Terms of Service

ZANAVEST PLATFORM — GLOBAL TERMS AND CONDITIONS

Last Updated: 24 March 2026
Version: 2.0 — Global Edition

 

1. Introduction & Acceptance

These Terms and Conditions ("Terms") constitute a legally binding agreement between Zanavest Ltd ("Zanavest", "we", "us", or "our") and the entity or individual ("Customer", "you", or "your") accessing or using the Zanavest software-as-a-service platform ("Platform"). By registering for, accessing, or using the Platform, you confirm that you have read, understood, and agree to be bound by these Terms and any applicable Regional Addendum relevant to your jurisdiction.[4][1]

If you are accepting on behalf of a company or legal entity, you represent that you have authority to bind that entity. If you do not agree, you must not access or use the Platform.

 

2. Definitions

​

​

​

​

 

​

​

​

​

​

​

​

​

​

 

3. Licence Grant & Restrictions

3.1 Licence. Subject to payment of applicable fees, Zanavest grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform solely for your internal business operations during the Subscription term.

3.2 Restrictions. You must not:

• Copy, modify, reverse engineer, disassemble, or create derivative works of the Platform

• Resell, sublicense, or make the Platform available to third parties outside your Subscription

• Use the Platform to build a competing product or service

• Upload content that is unlawful, harmful, or infringes third-party intellectual property rights

• Attempt to gain unauthorised access to any part of the Platform or its infrastructure

• Use the Platform in violation of any applicable financial regulation, including AML/KYC obligations relevant to your jurisdiction[1]

 

4. Account Registration & Security

4.1 You must provide accurate, current, and complete registration information and keep it updated at all times.

4.2 You are solely responsible for maintaining the confidentiality of your login credentials and for all activity occurring under your account.

4.3 You must notify Zanavest immediately at info@zanavest.com if you suspect any unauthorised access or security breach.

4.4 Zanavest reserves the right to suspend any account where suspicious activity, a security risk, or a Terms violation is identified, with or without prior notice depending on the severity.

 

5. Subscription Plans & Payment

5.1 Fees. Subscription fees are set out in the applicable Order Form or pricing page. All fees are exclusive of applicable taxes (including VAT, GST, or equivalent) unless stated otherwise.

5.2 Currency. Fees are billed in the currency stated in your Order Form. Regional pricing may apply.

5.3 Billing. Subscriptions are billed in advance on a monthly or annual basis as selected. Annual plans are non-refundable except as stated in Section 14.

5.4 Automatic Renewal. Unless you cancel before the end of the current billing period, your Subscription will automatically renew for the same term.

5.5 Late Payment. Unpaid invoices may incur interest at the statutory rate applicable in your jurisdiction. Zanavest reserves the right to suspend access upon 14 days' written notice of non-payment.

5.6 Price Changes. Zanavest will provide at least 30 days' written notice of any pricing changes before they take effect.

5.7 Taxes. You are responsible for all taxes, duties, levies, and withholding obligations applicable in your jurisdiction. Where Zanavest is required to collect tax on your behalf, this will be added to your invoice.

 

6. Customer Data & Privacy

6.1 Ownership. You retain all rights, title, and interest in and to your Customer Data. Zanavest does not claim ownership of any Customer Data.

6.2 Licence to Zanavest. You grant Zanavest a limited, non-exclusive licence to process Customer Data solely to provide the Platform and related services.

6.3 Global Data Protection. Both parties shall comply with all applicable data protection and privacy laws relevant to their jurisdiction. A separate Data Processing Agreement (DPA) governs the processing of personal data and is incorporated by reference. Specific rights and obligations for each region are set out in the applicable Regional Addendum below.[2][1]

6.4 Data Security. Zanavest implements appropriate technical and organisational measures (encryption at rest and in transit, access controls, penetration testing, audit logging) to protect Customer Data.

6.5 Cross-Border Transfers. Where Customer Data is transferred internationally, Zanavest will implement appropriate safeguards, including Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or other legally recognised transfer mechanisms as required by applicable law.[5]

6.6 Data Retention. Upon termination, Zanavest will retain Customer Data for 30 days, during which you may request an export. After this period, data will be securely deleted unless legally required to be retained.

