TERMS AND CONDITIONS & PRIVACY POLICY

7. Maintenance & Support

Zapproach Ltd. will release system updates for security, functional improvements, and compliance enhancements. These updates will be communicated in advance.

Technical support is available Monday to Friday, 09:30–17:00 on business days. Support is extended only to trained and authorized Client representatives.

8. Fees, Payments and Cancellation

Zaccbox ERP is billed monthly in advance via standing order. Registration or onboarding fees must be cleared at least 2 days prior to activation.

Clients must notify Zapproach Ltd. of cancellation with a minimum Thirty (30) days written notice. Months already initiated are billable.

Amounts already paid are non-refundable unless usage of ERP is proven to be for only 1 month on a half yearly invoicing or equivalent of 2 months usage on a yearly invoicing.

No refunds are applicable should there be no communication from the user to terminate the agreement

Subscription and support fees are billed monthly in advance. Payment terms are 15 days from invoice date.

Overdue payments incur 3% monthly interest from the 16th day after due date.

Zapproach reserves the right to suspend services after:

2 consecutive months of unpaid dues; or

3 months of unpaid dues in a 6-month window.

Fees remain fixed for one year unless otherwise communicated and based on market rate changes. Adjustments are communicated two months prior to renewal.

9. Data ownership & cilent responsibilities

All business data entered into Zaccbox ERP by the Client remains the Client’s property.

Clients are responsible for ensuring data is lawful, accurate, and up to date.

The platform must not be used to process or store data in breach of any applicable law or regulation

9.1 AI-Driven features and data validation

Zaccbox ERP may incorporate artificial intelligence (AI)-driven features to enhance data processing, reporting, or operational efficiency. While these tools are designed to improve productivity, Clients remain fully responsible for verifying the accuracy, completeness, and appropriateness of all data before final validation, submission, or usage.

Zapproach Ltd. does not guarantee the absolute accuracy of AI-generated results and shall not be held liable for any discrepancies, misinterpretations, or damages arising from reliance on AI-assisted outputs. It is the Client’s sole responsibility to review and confirm the correctness of all critical business information.

10. Data Protection & Privacy (GDPR & Mauritius DPA 2017 Compliant

Zapproach Ltd., as the owner and operator of Zaccbox ERP, commits to protecting all user and business data in accordance with:

• The General Data Protection Regulation (EU) 2016/679 (GDPR);
• The Data Protection Act 2017 of Mauritius.

10.3 Data Processing Scope

Personal and business data processed via Zaccbox ERP may include (but is not limited to):

• Employee records (names, IDs, contact info, job data),
• Financial transactions (payroll, invoices, supplier/customer data),
• Regulatory records (VAT returns, compliance documents).

10.4 Security Measures

Zapproach Ltd. maintains robust security controls to safeguard the confidentiality, integrity, and availability of data:

• Data Encryption: All data is encrypted at rest and in transit using industry-standard protocols (e.g., TLS/SSL, AES-256).
• Secure Hosting: Client data is hosted on ISO 27001, PCI DSS -certified cloud infrastructure in the European Union and/or Mauritius, based on Client preference.
• Access Controls: Role-based access is enforced at both application and infrastructure levels, using password policies, 2FA, and audit trails.
• Monitoring Systems: Real-time Security Information and Event Management (SIEM) is in place, along with Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) to detect and block threats.
• Regular Testing: The platform undergoes periodic penetration testing and vulnerability scans to identify and resolve security gaps.

10.5 Data Subject Rights

Zapproach facilitates the exercise of data rights by Users and Clients as provided by GDPR and the Mauritius DPA. These include:

• Right of Access: Request access to personal data held.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Delete data under specific legal grounds.
• Right to Restrict Processing: Temporarily block processing under certain conditions.
• Right to Object: Object to data processing on legitimate grounds.
• Right to Data Portability: Receive personal data in a structured, commonly used, and machine-readable format.

Zapproach facilitates the exercise of data rights by Users and Clients as provided by GDPR and the Mauritius DPA. These include:

10.6 Data Retention

Client data will be retained for the duration of the contractual relationship. Upon termination:

• Data will be preserved for 30 calendar days to enable secure export (CSV or Excel format),
• After this retention period, Zapproach will permanently and securely delete all stored data unless required to retain it by law.

10.7 Data Breach Protocol

In the event of a data breach, Zapproach Ltd. shall:

• Notify the affected Client(s) within two (2) business days of becoming aware of the breach;
• Launch an immediate internal investigation and risk containment procedure;
• Assist Clients in fulfilling their legal obligations under Article 33 of the GDPR and Section 21 of the Mauritius DPA, including notification to the relevant supervisory authorities if required.

10.8 Third-Party Processors

Zapproach may engage verified third-party sub-processors (e.g., for hosting, analytics, communications), all of whom are bound by written agreements to comply with equivalent data protection standards. A current list of sub-processors is available upon request.

10.9 Client Obligations

The Client agrees to:

• Obtain all necessary consents from data subjects;
• Ensure all data entered into Zaccbox ERP is lawful, accurate, and relevant;
• Configure access rights to limit data exposure;
• Promptly inform Zapproach of any suspected breaches or misuse.

11. Cookies & Technologies

Zaccbox ERP may utilize cookies for session continuity, user preferences, and analytics.

Clients and users can manage their cookie preferences through browser settings. Cookies used include: essential session cookies, performance analytics (Google Analytics), and user preference cookies. Users may disable cookies via browser settings, although this may affect functionality

12. Confidentiality

Zapproach Ltd. and the Client agree to treat all exchanged confidential data with care and not to disclose it to third parties without written consent

This confidentiality agreement remains enforceable for five (5) years after the termination of the contract.

