Legal

Privacy Policy

Draft for legal review · Last updated 25 July 2026

1. Who this covers

This policy explains how Xash Solutions (Private) Limited ("Xash"), registered in Zimbabwe (reg. 26/2022), No 4 Second Street, Mutare, handles personal information collected through this website, the Xash Agents platform, Xash PoS, Xash Lite, Xash AI and the Vend API.

2. What we collect

We collect information you give us — such as your name, business name, city or area, and phone number when you apply to become an agent — and information generated by using the platform, such as account details, wallet balances, transaction records, receipts and support messages. Transaction records necessarily include details of the services sold, such as a customer's phone number or meter number.

3. How we use it

We use personal information to assess agent applications, operate accounts and wallets, process transactions with the relevant networks and providers, calculate and pay commission, provide receipts, statements and support, keep the platform secure, prevent fraud, and meet legal and regulatory obligations in Zimbabwe.

4. Sharing

We share transaction details with the third-party networks and providers needed to complete each sale (for example mobile networks, ZESA and DStv), with payment channels used to fund wallets, and with authorities where the law requires it. We do not sell personal information.

5. Retention and security

We keep records for as long as needed to operate your account and meet legal, tax and audit obligations, then delete or anonymise them. We protect information with access controls, encryption in transit and operational safeguards appropriate to a payments platform.

6. Your rights

Subject to Zimbabwean data-protection law, you may ask what information we hold about you, ask us to correct inaccurate information, and ask us to delete information we no longer need. Contact us using the details below and we will respond within a reasonable time.

7. This website

This website is a content site and does not require an account. We may use Meta Pixel and Google Analytics cookies to measure traffic, understand which ads lead people to Xash, and count agent applications and WhatsApp contact clicks. These tools are enabled only when configured. The agent application form sends us only the details you type into it.

8. Changes and contact

We may update this policy and will publish the current version here. Questions or requests: [email protected] · +263 77 922 2722 · No 4 Second Street, Mutare, Zimbabwe.

This is a working draft prepared for legal review. It must be reviewed against Zimbabwe's Data Protection Act before launch.