Privacy Policy

Batana Technologies ("Batana", "we", "us", or "our") builds AI-powered automation and cloud solutions for schools, clinics, and businesses across Zimbabwe. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, our applications, and any related services (together, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

1. Information we collect

We collect information in the following ways:

• Information you give us. When you fill in our contact form, request a demo, or subscribe to a plan, we collect details such as your name, email address, organisation, phone number, and the contents of your message.
• Institutional data. If your school, clinic, or business uses Batana, your administrator may upload or connect data (such as student, patient, or customer records) so that our Services can process it on your behalf. This data belongs to your institution, not to Batana — see Section 3.
• Usage data. We automatically collect information about how you interact with our website and Services, including IP address, browser type, device information, pages visited, and timestamps.
• Cookies and similar technologies. We use cookies and similar tools to keep you signed in, remember preferences, and understand how our website is used. See Section 7.
• Payment information. When you subscribe to a paid plan, payment details (such as Ecocash, ZiG, or card information) are processed by our third-party payment providers. Batana does not store full payment card numbers on its own servers.

2. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Services;
• Respond to enquiries, demo requests, and support tickets;
• Process subscriptions, invoices, and payments;
• Send service updates, security notices, and — where you have opted in — product news;
• Monitor, troubleshoot, and improve the performance and reliability of the Services;
• Detect, investigate, and prevent fraud, abuse, or security incidents; and
• Comply with legal obligations.

3. Your institution's data is never used to train our models

Data that your institution submits through the Services — student records, patient information, customer files, or any other operational data — is used solely to deliver the Services to you. It is logically isolated from other customers and is never used to train, fine-tune, or improve any shared AI model. What happens in your institution stays there.

4. How we share information

We do not sell your personal information. We may share information with:

• Service providers. Cloud hosting, payment processing, email delivery, and analytics partners who process data on our behalf, under contractual confidentiality and security obligations.
• Legal and safety reasons. Where required to comply with applicable law, regulation, legal process, or a valid governmental request, or to protect the rights, property, or safety of Batana, our users, or the public.
• Business transfers. If Batana is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to the same protections described in this policy.

5. Data security

We apply reasonable technical and organisational measures — including encryption in transit, access controls, and regular security reviews — to protect information against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Institutional data is retained for the duration of the customer relationship and deleted or anonymised within a reasonable period after account closure, unless a longer retention period is required by law.

7. Cookies

We use essential cookies to operate the website and, where enabled, analytics cookies to understand aggregate usage. You can control or disable cookies through your browser settings; doing so may affect how parts of the website function.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to legal exceptions;
• Object to or restrict certain processing; and
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 12. If you are an end-user of a school, clinic, or business that uses Batana, please also contact that institution directly, as it typically controls the data.

9. Children's privacy

Where our Services are used by schools to support students, any data relating to minors is collected and processed by the school as data controller, with Batana acting as a service provider under contract with that school. We do not knowingly collect personal information directly from children outside of this institutional context.

10. International data transfers

We are based in Zimbabwe and may use service providers located in other countries to host or process data. Where information is transferred internationally, we take steps to ensure it receives an appropriate level of protection consistent with this policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

12. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

• Email: sales@batana.co.zw
• Office: Harare, Zimbabwe