1. Who we are
Zetta Technologies Limited ("Zetta", "we") operates a WhatsApp-based fundraising (harambee) platform at zetta.co.ke. This policy explains what we collect, why, and the choices you have. Contact: developer@zetta.co.ke.
2. Data we collect
- Account identifiers: your WhatsApp phone number (or the phone number you provide when starting/testing a campaign).
- Campaign data: fundraiser title, beneficiary name, target amount, deadline, and organizer name/number you give the Zetta bot.
- Contribution records: contributor phone number, preferred name, amount contributed, and the M-Pesa transaction reference.
- Technical data: delivery status of messages we send you (delivered/read/failed), security events (e.g. invalid verification attempts), and timestamps.
We do not collect your WhatsApp message contents beyond the command messages you send the bot (e.g. "VERIFY ZT-XXXXXX", campaign setup answers), and we never store your M-Pesa PIN — payments are authorized entirely within the M-Pesa system.
3. How we use it
- To operate fundraisers: create campaigns, generate secure payment links, record contributions, and disburse funds to the beneficiary via M-Pesa.
- To send you campaign updates you opted into (confirmations, running totals, closure/disbursement notices).
- To verify that campaigns are genuine (the VERIFY command) and to protect users from fraud.
- To meet legal, accounting and audit obligations.
4. Fund drive lifecycle (payout terms)
- Duration: a fund drive runs for 7 days by default, ending at 23:59 on the 7th day from creation. The date shown on the payment page is the drive's end date.
- Editing a running drive (organizer): while a drive is running, the organizer can edit it from the Zetta fund-drives web form (the STATUS link): the target amount may be raised, and the end date may be moved to any day up to 12 weeks (84 days) from today. A target can only be increased, never reduced — contributors plan on the shown total. An end date can be brought forward, but the drive must keep at least 24 more hours to run (the drive runs until 23:59 of the chosen day). Editing does not change the platform fee. Contributors who opted in receive a WhatsApp update on each edit. A drive that has ended, closed, or been paid out can no longer be edited.
- After the end date: the payment link becomes inactive and no new contributions can be accepted on that drive.
- Payout: funds are NOT sent automatically. The organizer initiates the payout from the Zetta WhatsApp menu (command RELEASE ZT-XXXXXX); Zetta then disburses the collected amount minus Zetta's fee to the beneficiary's M-Pesa number. The fee is 10% of what was collected on drives that collected KES 500 or less, and KES 500 or 1% of the total, whichever is higher on drives that collected more than KES 500 (the KES 500 minimum is itself capped at 10% of the total collected, so the fee never takes more than a tenth of a small drive). Test drives carry a flat KES 10 fee.
- Minimum payout (KES 10): a fund drive must have collected at least KES 10 before it can be closed and released, because M-Pesa does not allow payouts below its own minimum transaction amount. If a drive has collected less than KES 10 it cannot be closed and released, and Zetta will say so. The contributions already paid are not refunded or forfeited by this — they remain held by Zetta against that drive and are paid to the beneficiary once the drive reaches the minimum. The drive therefore stays open so that it can keep collecting. If a drive will not go ahead, contact Zetta to arrange a refund of the contributions.
- Reversing a drive (refunds): a drive that closed without reaching the KES 10 minimum can be reversed by the organizer. Reversing pays every contributor their full contribution back to their M-Pesa through the M-Pesa reversal service, closes the drive, and notifies every contributor that the drive was closed and their money is being returned. No platform fee is charged on a reversed drive — there was no disbursement, so there is no fee to take; contributors receive exactly the amount they paid. A drive may only be reversed while it has collected less than the KES 10 minimum and while no money has yet been paid to the beneficiary; once any money has reached the beneficiary the drive is paid out normally and cannot be reversed.
- Refunds: before payout is released, a contributor may request a refund of their contribution if a drive did not go ahead.
5. Sharing
- Payment provider: contribution amounts and beneficiary phone numbers are shared with our payment services provider (Safaricom M-Pesa via Daraja) strictly to process payments and disbursements.
- Meta Platforms: WhatsApp messaging operates under Meta's WhatsApp Business terms; your phone number is processed by Meta to deliver messages.
- Campaign participants: running totals and contributor counts may be shown to campaign participants; individual names are shown only as you chose to identify yourself.
- We never sell your data.
6. Retention
Campaign and contribution records are retained for up to 7 years for accounting and audit purposes. Security logs are retained for 12 months. Machine copies of messaging payloads are pruned automatically: processed provider payloads after 90 days, failed ones after 30 days, and delivered verification texts after 1 day. You may request deletion of personal data not subject to legal retention at any time (see section 7).
7. Your rights
Under the Kenya Data Protection Act (2019) you may request access, correction, or deletion of your personal data, or opt out of updates.
- Delete your data (self-service): message the bot DELETE-DATA. First, Zetta sends you a copy of all the data it holds about you — your drives, contributions, amounts, dates and M-Pesa references, plus everything else on record. Nothing is deleted by that first step. If you want to proceed, reply DELETE-DATA CONFIRM within 30 minutes.
- On confirmation: Zetta deletes your chat records, verification codes, message copies, notice log, web sessions, preferences, support tickets and feedback, and removes your name and phone number from ledger lines and drive records. You receive a confirmation message, and the deletion itself is saved in the security log (date, scope, reference).
- What is kept: only the financial ledger lines — amounts and M-Pesa receipt references without your identity — for the 7-year accounting period. If a drive you organize or appear on still needs a payout, Zetta tells you to finish that first; nothing is deleted until the money work is done.
- Opt-out: reply STOP (or UPDATES OFF) to any bot message to stop campaign updates.
- Correction or copies beyond WhatsApp: write to developer@zetta.co.ke.
8. Security
Campaign payment links are cryptographically signed; contributions are captured through official M-Pesa prompts showing the paybill name "ZETTA TECHNOLOGIES LIMITED". We apply rate limiting, webhook signature verification, and audit logging. Transport is encrypted (HTTPS, TLS 1.2+). Web session tokens and verification codes are stored only as cryptographic hashes, and database backups are encrypted (AES-256) with restricted access.
9. Terms of use
- Third-party infrastructure: the app relies on WhatsApp messaging infrastructure (operated by Meta Platforms) and on the M-Pesa mobile payment platform (operated by Safaricom) to manage fund collection and disbursement. Zetta does not control these platforms and is not liable for their availability, delays, or outages; service interruptions in WhatsApp delivery or M-Pesa processing may temporarily affect message delivery, contribution capture, or payouts.
- Payment accuracy: you are responsible for the beneficiary phone number you enter. Disbursements shown on the M-Pesa receipt are final once processed by Safaricom.
- Terms carried by section 4: the fee table, the KES 10 minimum payout, drive reversal and refunds, and drive editing follow section 4 above; those terms form part of these terms of use. There are no upfront or monthly charges.
- Ledger authority: Zetta's records (contributions, disbursement status, M-Pesa references) are the authoritative record of each fund drive.
- Lawful use: fund drives must be genuine and lawful; misrepresenting a fund drive or its beneficiary is grounds for immediate suspension and report to authorities.
10. Changes
Material changes to this policy will be announced on this page with a new effective date. Terms version: 2026-10-29.