Legal
Privacy Policy
Version 1.2 · Last updated 17 July 2026 · Applies to all Tezeka users
Who we are
Tezeka is a property management platform built for Zambian landlords. We are incorporated in Zambia and operate under the Data Protection Act 2021 and applicable subsidiary legislation. For privacy questions: support@tezeka.com
What we collect
We collect information you provide directly when creating an account, adding properties, onboarding tenants or contacting us: - Account: name, phone number, email address. - Property: address, type (residential, farm, commercial, apartment), photos and condition records. - Tenant: name, phone, NRC number or passport identifier, contact details. - Payment evidence: WhatsApp screenshots, MoMo reference numbers, bank confirmation images submitted for verification. - Agreement data: signed lease PDFs, signing timestamps, IP address of the signing device. - Tax and maintenance records: costs, dates and vendors.
Sensitive data
NRC numbers and passport identifiers are sensitive personal data under Zambian law. We encrypt these fields using AES-256-GCM before storage. The encryption key is never stored alongside the data. EXIF metadata, which may include GPS location data, is stripped from all uploaded photos and screenshots before storage.
How we use your data
We use your data to: - Provide, operate and improve the Tezeka platform. - Generate and deliver lease agreements and payment receipts. - Send rent reminders and portfolio summaries via WhatsApp or SMS. - Compute ZRA monthly tax estimates and produce downloadable returns. - Detect fraud, enforce rate limits and maintain security. - Comply with Zambian legal obligations. We do not sell your data. We do not use your data to train machine learning models without your explicit consent.
Third-party services
We work with a small number of trusted service providers ("data processors") who process information on our behalf, only on our instructions and under appropriate confidentiality and security terms: - Supabase: secure database, authentication and file storage (encrypted at rest). - WhatsApp Business API and Africa's Talking: delivering your notifications and receipts. - Resend: sending transactional email such as confirmations and receipts. - Anthropic API: formatting agreement text and reading payment evidence submitted for verification. - OpenAI API: the fallback processor used only when the configured Anthropic model cannot complete an agreement-formatting request. - Sentry: monitoring errors so we can keep the service reliable. For custom agreements, Tezeka extracts the text layer on its server and sends immutable text blocks for presentation classification. The uploaded PDF itself is not stored by this formatting step. Data sent to an AI provider is used only for the requested processing and is not used by Tezeka to train models. We do not sell or rent your personal information, and we share only what a provider needs to perform its task.
International data transfers
Some of our processors store or process data outside Zambia. For example, our database, caching and email providers operate data centres in the European Union and the United States. Where data is transferred across borders, we rely on those providers' contractual and technical safeguards to maintain a comparable level of protection, consistent with the Data Protection Act 2021. Sensitive identifiers (NRC and passport numbers) are encrypted with AES-256-GCM before they are stored on any infrastructure, in or outside Zambia.
Data retention
We retain your data while your Tezeka account exists, including while a cancelled subscription is in a read-only state. This keeps your data, agreements and payment records accessible and allows them to be restored if you resubscribe. We retain personal data only for as long as it is reasonably necessary to provide the service, meet legal or contractual obligations, resolve disputes, prevent fraud and maintain security and audit records. You may request closure of your account and deletion of non-legally-required personal data at any time by emailing support@tezeka.com. After verifying the request, we delete or anonymise data that is no longer required. Records that must be retained for legal, contractual, tax, fraud-prevention or dispute purposes are restricted and kept only for the applicable retention period.
Your rights
Under the Data Protection Act 2021, you have the right to: - Access the personal data we hold about you. - Correct inaccurate data. - Request deletion of data that is no longer necessary. - Object to processing based on legitimate interests. - Data portability: receive your data in a structured, machine-readable format. To exercise any right, email support@tezeka.com with the subject line "Data rights request". We will respond within 30 days.
Security
Security is built into Tezeka from the ground up, not bolted on afterwards: - Sensitive identifiers such as NRC and passport numbers are encrypted with AES-256-GCM before they are ever written to the database, and the keys are never stored alongside the data. - Strict row-level isolation means each landlord, agent and tenant can only ever reach the records they are authorised to see — one account can never read another's data. - Photos and screenshots are stripped of EXIF and GPS location data before storage, so a property's location is never leaked. - Every signed lease carries a SHA-256 document hash and a verification QR code, so any document can be proven authentic and unaltered. - All data in transit is encrypted with TLS, sensitive actions are rate-limited, and privileged access is tightly restricted behind multi-factor authentication. We run regular dependency audits and resolve critical issues before any release. Security isn't a feature we added — it's the foundation the platform is built on.
Children
Tezeka is built for landlords, agents and businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.
Changes to this policy
We may update this policy to reflect changes in the law or our practices. If we make material changes, we will notify you by email or in-app notification at least 14 days before the change takes effect. Continued use of Tezeka after that date constitutes acceptance of the updated policy.
Questions about your data?
Email support@tezeka.com with the subject “Data rights request”. We respond within 30 days.
Have questions about Tezeka?
Visit our FAQ page for answers about payments, leases, security, data handling and plan features.