 

7. AI Features & Document Analysis

7.1 The Platform may include AI-powered features such as document scanning, due diligence assistance, deal flow analysis, and contract review tools.

7.2 AI-generated outputs are provided for informational and efficiency purposes only and do not constitute legal, financial, investment, or professional advice. You are solely responsible for verifying AI outputs before relying on them.

7.3 Documents submitted for AI processing may be processed by third-party AI model providers under appropriate data protection agreements and in compliance with applicable law in your jurisdiction.

7.4 Zanavest does not guarantee the accuracy, completeness, or fitness for purpose of any AI-generated analysis.

 

8. Confidentiality

8.1 Each party agrees to keep the other's Confidential Information strictly confidential and not to disclose it to any third party without prior written consent, except to employees or advisors bound by equivalent obligations.

8.2 This obligation does not apply to information that: (a) is or becomes publicly available without breach; (b) was already known to the receiving party; or (c) is required to be disclosed by applicable law or a regulatory authority.

8.3 The terms and pricing of any Subscription or Order Form are deemed Confidential Information.

 

9. Intellectual Property

9.1 Zanavest retains all intellectual property rights in the Platform, including all software, algorithms, designs, trade marks, logos, and documentation.

9.2 You may not use Zanavest's trade marks, logos, or branding without prior written consent.

9.3 Any feedback, suggestions, or improvement requests you provide may be used by Zanavest without restriction or compensation.

 

10. Acceptable Use Policy

You agree to use the Platform only for lawful purposes and in compliance with all applicable laws and regulations including, but not limited to, AML/CTF regulations, applicable financial services laws, data protection legislation, and cybercrime laws in your jurisdiction. Zanavest reserves the right to remove any content or suspend any account that it reasonably believes violates this policy.

 

11. Service Availability & Support

11.1 Zanavest will use commercially reasonable efforts to ensure Platform availability of 99.5% in any given calendar month, excluding scheduled maintenance.

11.2 Scheduled maintenance will be communicated at least 48 hours in advance where possible.

11.3 Support is available via support@zanavest.com during UK business hours. Enterprise plans may include enhanced SLA terms under a separate agreement.

 

12. Warranties & Disclaimers

12.1 Zanavest warrants that it will provide the Platform with reasonable care and skill.

12.2 Except as expressly stated, the Platform is provided "as is" and "as available". Zanavest makes no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.

12.3 Zanavest does not warrant that the Platform will be error-free, uninterrupted, or free from security vulnerabilities.

 

13. Limitation of Liability

13.1 Nothing in these Terms limits either party's liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded by applicable law.

13.2 Subject to 13.1, Zanavest's total aggregate liability shall not exceed the total fees paid by you in the 12 months preceding the claim.

13.3 Zanavest shall not be liable for any indirect, consequential, or special damages; loss of profits or revenue; loss of business opportunity; loss or corruption of data; or loss of goodwill.

13.4 Where local mandatory law grants rights that cannot be excluded (e.g., implied guarantees under Australian Consumer Law or equivalent), Zanavest's liability is limited to re-supplying the services or paying the cost of having them re-supplied.

 

14. Term & Termination

14.1 These Terms commence on the date you first accept them and continue for the duration of your active Subscription.

14.2 Termination for Convenience. Either party may terminate at the end of the current billing period by written notice.

14.3 Termination for Cause. Either party may terminate immediately upon material breach unremedied within 14 days of written notice.

14.4 Effect of Termination. Upon termination, your access to the Platform will cease. Provisions on IP, confidentiality, limitation of liability, and governing law survive termination.

 

15. Indemnification

You agree to indemnify, defend, and hold harmless Zanavest and its officers, directors, and employees from any claims, liabilities, damages, or costs (including legal fees) arising from: (a) your breach of these Terms; (b) your use of the Platform in violation of applicable law; or (c) any Customer Data that infringes third-party rights.

 

16. Changes to the Platform & Terms

Zanavest may update these Terms from time to time. Material changes will be notified at least 30 days in advance by email. Continued use of the Platform after the effective date constitutes acceptance of the revised Terms.

