Privacy Policy

1. Scope

This policy applies to the Fiscal Pro website and related online services where this policy is displayed or linked.
If you are an enterprise customer using Fiscal Pro under a signed SLA/MSA/DPA, additional privacy and data processing terms may apply.

2. Information we collect

We may collect the following categories of information:

2.1 Information you provide directly

• Contact details (name, email, phone) when you fill a form, request a demo, or contact support.
• Business details (company name, industry, branch details) when you inquire about services.
• Content you submit (messages, attachments, support tickets).

2.2 Information collected automatically

• Device and browser details (IP address, browser type, operating system, device identifiers where available).
• Usage data (pages visited, time on site, clicks, referring URLs).
• Log and security data (to detect abuse and protect accounts).

2.3 Information processed on behalf of customers

If you use Fiscal Pro as a business customer, the Platform may process transactional records (for example invoices, invoice lines, customer references,
branch information, and fiscalization metadata) as part of providing the service.
In many cases, Fiscal Pro acts as a service provider processing that information under the customer’s instructions.

3. How we use information

We use information for purposes such as:

• Providing the Services: onboarding, account management, support, troubleshooting, and service communication.
• Compliance & auditability: supporting lawful record-keeping and operational integrity of fiscal workflows.
• Security: fraud prevention, abuse detection, rate limiting, and protecting our infrastructure.
• Improving the Services: analytics to understand what works and what needs improvement.
• Sales and marketing: responding to inquiries, sending service updates, and (where permitted) promotional communication.

4. Legal bases (where applicable)

Depending on the context and applicable law, we may process data because:
(a) it is necessary to perform a contract, (b) you consented, (c) we have a legitimate business interest (like securing our systems),
or (d) we must comply with a legal obligation.

We aim to comply with applicable data protection laws, including Zimbabwe’s Cyber and Data Protection legal framework, where relevant.

5. When we share information

We do not sell your personal information. We may share information only in these situations:

• Service providers: hosting, monitoring, email/SMS delivery, analytics, customer support tooling—only as needed to deliver the service.
• Integration partners: where you request or enable an integration (for example, ERP/POS or payment integrations).
• Legal requirements: if required by law or to protect rights, safety, and security.
• Business transfers: in the event of a merger, acquisition, or restructuring (with appropriate safeguards).

6. Security

We use administrative, technical, and physical safeguards designed to protect information. Examples include access controls, encryption in transit where applicable,
monitoring, and least-privilege practices. No system is 100% secure; you also play a role by using strong passwords and protecting your devices.

7. Data retention

We keep information only as long as necessary for the purposes described above, including meeting legal, accounting, and audit requirements.
Retention periods may differ by data type and by contract.

8. Your rights and choices

Depending on applicable law, you may have rights to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion where appropriate (note: some records must be retained for legal/compliance reasons).
• Object to certain processing or request restriction.
• Withdraw consent where processing is based on consent.

To make a request, contact us using the details at the bottom of this page. We may need to verify your identity before acting on a request.

9. Cross‑border data transfers

Our service providers or infrastructure may be located in different countries. When data is transferred across borders,
we take steps to ensure appropriate safeguards are in place (for example, contractual protections and security controls).

10. Children

Our Services are designed for businesses and are not intended for children. If you believe a child has provided personal information to us,
please contact us so we can take appropriate steps.

11. Cookies

We use cookies and similar technologies for essential functionality, analytics, and preferences. See our
Cookie Policy for details and how to manage your choices.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be reflected by the “Last updated” date.
If changes are material, we will take reasonable steps to notify users (for example via the website).