Rechargely is a bill payment service. To pay a bill we need to know which number or account to pay and how to reach you with the receipt — and that is very nearly the whole of it. This policy sets out the rest honestly, including the advertising measurement we run, the product analytics that show us where people get stuck, and the automated assistants we use.
At a glance
- We collect the number or account you are paying for, and a mobile number and optional email for the receipt.
- We never see your card number, your mobile money PIN or your wallet password. Those are entered on our payment partner's own secure page.
- We measure advertising with the Meta Pixel and equivalent click identifiers from other ad platforms.
- We measure how the service is used with PostHog, a product analytics provider in the United States. Once you start a checkout it receives an identifier derived from your mobile number by a one-way hash — never the number itself.
- Our support chat and WhatsApp channel are assisted by AI, so message text reaches an AI processing partner.
- You can ask us to delete your data at any time — see Data Deletion.
1. Who is responsible for your data
Jugaad (Pvt) Ltd, a company registered in Zimbabwe with its registered office at 91 Livingstone Avenue, Harare, Zimbabwe, operates rechargely.online and the Rechargely WhatsApp channel under the Rechargely name, and is the data controller for the information described here. Contact us at support@rechargely.online or +263 77 983 4648.
We handle personal information in line with Zimbabwe's Cyber and Data Protection Act, 2021 and, where it applies to you, comparable data protection law elsewhere.
2. What we collect
Information you give us
- The payment reference — the mobile number, prepaid meter number, smartcard number or account number the purchase is for. This may be yours or someone else's.
- A contact mobile number, so the receipt can reach you by SMS or WhatsApp.
- An email address, only if you choose to give one, for an emailed receipt.
- Transaction details — the product, biller, amount, currency, any add-ons and any referral code.
- What you write to us — messages in the website support chat, on WhatsApp, or by email, and anything you include in them.
Information we collect automatically
- Technical data — IP address, browser user agent, device and screen characteristics, and the pages you viewed with their timestamps.
- Campaign data — where a visit came from: the referring page, the landing page, the time you landed, UTM tags, and advertising click identifiers such as
fbclid(Meta),gclid(Google),ttclid(TikTok),msclkid(Microsoft),twclid(X) andli_fat_id(LinkedIn), together with the Meta browser identifiers_fbcand_fbp. - Usage events — the steps of a purchase: a page viewed, a category opened, a product and amount chosen, a checkout started, and whether the payment completed or was reversed, together with the product, category, amount and currency involved.
- Transaction status returned by the biller and by our payment partner.
What we do not collect
Card numbers, CVV codes, mobile money PINs and wallet passwords never reach Rechargely. Payment is completed on a hosted page operated by our payment partner, Finivex, and only the outcome of the payment comes back to us. On the WhatsApp channel, anything sensitive is collected inside an encrypted WhatsApp Flow form rather than in the message body.
We do not ask for national identity numbers, dates of birth or physical addresses to make a purchase.
3. Why we use it
| Purpose | Basis |
|---|---|
| Deliver the airtime, data, electricity or subscription you paid for | Performance of our contract with you |
| Send receipts and transaction updates | Performance of our contract with you |
| Answer support questions and investigate failed transactions | Performance of our contract, and our legitimate interest in running a supportable service |
| Detect and prevent fraud and abuse | Our legitimate interest, and legal obligation |
| Measure which adverts and campaigns lead to sales | Our legitimate interest in advertising efficiently, and your consent where required |
| Understand how the service is used, where people get stuck, and whether customers come back | Our legitimate interest in improving a service people can actually finish using |
| Keep transaction and accounting records | Legal obligation |
| Send marketing messages | Your consent, which you can withdraw at any time |
4. Advertising measurement
Rechargely advertises on Meta platforms, and we need to know which adverts produce sales. Two things make that possible:
- The Meta Pixel runs in your browser and reports page views, product views, items added, and checkouts started, along with the browser identifiers Meta sets.
- The Meta Conversions API reports a completed purchase from our server, because the payment itself finishes on our payment partner's page where a browser tag cannot see it.
