What we collect, and what we do not.

This website

These pages (brief.unityzm.co) are a briefing site. They are separate from the UnityZM platform and hold no customer records.

WHAT THIS SITE DOES NOT DO

• No third-party analytics. No Google, no Meta, no tag manager, no pixel.
• No advertising or tracking cookies. No cookie banner, because there is nothing to consent to.
• No cross-site tracking. Nothing here follows you anywhere else.
• No selling or sharing. Nothing collected here goes to anyone outside UnityZM.
• No external fonts or scripts. Every page is self-contained, so your browser is not making requests to anyone else.

Comments you submit are private to the site author. They are not published on the page and not shown to other readers.

The platform

Different rules apply to the UnityZM platform itself, because it handles identity, money and tax on behalf of businesses and the people who trade with them.

THE PRINCIPLE

Your data belongs to you. We hold it to run the service you asked for, and for as long as the law requires records of it to exist.

WHAT THE PLATFORM HOLDS

HOW IT IS PROTECTED

• Personal data is encrypted at the domain boundary. Searchable fields use blind indexes, so a lookup does not require the plain value.
• Ledgers are append-only and hash-chained. Records cannot be quietly edited, including by us.
• Access is tiered and checked at every service boundary, not just at the front door.
• Privileged actions need two people. Maker-checker applies to anything that moves money or changes a permission.
• Every access is logged to an audit trail that is itself append-only.

AI AND YOUR DATA

The platform uses AI models to do work like reconciliation, document reading and exception triage. No real identifier reaches a model. Names, phone numbers and identity numbers are replaced with stable pseudonyms before anything is sent, and restored afterwards. A model can follow the same actor across events without ever learning who they are, and the table that maps pseudonyms back to people never leaves our infrastructure.

Your data is not used to train anybody's model. Agents propose; a human approves anything consequential.

WHERE IT IS HELD

Data is currently hosted on infrastructure we control, rented from a European provider with the servers physically located in Canada. We are candid about this because it matters: our stated intention is sovereign hosting closer to the people we serve, and moving is active work rather than a vague plan.

Where a customer requires a specific residency undertaking, we agree it in the contract and configure it, rather than assuring it in general terms.

YOUR RIGHTS

• See it. Ask what we hold about you and receive a copy.
• Correct it. Have inaccurate personal details fixed.
• Take it. Receive your records in a portable format.
• Have it deleted where the law does not require us to keep it. Financial and tax records generally must be retained; we will tell you which, and why.
• Object to a particular use, and have a human review any decision that materially affects you.

Write to philipchani@unityzm.co. We will respond within 30 days.

What we are still building

A privacy policy that only lists strengths is marketing. These are the gaps as they stand today.

If a breach affects your data, we will tell you and the relevant authority promptly, with what we know and what we are doing. We would rather commit to that in writing than discover the wording under pressure.

Legal footing

UnityZM Technologies is a Zambian company. This policy is written against Zambian data protection law and the obligations that apply to financial and tax record-keeping, and is drafted to be compatible with international expectations where a customer requires it.