Privacy Notice

1. Who handles your information

Nzitsa Platforms, Lusaka, Zambia, operates Nzitsa AI Labs. Contact legal@nzitsa.com about your personal data or this notice. This notice describes platform data handling; it is not permission for unrestricted processing.

2. Information the service handles

Account information includes your name, email, password credential, account purpose, assigned roles and organisation memberships. We also record invitations, terms versions accepted, account changes and security-related activity.

AI requests can include prompts, conversation history, uploaded content and generated results. Some features retain request content for history or application operation. Usage, request status, credit reservations and deductions, payments and audit records are also stored. Do not assume a conversation is temporary or anonymous unless a feature expressly says so.

When you link external services, we process granted scopes, account and namespace metadata, and credentials needed for the connection. Credentials are handled server-side; do not share them through prompts or support messages.

3. Why information is processed

We use information to authenticate you, provide requested AI and application features, manage organisation access, handle billing and credits, deliver account communications, investigate abuse and maintain security and audit records. Processing must have an appropriate legal basis, such as providing the requested service, complying with a legal obligation or another basis permitted by applicable law.

Accepting the terms is not an optional marketing opt-in. Where an optional purpose requires consent, we must ask separately and explain how to withdraw it.

4. Providers, sharing and international processing

Selected AI features send relevant request content to the configured external provider. OpenRouter can route requests to its model providers; Hugging Face may process linked-account operations, datasets and inference. Transactional email and payment services receive information necessary for the action requested.

Guest and signed-in Nzitsa Chat use the administrator-configured model and allow provider data use without a separate privacy checkbox. Messages and conversation context sent with requests may be retained, used for model training or published by the provider. The warning below the composer explains this before you send. Nzitsa records the Chat policy and disclosure version, not an individual checkbox consent. Guest prompts and answers are not stored as account chat history by Nzitsa; guest browser history and provider processing are separate. Signed-in conversation history is retained for the Chat feature. Do not submit personal or confidential information, secrets or other people’s information. Do not use Chat for content requiring a no-data-use provider restriction. This Chat policy does not automatically change the controls on other AI features. Contact legal@nzitsa.com about applicable data requests; stopping future requests cannot undo data already sent.

Providers may process information outside Zambia. Applicable safeguards, provider arrangements and legal requirements must be assessed for the service being used. This notice does not represent that every model has identical privacy or retention settings. Organisation administrators can access information made available by their assigned permissions. We may disclose information where lawfully required or necessary to investigate misuse.

5. Retention and security

We retain information for the purposes described, including account operation, saved content, accounting, security, dispute resolution and legal obligations. Closing an account does not automatically erase every transaction, audit record or backup. Ask legal@nzitsa.com about retention or deletion for your specific information.

Access controls, password hashing and server-side credential encryption help protect information. No internet service can guarantee absolute security. You are responsible for protecting your credentials and using appropriate permissions for shared applications and repositories.

6. Cookies and browser storage

The platform uses session cookies for authentication and browser storage for preferences and feature state, such as theme or guest chat history. Blocking necessary storage may affect those features. Any non-essential tracking requiring consent must be disclosed and offered separately; accepting these terms is not a tracking-consent substitute.

7. Your choices and rights

Contact legal@nzitsa.com to request access, correction, account closure, deletion or other rights available under applicable data-protection law. We may need to verify your identity without asking for your password. Some requests may be limited by lawful recordkeeping duties or others’ rights; we will explain applicable limitations.

You may raise privacy concerns with Zambia’s Data Protection Commission or another competent authority. Disconnect external accounts or revoke their permissions with the provider when you no longer want the connection. Our authenticated service is intended for adults aged 18 and over; under-18 accounts are not available in this release.

8. Updates to this notice

The notice version and effective date are published here. Significant changes will be communicated through the account acceptance flow or other appropriate notice. A new notice does not itself create consent for unrelated optional processing.