Both send Meta the event, its value, and identifiers that let Meta match it to an advert click. Meta processes that data under its own privacy policy. We keep the equivalent click identifiers from Google, TikTok, Microsoft, X and LinkedIn so the same measurement works for campaigns on those platforms.
To opt out: block third-party scripts or use your browser's tracking protection, and adjust your Meta ad settings . Blocking these does not affect your ability to buy anything on Rechargely.
5. Product analytics
Advertising measurement tells us which advert produced a sale. It cannot tell us why someone who chose a bundle never finished paying for it. For that we use PostHog, a product analytics service, in its United States region.
What we send it:
- The steps of a purchase — a page viewed, a category opened, a product and amount chosen, a checkout started, and whether the payment completed or was reversed, with the product, category, amount and currency, and whether a referral code was used.
- Which channel you used — this website or the WhatsApp channel — so that the two can be compared.
- Standard technical data — the page address, the referring page, browser, operating system, device type and screen size, and an approximate location worked out from your IP address. Events we send from our own servers have that location lookup switched off, because it would only ever report where our servers are.
- An identifier for your browser, so that separate visits can be recognised as the same person. Until you begin a checkout this is a random value with nothing personal in it.
- An identifier derived from your mobile number, once you begin a checkout — a one-way SHA-256 hash of it. The number itself is never sent. Because that hash is stable, and always gives the same value for the same number, we treat it as personal information rather than as anonymous data, and everything in Your rights applies to it.
What we deliberately do not send:
- Your mobile number, your email address, or the meter, smartcard or account number you are paying — in any form other than the hash described above.
- Anything you type. Automatic capture of clicks and form fields is switched off in our code, so no field contents are collected.
- Session recordings. We do not record or replay your screen, and that feature is disabled.
PostHog acts as a processor on our behalf, under its own privacy policy, and does not use what it receives for its own purposes.
About opting out. These events are sent through our own domain rather than PostHog's, so that they are not lost to tracker blockers — which means a tracker blocker will not stop them either, and we would rather say so than leave you assuming otherwise. Clearing your browser storage discards the browser identifier and begins a new one. To have analytics data about you deleted, use Data Deletion or email us. None of this is needed to buy anything, and removing it changes nothing about your ability to use Rechargely.
6. Cookies and browser storage
Rechargely does not set advertising cookies of its own. What we store in your browser is short and specific:
| Stored as | What it holds | Why |
|---|---|---|
attribution (local storage) | The campaign tags and click identifiers from the visit that brought you here | So a purchase can be credited to the advert that led to it |
referralCode (local storage) | A referral code from a link you followed | So it is still there when you reach the review screen |
scheme (local storage) | Light or dark theme | Your display preference |
| Promo banner key (local storage) | That you dismissed a promotion banner | So it stays dismissed |
cart, chat_session_id (session storage) | The purchase you are part-way through, and a support chat session id | To carry you between steps; cleared when you close the tab |
_fbp, _fbc (cookies) | Meta browser and click identifiers | Set by the Meta Pixel; read by us for advertising measurement |
ph_…_posthog (local storage and a cookie of the same name) | The analytics identifier for your browser, and — once you begin a checkout — the hashed identifier derived from your mobile number | So that separate visits can be recognised as one person, for the analytics in section 5 |
Clearing your browser storage removes all of these. Our pages also load fonts from Google Fonts, which means your browser makes a request to Google's servers.
7. The WhatsApp channel
If you use Rechargely on WhatsApp, we additionally hold:
- your WhatsApp phone number and the profile name WhatsApp supplies;
- the state of your current conversation — what you are part-way through — held temporarily and expired automatically;
- where you have signed in to a Rechargely account through the channel, the link between your number and that account: the account identifier, username and display name. Never your password;
- nicknames and masked account numbers for payees you asked us to save;
- whether you have opted in or out of marketing messages;
- delivery diagnostics for messages we send you — the message identifier, its status and any error. Message bodies are not stored;
- the same purchase-step events described in section 5, marked as coming from the WhatsApp channel rather than the website. Message text is not included in them.