13. Limitation of Liability

Zapproach Ltd.’s total liability for any claims arising from the use of Zaccbox ERP shall be limited to the amount paid by the Client in the twelve (12) months preceding the event.

Zapproach Ltd. shall not be liable for indirect or consequential damages, including data loss, business interruption, or reputational damage.

14. Termination

The initial term is one year from the Effective Date.

The agreement auto-renews annually unless cancelled 30 days prior.

Early termination without 30-day notice may incur a penalty up to 50% of the previous year’s total invoiced amount.

Either party may terminate with cause after 30 days’ written notice of uncured breach.

Upon termination:

• Client data will be available for export for 30 days;
• Access will be revoked and data deleted post-retention;
• Client must uninstall all Zaccbox components, where applicable.

Either party may terminate the agreement with a written notice of at least thirty (30) days.

Zapproach Ltd. reserves the right to suspend or terminate Client access for violations of law or contractual terms.

15. Governing law & Jurisdiction

This Agreement is governed by the laws of the Republic of Mauritius.

All disputes shall fall under the non-exclusive jurisdiction of the Courts of Mauritius.

16. Amendments

Zapproach Ltd. may update these Terms periodically. Notifications will be sent via email or notified through the platform Clients will be notified at least 14 days before changes take effect.

Continued use of Zaccbox ERP indicates acceptance of the amended terms.

17. Social Media Use

17.1 Confidentiality on Public Platforms

Clients and Users must not share confidential business, financial, employee, or client-related information via social media channels or public forums connected with Zapproach Ltd., Zaccbox ERP, or any affiliated entities.

17.2 Company-Generated Content

Zapproach Ltd. may share general updates, system news, or publicly available client success stories or testimonials only with prior written consent from the Client. Such use may include:

• Sharing of approved case studies;
• Reposting of tagged testimonials or user-generated content;
• Display of Client logos in promotional material or website sections dedicated to “Our Clients” or “Case Studies.”

17.3 User-Generated Content

Users who post publicly on social media channels about their use of Zaccbox ERP may have their content reshared or referenced by Zapproach Ltd., but always with appropriate credit and only if the content is:

• Publicly accessible;
• Positive or descriptive of genuine use;
• Free of confidential data or third-party proprietary materials.

17.4 Marketing Permissions

Zapproach will never use Client branding, trademarks, or names in promotional content without obtaining:

• Written approval for such use; and
• Agreement on scope, channel, and duration of usage.

17.5 Client Responsibilities

Clients must ensure that their own use of Zapproach-related platforms or services on social media:

• Does not violate the platform’s own terms;
• Does not contain offensive, misleading, or defamatory content;
• Avoids the unauthorized use of third-party names, logos, or trademarks.

17.6 Moderation and Right to Remove

Zapproach Ltd. reserves the right to moderate, hide, or remove any content posted on its official social channels that:

• Breaches these terms;
• Infringes legal or ethical standards;
• May damage the reputation of Zapproach or its partners.

18. Third Party Services & Integrations

18.1 Third-Party Tools

Zaccbox ERP may integrate with third-party tools and services, including but not limited to:

• Payment gateways;
• Accounting and tax platforms (e.g., MRA or regional equivalents);
• Messaging, SMS, or email services;
• Analytics platforms (e.g., Google Analytics, Meta Pixel).

18.2 Data Sharing

Certain integrations may involve data transfers between Zaccbox ERP and external service providers. Clients acknowledge that such data exchange is necessary for the performance of integrated functions.

Zapproach ensures that all third-party providers used:

• Are under contractual obligation to follow equivalent data security and privacy standards;
• Do not use client data beyond the scope of services rendered.

18.3 Client Responsibility

Before activating or authorizing third-party services via the Zaccbox ERP platform, the Client agrees to:

• Review and accept the third-party's own Terms of Use and Privacy Policy;
• Understand the nature, purpose, and risks associated with such integrations;
• Take appropriate due diligence where sensitive or regulated data is involved.

18.4 Disclaimer of Liability

Zapproach Ltd. is not responsible for:

• Service interruptions, downtime, or data breaches originating from third-party systems;
• Consequences of misuse or misconfiguration of external integrations by the Client.

18.5 Audit & Revocation

Zapproach reserves the right to audit or suspend any integration if it poses a risk to:

• Platform performance;
• Data security;
• Regulatory compliance.

19. Service Level Agreement

Zapproach Ltd. will endeavor to maintain an uptime availability of 99.5% per calendar month, excluding scheduled maintenance or force majeure.

Remediation for downtime shall be determined at the discretion of Zapproach Ltd., unless otherwise contractually agreed.

20. DATA RETENTION & EXIT POLICY

Upon termination, Client data will be retained for 30 calendar days to facilitate export or backup (CSV and/or Excel format).

After the retention period, Zapproach Ltd. will securely delete all client data unless required to retain by law.

Retrieval of data after deletion is not possible.

22.Force Majeure

Zapproach Ltd. shall not be held liable for failure to perform its obligations if such failure is due to unforeseen circumstances beyond its reasonable control, including but not limited to natural disasters, pandemics, cyberattacks, or government restrictions.

For further information or compliance-related inquiries, please contact Zapproach Ltd at support@zapproach.com.
These Terms of Use are drafted in accordance with the Data Protection Act 2017 (Mauritius) and the General Data Protection Regulation (GDPR) and apply exclusively to Zaccbox ERP owned by Zapproach Ltd.