Legal information

Zorvetska Limited (“Zorvetska”, “we”) operates Zorvetiq Business ResilienceSight. We process personal data in accordance with the Kenya Data Protection Act 2019 and its Regulations.

We collect account information (name, work email, phone, company details), billing records processed by Paystack, platform usage logs and the backup metadata required to deliver the service. Backup content is encrypted and is not accessed by Zorvetska staff except on your written instruction for support.

Personal data is used to provide, secure and bill for the service, to send service notifications and to meet legal obligations. We do not sell personal data. Data is stored in-country by default.

You may request access, correction, portability or deletion of your personal data, or object to processing, by contacting [email protected]. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

By creating an account you agree to use the platform lawfully and only for data you are entitled to process. You are responsible for keeping login credentials confidential.

Subscriptions are billed in USD via Paystack on a monthly basis after the 14-day free trial. You may upgrade, downgrade or cancel at any time; changes apply from the next billing cycle. Fees already paid are non-refundable except where required by law.

We target high availability and verified recoverability, but no system is free of risk. Our liability is limited to the fees paid in the twelve months preceding a claim, to the extent permitted by Kenyan law.

MSP partners are additionally bound by the partner agreement governing white-label use, pricing markups and customer support responsibilities. These terms are governed by the laws of Kenya.

Zorvetska Limited is committed to compliance with the Kenya Data Protection Act 2019 and to cooperation with the Office of the Data Protection Commissioner.

For customer backup data, Zorvetska acts as a data processor on behalf of each customer (the data controller). We implement security safeguards including AES-256 encryption, immutable storage, role-based access control, strict tenant isolation and tamper-evident audit logs.

Personal data breaches affecting customer data will be notified to the affected controller without undue delay so that the controller can meet its 72-hour notification obligation under Section 43 of the Act.

Data is stored in Kenyan regions by default and is not transferred outside Kenya without appropriate safeguards and the customer’s instruction.