Messages travel over WhatsApp, which is operated by Meta, and Meta processes them as the transport provider under its own terms. Keep sensitive details out of message bodies — anything genuinely sensitive is collected inside an encrypted WhatsApp Flow form.
8. Automated assistants
The support chat on this website and the WhatsApp channel are both assisted by AI. To answer you, the text of your message is sent to an AI processing partner — currently OpenRouter, which routes the request to a model provider such as Anthropic or Google — and the reply is returned to you. Those providers act as processors on our behalf and do not use your messages to train their models.
No AI decision moves money on its own. Anything that debits an account, changes your details or completes a payment requires an explicit confirmation from you first.
9. Who we share it with
- Billers and service providers — the telco, utility or subscription provider receives the reference and amount, because that is what delivers your purchase.
- Our payment partner (Finivex) — receives the transaction so it can take payment, and returns the outcome.
- Meta Platforms — advertising events as described above, and, for the WhatsApp channel, the messages themselves as transport.
- PostHog — the product analytics events described in section 5, including the identifier derived from your mobile number by a one-way hash.
- AI processing partners — the text of chat and WhatsApp messages, as described above.
- Communications providers — the SMS and email providers that carry your receipt.
- Infrastructure providers — hosting, databases and monitoring, under confidentiality obligations.
- Authorities and advisers — where we are required by law, or where it is necessary to establish or defend a legal claim, or to investigate fraud.
We do not sell your personal information, and we do not share it with data brokers.
10. Where your data goes
Some of the providers above operate outside Zimbabwe, so your information may be processed in other countries. In particular, our product analytics are processed by PostHog in the United States; Meta, our AI processing partners and parts of our infrastructure are also outside Zimbabwe. Where that happens we rely on the provider's contractual data protection commitments and use only providers that offer an appropriate standard of protection.
11. How long we keep it
- Transaction records — kept for as long as we are required to keep financial records, and no longer.
- Campaign and attribution data — kept with the transaction it explains; the copy in your browser is overwritten by your next campaign visit or cleared when you clear browser storage.
- Product analytics — held by PostHog for the retention period our plan provides, and deleted sooner on request. It is never used to make an automated decision about you.
- Conversation state — expires automatically, within hours rather than months.
- Support correspondence — kept while the matter is open and for a reasonable period after.
- Marketing opt-outs — kept indefinitely and on purpose: an opt-out record is how we make sure a later import cannot resurrect someone who asked us to stop.
12. How we protect it
Traffic to this site is encrypted in transit, and the site enforces a strict content security policy. Payment credentials never enter our systems. Inbound WhatsApp requests are verified by cryptographic signature before they are acted on, and sensitive input on that channel is collected only through encrypted forms. Access to production data is restricted to the people who need it.
No system is perfectly secure. If a breach affects your information we will act on it and notify you and the regulator where the law requires it.
13. Your rights
You can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct information that is wrong;
- delete your information — see Data Deletion;
- stop using your information for marketing, at any time and without giving a reason;
- withdraw a consent you gave us, without affecting what was done before you withdrew it.
Email support@rechargely.online and we will respond within 30 days. We may need to verify your identity first — usually by confirming control of the number or email the request concerns — because we should not hand someone else's transaction history to whoever asks for it.
If you are not satisfied with our response, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) as the data protection authority.
14. Children
Rechargely is not intended for children under 18. We do not knowingly collect their information; if you believe a child has given us personal information, contact us and we will delete it.
15. Changes to this policy
We update this policy when what we do changes. The date at the top shows when it last changed. Where a change materially affects how we use your information, we will make that clear rather than relying on the date alone.
16. Contact us
Email support@rechargely.online
Phone or WhatsApp +263 77 983 4648
Post Jugaad (Pvt) Ltd, 91 Livingstone Avenue, Harare, Zimbabwe
Or read our Terms of Service.