Skip to main content

Privacy Policy

GoodAV Privacy Policy explaining our data protection standards, Law No 058/2021 compliance, AI Concierge data handling, and client rights.

Last updated: September 21, 2026

1. Introduction

GoodAV Ltd ("GoodAV," "we," "us," or "our") is an integrated media production agency and event audiovisual staging enterprise headquartered in Kigali, Rwanda (KG 7 Ave, Kigali • info@goodav.net • +250 788 613 332).

We respect your privacy and are committed to safeguarding your personal data in full compliance with Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy under the oversight of the National Cyber Security Authority (NCSA / Data Protection Office - DPO) in Rwanda, and international data protection standards including the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, process, retain, and protect your information across our website (https://goodav.net), our GoodAV AI Concierge planning interface, and our operational booking workflows.

2. Information We Collect

We collect information through three primary channels:

A. Information You Voluntarily Provide

  • Client & Identification Details: Full name, corporate or organizational affiliation, professional job title, official work email address, and direct telephone/WhatsApp number.
  • Production & Event Specifications: Target dates, filming or event locations (e.g., Kigali, Bugesera, Musanze, regional East Africa), scale of attendees or filming days, creative brief, technical equipment requirements, and budget preferences.
  • Invoicing & Compliance Details: Company registration details, VAT/TIN numbers for Rwanda Revenue Authority (RRA) Electronic Billing Machine (EBM) tax invoices, and billing contact information.

B. GoodAV AI Concierge & Interactive Planning Intake

When you interact with our GoodAV AI Media & Event Production Concierge:

  • Conversational Intake: The text prompts, project descriptions, and technical queries you exchange with the assistant are processed to generate tailored equipment recommendations, reserve complimentary 48-hour date holds, and produce itemized booking drafts.
  • Voice Dictation: When you enable the microphone button, voice audio is converted into text directly in your browser using the local Web Speech API. GoodAV does not record, intercept, or store raw voice audio files on its servers.
  • Session Continuity: Your interactive conversation and draft parameters are cached locally in your browser's `sessionStorage` (under `goodav_ai_messages` and `goodav_ai_draft`) so your planning progress is preserved during your visit. You can clear this anytime by clicking "Start fresh consultation."

C. Automatically Collected Technical Information

  • Network & Device Telemetry: Anonymized IP addresses, browser engine and version, operating system, language preferences, and referral source.
  • Performance & Security Logs: CDN edge caching, WAF security verification, and page navigation metrics to ensure continuous site availability.

3. Artificial Intelligence & Sub-Processor Inference

To provide immediate, outcome-driven technical advice, the GoodAV AI Concierge utilizes enterprise-tier inference partners (including Groq, NVIDIA NIM, and Google Gemini):

  • Strict Data Isolation: Data passed during an active conversation is processed ephemerally solely to formulate your response.
  • No Training on Customer Data: Our enterprise API agreements ensure that your private project details, commercial briefs, and corporate names are never used to train, retrain, or improve foundational third-party public AI models.
  • Human Technical Review: All AI-generated holds and specifications are preliminary. Final equipment availability, flight/travel logistics, and binding price quotes are verified and confirmed by our human Senior Technical Directors in Kigali.

4. How We Use Your Information

We process personal data solely for legitimate, transparent commercial purposes:

  1. Quotation & Proposal Delivery: Generating itemized Bills of Quantities (BOQs), technical production riders, and formal proposals sent to your verified work email address.
  2. Date Protection & Crew Scheduling: Placing complimentary 48-hour equipment and crew holds on Kigali production schedules while specifications are finalized.
  3. Multi-Channel Coordination: Contacting you via email or WhatsApp (where provided) to confirm site surveys, technical riders, and equipment dispatches.
  4. Legal & Tax Compliance: Issuing official RRA-compliant EBM tax invoices and maintaining lawful corporate accounting records pursuant to Rwandan commercial regulations.

5. Communications & WhatsApp Coordination

  • Email Communications: Official PDF proposals and reference summaries are dispatched via secure transactional email (Resend) from `info@goodav.net` or `bookings@goodav.net`.
  • WhatsApp Consultations: WhatsApp is strictly optional. If you provide a mobile number with your country code or click our WhatsApp direct links, our Kigali executive team may share fast status updates and mobile decks via WhatsApp (+250 788 613 332). You may opt out of WhatsApp communication at any time.

6. Data Retention Policy

  • Active Production Records: Project files, contracts, and RRA tax invoices are retained for the statutory period required by Rwandan tax and corporate law (10 years).
  • Unconfirmed Inquiries & Abandoned Sessions: Inquiries that do not convert into active contracts are automatically pruned or anonymized after thirty (30) days.
  • Local Browser Cache: Session storage data expires immediately when you close your browser tab or clear your browser cache.

7. Your Legal Data Rights

Under Rwandan Law No 058/2021 and international privacy standards, you hold the following rights:

  • Right to Access: Request a copy of all personal data GoodAV holds regarding you or your organization.
  • Right to Rectification: Request immediate correction of inaccurate or incomplete contact details.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer legally required.
  • Right to Object / Withdraw Consent: Withdraw permission for marketing or mobile messaging at any time.
  • Right to Complain: If you believe your data has been handled improperly, you have the statutory right to lodge a formal complaint with the National Cyber Security Authority (NCSA / Data Protection Office) of Rwanda (https://dpo.gov.rw).

8. Data Security & Storage Architecture

All data transmitted across GoodAV interfaces is secured using Transport Layer Security (TLS 1.3 / HTTPS) with end-to-end cryptographic encryption at rest in our dedicated PostgreSQL database (Supabase, ISO 27001 / SOC 2 Type II certified). Strict Row-Level Security (RLS) policies prevent unauthorized cross-tenant data access.

9. Contact Our Data Protection Officer

If you have questions, data access requests, or privacy concerns, contact our designated privacy lead:

Frequently Asked Questions

Have questions about this policy?
Contact for Privacy