 

17. General Provisions

• Entire Agreement: These Terms, together with any Order Form, Regional Addenda, and DPA, constitute the entire agreement between the parties

• Severability: If any provision is found unenforceable, the remaining provisions continue in full force

• Waiver: Failure to enforce any provision shall not constitute a waiver

• Assignment: You may not assign your rights without Zanavest's prior written consent

• Force Majeure: Neither party is liable for delays caused by events beyond their reasonable control, including cyberattacks, natural disasters, pandemics, or regulatory actions

• Notices: All legal notices shall be sent to legal@zanavest.com or via recorded post to Zanavest's registered office

 

 

REGIONAL ADDENDA

The following addenda form an integral part of these Terms and apply to Customers located in, or whose end users are residents of, the stated regions. In the event of any conflict between a Regional Addendum and the main Terms, the Regional Addendum shall prevail for that jurisdiction.

 

ADDENDUM A — UNITED KINGDOM

Applicable Law & Regulator: UK GDPR, Data Protection Act 2018, FCA rules, FSMA 2000[1]

A.1 All personal data processing is governed by the UK GDPR and the Data Protection Act 2018. Zanavest acts as a data processor on your behalf where you are the data controller.

A.2 You have the right to: access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Requests must be submitted to privacy@zanavest.com and will be responded to within 30 days.

A.3 Where Zanavest transfers your data outside the UK, it will use UK-approved International Data Transfer Agreements (IDTAs) or adequacy decisions.

A.4 Customers operating in regulated financial services must ensure their use of the Platform complies with FCA rules, including SYSC requirements for operational resilience and outsourcing.

A.5 These Terms are governed by and construed in accordance with the laws of England and Wales. Disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

 

ADDENDUM B — EUROPEAN UNION & EEA

Applicable Law & Regulator: EU GDPR (Regulation 2016/679), EU Data Act 2025, NIS2 Directive, ePrivacy Directive[6][1]

B.1 Zanavest processes personal data of EU/EEA residents in compliance with the EU GDPR. A DPA under Article 28 GDPR is available upon request and must be executed before processing EU personal data.

B.2 Data Subject Rights. EU residents have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and to object (Art. 21). Requests are fulfilled within 30 days, extendable to 90 days for complex requests.

B.3 Legal Basis. Zanavest processes personal data on the basis of: (a) contract performance; (b) legitimate interests; or (c) your explicit consent where required. Where consent is the basis, you may withdraw it at any time.

B.4 Cross-Border Transfers. Where data is transferred outside the EU/EEA, Zanavest relies on European Commission adequacy decisions or Standard Contractual Clauses (SCCs) as the legal transfer mechanism.[5]

B.5 EU Data Act 2025. In compliance with the EU Data Act (effective September 2025), Zanavest ensures: (a) Customers can access and port their data upon request; (b) no lock-in practices prevent switching; (c) interoperability of data generated on the Platform is facilitated where technically feasible.[6]

B.6 Breach Notification. Zanavest will notify you of any personal data breach within 72 hours of becoming aware, in accordance with GDPR Art. 33.

B.7 For EU matters, Zanavest's EU representative can be contacted at eu-rep@zanavest.com.

 

ADDENDUM C — NORTH AMERICA

C.1 United States

Applicable Laws: CCPA/CPRA (California), state-level privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and 12+ other state laws), GLBA, SOX (where applicable)[2][1]

C.1.1 For California residents, Zanavest acts as a Service Provider under the CCPA/CPRA and will not: retain, use, or disclose personal information for any purpose other than providing the Platform; sell or share personal information; or combine personal information with data from other sources except as permitted.

C.1.2 California residents have the right to: know what personal information is collected, delete personal information, opt out of the sale/sharing of personal information, correct inaccurate personal information, and non-discrimination for exercising privacy rights.

C.1.3 Zanavest complies with applicable US state privacy laws in force as of the date of these Terms. As new state laws come into effect, this Addendum will be updated accordingly.

C.1.4 These Terms, for US Customers, shall be governed by the laws of the State of Delaware, and disputes shall be resolved by binding arbitration in accordance with the American Arbitration Association (AAA) Commercial Arbitration Rules, except that either party may seek injunctive relief in any court of competent jurisdiction. Class action waivers apply.

C.1.5 US federal laws, including the Gramm-Leach-Bliley Act (GLBA), may apply to Customers operating in financial services. You are responsible for ensuring your use of the Platform meets your own GLBA obligations.

