Privacy Policy

Website, mobile app, billing portal, and support channels. Effective date: 15 April 2026.

1. Who we are

Zari is operated by Powrgen Limited. Zari is a trading name of Powrgen Limited.

Registered address: 27 Talbot Road, Southerton, Harare, Zimbabwe. Website: zarihq.com. Privacy contact: legal@zarihq.com. General contact: hello@zarihq.com. Support contact: support@zarihq.com. Support WhatsApp / phone: +263787545553.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when people visit our website, use our mobile app, create an account, subscribe to paid plans, contact support, receive invoices or receipts, or otherwise interact with our services.

In privacy law terms, Powrgen Limited is generally the controller of personal information we collect for our own business purposes. In some situations, we may process information on behalf of a business customer, in which case that business customer may act as the controller and we may act as a processor or service provider for that information.

2. Services this Policy covers

This Policy applies to the Zari website, mobile app, customer portal, billing pages, support interactions, marketing sign-up forms, onboarding forms, and related communications that link to or refer to this Policy.

It does not automatically apply to third-party services, websites, app stores, payment providers, or integrations that have their own privacy notices. When you interact directly with those services, their own policies and terms may also apply.

3. The information we collect

Identity and account information, such as your name, business name, email address, phone number, password credentials, user role, subscription status, and account preferences.
Business profile information, such as business name, currency settings, address details, receipt or invoice details, tax or registration fields, and team member records.
Transaction and bookkeeping information, such as products or services, customers, sales, refunds, payments, receipts, invoices, quotes, expenses, recurring costs, outstanding balances, export files, and business reports.
Billing and payment information, such as plan selection, renewal status, billing country, billing history, invoices, receipts, payment confirmations, payment processor references, and mobile money or app store transaction references. We do not intend to store full raw card details ourselves where payments are processed by third-party providers.
Technical and device information, such as device type, operating system, browser type, app version, language, time zone, IP address, crash data, log data, and diagnostic events.
Communications and support information, such as emails, feedback submissions, support messages, attachments, and notes relating to account assistance, payment support, or dispute handling.
Marketing and preference information, such as whether you opted into newsletters, product updates, or campaigns, plus cookie or consent choices where relevant.
Approximate location or regional information inferred from IP address, billing country, regional settings, or market selection for purposes such as security, fraud prevention, lawful tax handling, localisation, and billing eligibility.

4. How we collect information

Directly from you when you sign up, create a business, fill in forms, make payments, contact support, submit feedback, or use the app or website.
Automatically when you use our website or app, including through logs, cookies, analytics tools, device identifiers, and similar technologies where permitted by law.
From business owners, administrators, or team managers who create or manage your access to a Zari workspace.
From third-party providers that support authentication, hosting, payments, analytics, app distribution, support, or communications.
From app stores when you subscribe, renew, restore purchases, or manage mobile subscriptions through Apple or Google.

5. Why we use personal information

To create and manage user accounts and business profiles.
To provide core Zari features including sales records, expenses, refunds, receipts, invoices, quotes, dashboards, exports, business settings, and team access.
To process subscriptions, billing, payment confirmations, receipts, renewal management, and account administration.
To provide customer service, onboarding support, troubleshooting, and service communications.
To maintain service reliability, security, fraud monitoring, audit logging, backup handling, and incident investigation.
To improve Zari through analytics, diagnostics, product development, feature testing, and usage insights where legally permitted.
To send service notices, billing notices, policy updates, and important operational communications.
To send marketing communications where you have consented, where a soft opt-in applies under local law, or where otherwise permitted by law.
To comply with legal, accounting, tax, regulatory, and enforcement obligations.
To establish, exercise, or defend legal claims, respond to disputes, recover debts, or prevent misuse of the platform.

6. Lawful bases we rely on in the UK

Where UK data protection law applies, we generally rely on one or more of the following lawful bases: contract, legitimate interests, legal obligation, and consent where required.

We rely on contract where we need to process information to create your account, provide the service, take payment, or otherwise perform our agreement with you.

We rely on legitimate interests where processing is reasonably necessary to run, secure, improve, support, or administer Zari in a way that does not override your rights and freedoms.

We rely on legal obligation where we must retain or disclose information for tax, accounting, fraud, consumer protection, or regulatory purposes.

We rely on consent where the law requires it, such as certain cookies, certain direct marketing, or other optional processing activities.

7. Cookies and similar technologies

Our website and, where relevant, our web-based billing and support pages may use cookies and similar technologies such as local storage, tags, analytics tools, and diagnostic tools.

Strictly necessary technologies may be used where needed to keep the service secure, remember an active session, process a payment journey, load essential website functions, or store consent choices.

We currently use a cookie consent banner and consent preference controls on our website. We also use Firebase Analytics for website analytics and measurement. Where required by law, non-essential analytics technologies are activated only after valid consent.

You may be able to manage cookies through our consent banner, cookie settings, or your browser controls, although disabling some technologies may affect service functionality.

