your privacy settings
• Anthropic — for AI feature processing (see Section 4)
• Stripe — for payment processing
• Resend — for transactional email delivery
• Vercel — for platform hosting and infrastructure
• Neon — for encrypted database storage
• Law enforcement — when required by law or court order

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records may be retained for 7 years).

Aggregated and anonymized data (e.g., ecosystem statistics) may be retained indefinitely.

You have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Objection — object to processing for marketing purposes

To exercise these rights, contact us at hello@kurarw.com. We will respond within 30 days.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, hashed passwords (bcrypt), and strict access controls. Despite our best efforts, no system is 100% secure. In the event of a data breach, we will notify affected users in accordance with applicable law.

KURA uses cookies and similar technologies for authentication, session management, and analytics. See our Cookie Policy for details.

For privacy questions or to exercise your rights, contact our Data Protection contact at: hello@kurarw.com

Fosia Ltd
Kigali, Rwanda