Data Protection & Privacy Policy

1. Sovereign Jurisdiction (Law N° 058/2021)

MistCloud is a commercial infrastructure and sovereign cloud department operated by Spiderbit Ltd, registered under the laws of the Republic of Rwanda. All computing instances, persistent NVMe block storage volumes, databases, and automated backups deployed in the KGL1 (Kigali) region remain strictly inside the national territorial boundaries of Rwanda.

• Full compliance with Rwanda Law N° 058/2021 relating to the protection of personal data and privacy.
• Zero unapproved cross-border data replication or foreign intelligence sharing.
• Registered data controllers and certified infrastructure operators based in Kigali.

2. Customer Workload Ownership & Confidentiality

You maintain 100% intellectual property and exclusive ownership over all code, customer records, databases, media, and configurations hosted on your MistCloud services. MistCloud engineers and automated daemons do not inspect, parse, monetize, or train machine learning models on customer payloads.

3. Payment Rails & Mobile Money Security

All transactions settled via MTN Mobile Money, Airtel Money, or bank debit rails are encrypted end-to-end with TLS 1.3 and verified via direct API handshakes with telecom switches. MistCloud never stores private PINs or raw card numbers on disk.

4. Data Retention & Erasure

Upon termination of an instance or account deletion, all associated NVMe blocks are cryptographically shredded using DoD 5220.22-M zero-overwrite standards within 48 hours.