Effective Date: February 2026
Version: 1.0
Last Updated: February 16, 2026
1. INTRODUCTION
Zetraxa Technologies ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise resource planning (ERP) and point of sale (POS) software platform, including all associated modules, applications, and services (collectively, the "Platform").
By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use the Platform.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account Registration Information:
- Business name and legal entity details
- Owner/administrator name and contact information
- Email address and phone number
- Business address and location details
- Tax identification numbers and business registration details
- Payment and billing information
Business Operations Data:
- Products, services, and inventory data
- Customer and supplier contact information
- Sales transactions and purchase records
- Financial records and accounting data
- Employee information (for HRM/Payroll modules)
- Project and construction management data
- Healthcare records (for Laboratory/Radiology modules)
User-Generated Content:
- Documents, reports, and files you upload
- Notes, comments, and communications
- Custom configurations and settings
- Integration data from connected third-party services
2.2 Information Collected Automatically
Device and Usage Information:
- Device type, operating system, and browser type
- IP address and approximate geographic location
- Access times and duration of use
- Pages viewed and features accessed
- Click patterns and navigation paths
- Error logs and crash reports
Cookies and Tracking Technologies:
- Session cookies for authentication
- Preference cookies for user settings
- Analytics cookies for platform improvement
- Security cookies for fraud prevention
2.3 Information from Third Parties
Integrations and Connected Services:
- eCommerce platforms (Shopify, WooCommerce, other)
- Payment gateways and financial services
- Tax compliance systems (ZATCA, Egypt Tax Authority)
- Communication platforms (WhatsApp Business)
- Accounting software integrations
- Other third-party applications you connect
3. HOW WE USE YOUR INFORMATION
3.1 Service Delivery
- Providing, maintaining, and improving the Platform
- Processing transactions and managing your account
- Enabling features across all modules (POS, Inventory, Accounting, CRM, HRM, etc.)
- Facilitating integrations with third-party services
- Providing customer support and technical assistance
3.2 Business Operations
- Billing and payment processing
- Account management and user administration
- Security monitoring and fraud prevention
- Compliance with legal and regulatory requirements
- Internal research and analytics
3.3 Communications
- Sending service-related notifications
- Responding to your inquiries and support requests
- Providing updates about new features and improvements
- Sending marketing communications (with your consent)
3.4 Improvement and Development
- Analyzing usage patterns to improve user experience
- Developing new features and functionality
- Conducting research and creating aggregated reports
- Testing and troubleshooting platform performance
4. LEGAL BASES FOR PROCESSING (GDPR)
For users in the European Economic Area (EEA), we process your personal data based on:
- Contract Performance: Processing necessary to provide the Platform services under our agreement
- Legitimate Interests: For security, fraud prevention, and platform improvement
- Consent: Where you have provided explicit consent for specific purposes
- Legal Obligation: Where required by applicable laws and regulations
5. DATA SHARING AND DISCLOSURE
5.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Cloud hosting and infrastructure providers
- Payment processing services
- Email and communication services
- Analytics and monitoring services
- Customer support platforms
5.2 Business Transfers
In connection with any merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5.3 Legal Requirements
We may disclose information when required by law:
- To comply with legal process or government requests
- To protect our rights, privacy, safety, or property
- To enforce our agreements and policies
- To respond to emergencies
5.4 With Your Consent
We may share information with third parties when you have given explicit consent.
5.5 Aggregated and De-identified Data
We may share aggregated, de-identified data that cannot reasonably be used to identify you.
6. DATA RETENTION
6.1 Active Account Data
We retain your data for as long as your account is active or as needed to provide services.
6.2 Account Termination
- After account termination, data is retained for 30 days for potential recovery
- Following the recovery period, data is permanently deleted
- Certain data may be retained longer for legal, tax, or regulatory requirements
6.3 Specific Retention Periods
- Financial records: As required by applicable tax and accounting laws
- Healthcare records: As required by healthcare regulations
- Employment records: As required by labor laws
- Security logs: Up to 2 years for security purposes
7. DATA SECURITY
7.1 Technical Safeguards
- Encryption of data in transit (TLS/SSL)
- Encryption of data at rest
- Secure data centers with physical security
- Regular security assessments and penetration testing
- Firewalls and intrusion detection systems
7.2 Organizational Safeguards
- Access controls and role-based permissions
- Employee training on data protection
- Background checks for personnel with data access
- Incident response procedures
7.3 Security Certifications
We maintain appropriate security certifications and comply with industry standards for data protection.
