Privacy Policy

1. Who we are

Ramani (“we”, “us”) provides guidance on visa lotteries for Kenyans, including free guides and a paid AI assistant. Ramani is not affiliated with any government. We do not enter lotteries for you and we do not guarantee selection.

Questions about this policy or your data: hello@visalottery.co.ke.

2. What we collect

• Sign-in details (Google): your email address, display name, profile picture URL, and Google account ID. We receive these when you sign in with Google. We do not receive your Google password.
• Phone number: collected when you pay with M-Pesa, sign up for lottery alerts, or submit a report. We store only a salted hash of it, which we use to match records to you. We do not store the number itself.
• Payment records: the lottery and tier you paid for, the amount in KES, payment status, and the M-Pesa receipt number.
• AI assistant conversations: the messages you send and the replies you receive during a paid session. Passport numbers and national ID numbers are redacted before storage.
• Usage records: the AI model used, token counts and cost for each assistant reply. We use these to run and bill the service.
• Reports you submit: the type of report, your text, any link you include, and the phone hash if you gave a phone number.
• Photos for the photo check: the photo check runs in your browser. The photo is not uploaded to our servers or to any other service.

3. How we use it

• To sign you in and keep you signed in for your session.
• To take payments, unlock paid sessions, and record what you bought.
• To run the AI assistant and count your included messages.
• To send lottery alerts you asked for, and to process reports.
• To keep the service secure, prevent abuse, and fix problems.
• To improve answers: the questions you ask may be stored without your name, phone number or email, and used to find questions many people ask. We only publish a question after a person has checked it.

We do not sell your personal information, and we do not use it for advertising.

4. Who we share it with

We share data only with the providers needed to run the service:

• Google — sign-in.
• Safaricom M-Pesa (Daraja) — sends the payment prompt to your phone and confirms payment.
• OpenRouter — the AI model providers that generate assistant replies. Your messages are sent to them to produce a reply.
• Neon — our database host.
• Vercel — hosts the website.
• Render — hosts the backend API.

We may disclose information if the law requires it.

5. Cookies and browser storage

We do not use advertising or third-party analytics cookies. The site stores your sign-in token in your browser’s local storage so you stay signed in. You can clear it by signing out or by clearing your browser data.

6. How long we keep it

• Paid assistant sessions expire 7 days after they are created, and access ends at that point.
• Account, payment and report records are kept while your account is active and for as long as needed for accounting, legal and fraud-prevention purposes.
• You can ask us to delete your account and personal data, subject to those legal requirements.

7. Security

We use HTTPS, store phone numbers as salted hashes, redact passport and ID numbers from chat, and limit access to the systems that hold personal data. No system is completely secure, so please use a strong Google account password and tell us at once if you suspect your account has been misused.

8. Your rights

Under Kenya’s Data Protection Act, 2019, you may ask us for a copy of your personal data, ask us to correct it, object to certain processing, or ask us to delete it. Email hello@visalottery.co.ke and we will respond. You may also complain to the Office of the Data Protection Commissioner in Kenya.

9. Changes to this policy

We may update this policy. When we do, we will change the “last updated” date above. Continued use of the service after a change means you accept the updated policy.