Privacy Policy

Who is responsible

ZukaHQ Inc. is the operator of this website and the controller of the information described here. The company is incorporated in Delaware, United States and managed from Kampala, Uganda. Questions and requests go to founder@zukahq.app.

The public website

The public pages of this site are static. They contain no analytics, no advertising or tracking technology, no embedded social media trackers, and no contact form. Visiting them sets no cookies.

Because the site is served from a hosting provider, ordinary server request logs are produced. These can include your IP address, the page requested, your browser user agent, and a timestamp. They are used to keep the service available and to investigate abuse or faults, and are not used to build a profile of you.

If you email the address above, your message and email address sit in our mailbox so we can reply and keep a record of the enquiry.

Signed-in product areas

Parts of this domain host product software behind a login. These areas are not open to the public and are only used by accounts we have created or approved. For those accounts we process:

• Account details, such as an email address and a hashed password
• Business profile information entered in settings
• Records created by using the product, such as orders or bookings
• Messages exchanged with that business’s own customers, where the product is used for customer messaging

A strictly necessary cookie maintains the login session in these areas. Without it, signing in is not possible. No advertising or analytics cookies are set.

Service providers

We use a small number of providers to run the service. They process information on our behalf and only for these purposes:

• Google Cloud for application hosting and the database. Data is held in the africa-south1 region, Johannesburg, South Africa.
• Resend for transactional email such as account notifications and password resets.

Our messaging product, which is currently paused and not open to new businesses, additionally relies on the WhatsApp Business Cloud API operated by Meta for message delivery, Google Gemini to interpret incoming message text, and Pesapal to issue payment requests. Where that product is in use, information necessary for those functions is shared with those providers.

What we do not do

• We do not sell personal information
• We do not share it for advertising or cross-context behavioural advertising
• We do not use it to train our own machine learning models

Retention

Email enquiries are kept while they remain commercially relevant. Account and product records are kept for as long as the account is active, and are deleted or anonymised on request unless we are required to keep them. Server logs are retained on a short rolling basis by the hosting provider.

Your choices

You can ask what information we hold about you, ask for it to be corrected, ask for it to be deleted, or withdraw consent where consent is the basis we rely on. Email founder@zukahq.app and we will respond. Depending on where you live, you may also have the right to complain to a data protection authority.

International transfers

The company is incorporated in the United States, managed from Uganda, and hosts data in South Africa. Using the service means information may be handled in those locations.

Children

This website and the product areas are intended for business use and are not directed to children.

Security

Traffic is served over HTTPS. Passwords are stored as hashes, third-party credentials entered into the product are encrypted at rest, and inbound webhooks are signature verified. No system is perfectly secure, and we do not claim otherwise.

Changes

If this policy changes we will update the date at the top of the page. Material changes affecting account holders will be communicated by email.

Contact

ZukaHQ Inc., founder@zukahq.app.