C.2 Canada

Applicable Laws: PIPEDA (Personal Information Protection and Electronic Documents Act), provincial laws (PIPA Alberta/BC, Quebec Law 25)[1]

C.2.1 Zanavest complies with PIPEDA and applicable provincial privacy legislation. Personal information is collected, used, and disclosed only with your consent and for identified purposes.

C.2.2 Quebec Customers: In compliance with Quebec Law 25 (Law 25), Zanavest maintains a privacy policy in French upon request, has appointed a Privacy Officer, and conducts Privacy Impact Assessments (PIAs) for high-risk processing activities. Any communication regarding personal data may be conducted in French.

C.2.3 Canadian residents have the right to access their personal information and request corrections. Submit requests to privacy@zanavest.com.

C.2.4 These Terms, for Canadian Customers, shall be governed by the laws of the Province of Ontario.

 

ADDENDUM D — ASIA PACIFIC

Applicable Laws (by jurisdiction): Singapore PDPA, India DPDP Act 2023, Japan APPI, Australia Privacy Act 1988, South Korea PIPA, Hong Kong PDPO, China PIPL, Thailand PDPA, Philippines DPA[3][1]

D.1 General Asia Pacific Provisions. Zanavest will process personal data of Asia Pacific residents in accordance with the applicable national law of the Customer's or data subject's jurisdiction. Where multiple laws apply, Zanavest adopts the more protective standard.

D.2 Singapore. Zanavest complies with the Personal Data Protection Act 2012 (PDPA). Personal data will not be transferred outside Singapore without comparable protection. Customers may contact Zanavest's Data Protection Officer (DPO) at dpo@zanavest.com.

D.3 India. Zanavest complies with the Digital Personal Data Protection Act 2023 (DPDP Act). Sensitive personal data of Indian residents will be processed with explicit consent. Zanavest acts as a "Data Processor" and you are the "Data Fiduciary." Data localisation requirements for sensitive personal data will be honoured where mandated.[5]

D.4 Australia. Zanavest complies with the Privacy Act 1988 and the 13 Australian Privacy Principles (APPs). Where the Australian Consumer Law implies guarantees that cannot be excluded, Zanavest's liability is limited to re-supplying the service or paying the cost of re-supply.

D.5 Japan. Zanavest complies with the Act on the Protection of Personal Information (APPI) as amended. Personal data of Japanese residents will only be transferred internationally where permitted by law, including obtaining prior consent or confirming equivalent protections.

D.6 China. Zanavest complies with China's Personal Information Protection Law (PIPL) and Data Security Law (DSL). Personal information of Chinese residents is processed with a lawful basis and is not transferred outside China without a completed security assessment or standard contract as required by the Cyberspace Administration of China (CAC).

D.7 Hong Kong. Zanavest complies with the Personal Data (Privacy) Ordinance (PDPO). Data subjects in Hong Kong have the right to access and correct their personal data.

D.8 South Korea. Zanavest complies with the Personal Information Protection Act (PIPA). Personal data will be processed with consent or another lawful basis, and cross-border transfers will comply with data transfer restrictions.

D.9 Thailand & Philippines. Zanavest complies with the Thailand Personal Data Protection Act (PDPA) and the Philippines Data Privacy Act 2012 (Republic Act 10173) respectively, including data subject rights and cross-border transfer restrictions.

D.10 Governing Law. For Asia Pacific Customers, these Terms shall be governed by the laws of Singapore, and disputes shall be subject to arbitration at the Singapore International Arbitration Centre (SIAC) unless a mandatory local law provides otherwise.

 

ADDENDUM E — SOUTH AMERICA

Applicable Laws: Brazil LGPD, Argentina PDPA, Colombia Law 1581, Chile Law 21.096, Peru Law 29733[7][8]

E.1 Brazil. Zanavest complies with the Lei Geral de Proteção de Dados (LGPD) (Law 13.709/2018). Zanavest acts as an "Operator" (Operador) on behalf of the Customer as "Controller" (Controlador). Brazilian data subjects have 9 rights including access, correction, deletion, portability, and revocation of consent. Brazil's national data protection authority (ANPD) has jurisdiction over enforcement.[2]

E.2 Brazil Data Transfers. Personal data will only be transferred outside Brazil where: (a) an adequacy decision exists; (b) contractual clauses provide equivalent protection; or (c) explicit consent has been obtained.