For more detail about the categories of cookies and similar technologies we use, how they work, and the choices available to you, please see our Cookie Policy.

8. When we share personal information

With service providers and processors that host, store, secure, analyse, authenticate, support, or maintain our services.
With payment providers, payment gateways, app stores, invoicing systems, and mobile money channels that process subscriptions, renewals, receipts, refunds, fraud checks, or payment confirmations.
With communication providers used to send email, support messages, or WhatsApp-related support communications.
With professional advisers such as lawyers, accountants, insurers, auditors, and compliance advisers where reasonably necessary.
With authorities, regulators, law enforcement, courts, or other third parties where required by law or where necessary to protect rights, safety, or legal claims.
With counterparties involved in a merger, acquisition, financing, reorganisation, or sale of assets.

9. International data transfers

Because Zari uses cloud providers and service partners that may operate internationally, personal information may be transferred to, stored in, or accessed from countries outside the UK or your home jurisdiction.

Where required by law, we take steps designed to protect transferred information. Depending on the transfer, those steps may include adequacy decisions, standard contractual clauses, contractual safeguards, access controls, encryption, or similar recognised measures.

Key infrastructure and payment partners may include Firebase, Google Cloud, and approved payment providers that support mobile money and card channels where relevant. Additional providers may be introduced for certain markets over time.

10. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the service, maintain business records, resolve disputes, enforce agreements, meet legal obligations, and support legitimate audit and security needs.

Active account information is usually retained while your account or business workspace remains active.

Financial and transaction records may be retained for longer where needed for accounting, tax, fraud prevention, dispute resolution, backups, audit trails, or legal compliance.

Support records, logs, and diagnostics may be kept for different periods depending on operational need and legal requirements.

Where deletion is requested, some information may remain in backups, audit logs, legal hold systems, or records required for compliance, fraud prevention, or security.

11. Your privacy rights

Depending on where you are located, you may have rights in relation to your personal information, including the right to access, correct, delete, restrict, object to certain processing, withdraw consent where relevant, and request portability where the law provides that right.

If you want to exercise a privacy right, please contact legal@zarihq.com. We may need to verify your identity before actioning a request.

Where UK GDPR applies, you may also complain to the UK Information Commissioner's Office if you are unhappy with how your information has been handled.

12. Additional notice for US users, including California

If you are a resident of a US state with privacy rights laws that apply to us, including California where applicable, you may have additional rights relating to access, correction, deletion, portability, and information about categories of personal information collected, disclosed, or shared.

At the date of this Policy, Zari's position is that it does not sell personal information for money in the ordinary sense.

If any practice could fall within a broader US statutory definition of "sharing", especially in connection with advertising technologies, we will update this Policy and any required choice mechanisms accordingly.

California users may contact legal@zarihq.com to exercise applicable rights or make enquiries about this Policy.

13. Marketing communications

We may send service-related messages without separate marketing consent where those messages are necessary for your account, billing, renewals, security, updates, or support.

We may send marketing or promotional messages only where legally permitted. You can opt out of marketing emails at any time by using the unsubscribe link or by contacting us at hello@zarihq.com.

Opting out of marketing does not stop essential service communications.

14. Automated decision-making and profiling

We may use limited automated tools for fraud monitoring, security alerts, billing risk detection, diagnostics, service performance analysis, and feature eligibility.

We do not currently describe Zari as making solely automated decisions with legal or similarly significant effects on individuals unless and until that becomes factually true and is specifically disclosed.

15. Children

Zari is intended for business and commercial use and is not directed to children. We do not knowingly collect personal information directly from children in circumstances where parental consent would be required by law. If you believe a child has provided personal information to us inappropriately, please contact us so we can review and remove it where appropriate.

16. Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, and disclosure. These measures may include authentication controls, role-based permissions, audit logging, encryption in transit, secure infrastructure providers, and restricted internal access.

No system can guarantee absolute security, and you are also responsible for maintaining the confidentiality of your account credentials and devices.

If you want to report a security concern, please contact support@zarihq.com.

17. Third-party services and app stores

Some subscriptions, payments, downloads, or communications may be handled through third parties such as payment processors, app stores, messaging platforms, hosting providers, or analytics providers.

Where you purchase a subscription through Apple App Store or Google Play, those platforms may collect and process information under their own privacy notices and billing rules. Refunds or subscription management for those purchases may also be subject to their rules.

Where you purchase directly through our website, billing portal, admin-assisted payment flow, or other permitted channels, our own billing, refund, and subscription terms will apply together with the relevant payment processor's terms.

18. Changes to this Policy

We may update this Privacy Policy from time to time to reflect legal, technical, product, or operational changes. When we do, we will update the effective date and, where appropriate, take reasonable steps to notify users of material changes.

19. Contact us

Zari Privacy Team
Email: legal@zarihq.com
Support: support@zarihq.com
General enquiries: hello@zarihq.com
WhatsApp / phone: +263787545553
Postal address: 27 Talbot Road, Southerton, Harare, Zimbabwe
Website: zarihq.com