7.4 Data Breach Notification
In the event of a data breach, we will:
- Notify affected users within 72 hours of discovery
- Provide details about the breach and remediation steps
- Report to relevant supervisory authorities as required
8. YOUR RIGHTS AND CHOICES
8.1 Access and Portability
- Request access to your personal data
- Receive a copy of your data in a portable format
- Request information about how your data is processed
8.2 Correction and Deletion
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Request restriction of processing
8.3 Objection and Withdrawal
- Object to processing based on legitimate interests
- Withdraw consent at any time
- Object to direct marketing communications
8.4 Account Management
- Update your account information through platform settings
- Manage user permissions and access levels
- Export your data through available tools
8.5 Exercising Your Rights
To exercise your rights, contact us at:
- Email: [email protected]
- Address: [Company Address]
- Online: [Privacy Request Portal URL]
9. REGIONAL PRIVACY RIGHTS
9.1 European Economic Area (GDPR)
If you are in the EEA, you have additional rights:
- Right to lodge a complaint with a supervisory authority
- Right to judicial remedy
- Right not to be subject to automated decision-making
9.2 Saudi Arabia (PDPL)
For users in Saudi Arabia:
- Data processing complies with Personal Data Protection Law
- Data localization requirements are followed
- Cross-border transfer protections are implemented
9.3 Egypt
For users in Egypt:
- Compliance with Egyptian Data Protection Law
- Protection of personal data in accordance with local regulations
9.4 California (CCPA/CPRA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising rights
9.5 Other Jurisdictions
We comply with applicable privacy laws in all jurisdictions where we operate.
10. CHILDREN'S PRIVACY
The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. HEALTHCARE DATA (SPECIAL CATEGORIES)
11.1 Laboratory and Radiology Modules
For healthcare-related modules:
- Additional protections apply to health information
- Compliance with healthcare privacy regulations
- Data minimization principles are applied
- Access is restricted to authorized personnel
11.2 Healthcare Data Rights
- Right to access your health records
- Right to request amendments
- Right to an accounting of disclosures
- Right to restrict certain disclosures
12. INTERNATIONAL DATA TRANSFERS
12.1 Data Location
- Primary data storage is in secure cloud infrastructure
- Data may be processed in multiple regions for performance
- Regional data residency options are available for enterprise plans
12.2 Transfer Safeguards
When transferring data internationally, we use:
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs)
- Adequacy decisions where applicable
- Other legally valid transfer mechanisms
13. COOKIES AND TRACKING
13.1 Types of Cookies We Use
- Essential Cookies: Required for platform operation
- Functional Cookies: Remember your preferences
- Analytics Cookies: Help us improve the platform
- Marketing Cookies: Used with your consent
13.2 Managing Cookies
- You can manage cookies through your browser settings
- Disabling certain cookies may affect platform functionality
- We respect Do Not Track signals where required by law
14. THIRD-PARTY INTEGRATIONS
14.1 eCommerce Platforms
When you connect Shopify, WooCommerce, or other platforms:
- Data is shared according to your integration settings
- Third-party privacy policies apply to their services
- You control what data is synchronized
14.2 Payment Gateways
Payment processing is handled by certified payment processors:
- We do not store complete payment card numbers
- Payment data is processed according to PCI DSS standards
- Financial data is protected with additional encryption
14.3 Communication Platforms
WhatsApp and other communication integrations:
- Messages are processed according to platform terms
- Contact data is managed according to your settings
- Communication logs may be stored for service quality
15. MARKETING COMMUNICATIONS
15.1 Consent-Based Marketing
- We send marketing communications only with your consent
- You can opt-out at any time via email preferences
- Transactional messages are not affected by opt-out
15.2 Communication Preferences
- Manage preferences through account settings
- Unsubscribe links are included in marketing emails
- Contact [email protected] for preference changes
16. CHANGES TO THIS PRIVACY POLICY
16.1 Updates
- We may update this Privacy Policy periodically
- Material changes will be notified via email or platform notification
- Continued use after changes constitutes acceptance
16.2 Version History
- Current version and date are shown at the top
- Previous versions are available upon request
17. CONTACT INFORMATION
17.1 Privacy Inquiries
Zetraxa
Email: [email protected]
Support: [email protected]
Website: www.zetraxa.com
17.2 Data Protection Officer
For GDPR-related inquiries:
Email: [email protected]
17.3 Legal Requests
For legal inquiries:
Email: [email protected]
18. ADDITIONAL PROVISIONS
18.1 Data Controller
Zetraxa is the data controller for personal data collected through the Platform.
18.2 Data Processors
When we act as a data processor on behalf of business users:
- We process data according to your instructions
- We implement appropriate security measures
- We assist with data subject requests
18.3 Business User Responsibilities
Business users using the Platform are responsible for:
- Lawful collection of data from their customers
- Providing appropriate privacy notices
- Responding to data subject requests
- Compliance with applicable privacy laws
19. DEFINITIONS
- Personal Data: Any information relating to an identified or identifiable individual
- Processing: Any operation performed on personal data
- Data Subject: The individual whose personal data is processed
- Data Controller: Entity determining purposes and means of processing
- Data Processor: Entity processing data on behalf of the controller
20. ACKNOWLEDGMENT
By using the Zetraxa Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
Last Updated: February 16, 2026
Version: 1.0
© 2026 Zetraxa Technologies. All Rights Reserved.