E.3 Argentina. Zanavest complies with Argentina's Personal Data Protection Law (Law 25.326). Argentina is an EU-adequate jurisdiction. Data subjects have rights of access, rectification, and deletion, enforceable before the Agencia de Acceso a la Información Pública.

E.4 Colombia. Zanavest complies with Law 1581 of 2012 and Decree 1377 of 2013. Colombian data subjects may exercise their rights before the Superintendencia de Industria y Comercio (SIC). Express authorisation is required to process sensitive personal data.

E.5 Chile & Peru. Zanavest will comply with Chile's Data Protection Law (Law 21.096) and Peru's Personal Data Protection Law (Law 29733), including data subject rights and security obligations applicable in those jurisdictions.

E.6 Governing Law. For South American Customers, these Terms shall be governed by the laws of England and Wales, unless mandatory local law requires otherwise. The parties consent to non-exclusive jurisdiction of the courts of England and Wales.

 

ADDENDUM F — AFRICA

Applicable Laws: South Africa POPIA, Nigeria NDPR/NDPA, Kenya DPA, Ghana DPA, Egypt PDPL, Morocco Law 09-08, Rwanda DPA, Uganda DPPA, Malabo Convention (AU)[9][3]

F.1 General Africa Provisions. By early 2026, 39 of 55 African Union member states have enacted data protection laws, supported by 34 active Data Protection Authorities. Zanavest complies with applicable national law in the Customer's jurisdiction. Where no specific national law exists, Zanavest applies the standards of the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) as a baseline.[3]

F.2 South Africa. Zanavest complies with the Protection of Personal Information Act 2013 (POPIA). Zanavest has appointed an Information Officer registered with the Information Regulator of South Africa. The eight POPIA conditions — accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation — are observed. Data subjects may lodge complaints with the Information Regulator.[1]

F.3 Nigeria. Zanavest complies with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). Zanavest files an annual data protection audit summary with the Nigeria Data Protection Commission (NDPC) where required. Data subjects have rights of access, rectification, deletion, and objection.

F.4 Kenya. Zanavest complies with the Data Protection Act 2019 (Cap. 411C). Zanavest is registered as a data processor with Kenya's Office of the Data Protection Commissioner (ODPC), which issued over 110 enforcement decisions in 2025. Kenyan data subjects may exercise their rights via privacy@zanavest.com.[3]

F.5 Ghana. Zanavest complies with Ghana's Data Protection Act 2012 (Act 843). Data controllers must register with the Data Protection Commission (DPC). Zanavest will assist Customers in meeting their registration obligations where required.

F.6 Egypt. Zanavest complies with Egypt's Personal Data Protection Law No. 151 of 2020. Personal data of Egyptian residents will not be transferred outside Egypt without a permit from the Ministry of Communications and Information Technology, or unless transfer is to an adequate jurisdiction.

F.7 Morocco. Zanavest complies with Morocco Law 09-08 on personal data protection. Processing is subject to declaration or authorisation with the Commission Nationale de contrôle de la Protection des Données à caractère Personnel (CNDP).

F.8 Rwanda & Uganda. Zanavest complies with Rwanda's Law No. 058/2021 on Personal Data Protection and Uganda's Data Protection and Privacy Act 2019 (DPPA), including data subject rights and obligations on processors.

F.9 Francophone Africa. For Customers in Francophone African countries (including Senegal, Côte d'Ivoire, Cameroon, Democratic Republic of Congo, and others), Zanavest applies the standards of the ECOWAS Supplementary Act on personal data and the national implementing legislation of each state. Communications regarding data rights may be conducted in French upon request.[3]

F.10 Governing Law. For African Customers, these Terms shall be governed by the laws of England and Wales, unless mandatory local law provides otherwise. The parties consent to non-exclusive jurisdiction of the courts of England and Wales, or alternatively to arbitration at the Cairo Regional Centre for International Commercial Arbitration (CRCICA) or the Kigali International Arbitration Centre (KIAC) at the Customer's election.

 

18. Contact & Legal Notices

Purpose

Contact

General Support

Info@zanavest.com