Privacy Policy

Effective date: 1 September 2026

This Privacy Policy explains how Zera Dynamics ("Zera," "we," "us," or "our") collects, uses, and protects personal data in connection with Orella (the "Service"). Zera is registered as a data controller with Ghana’s Data Protection Commission. This Policy covers two categories of people: (a) individuals at organizations who use Orella directly ("Users"), and (b) the leads and customers of those organizations, whose data a User inputs into the Service ("Contacts"). For Contacts, the User is generally the data controller and Zera acts as a data processor on that User’s behalf — see Section 6.

1. Information We Collect

1.1 Account information: name, email address, phone number, business name, and role, provided when you sign up or are invited to an organization’s Orella workspace.

1.2 Contact data: the leads, customers, and their associated details (name, phone number, email, WhatsApp number, communication history, pipeline stage) that a User inputs into or connects to the Service.

1.3 Usage data: log data, device information, and product-usage events, collected automatically to operate, secure, and improve the Service.

1.4 Payment data: processed by our payment provider (Paystack); we retain only transaction references and status, not full card details.

2. How We Use Information

We use the information above to: provide and maintain the Service; process payments; send account, service, and relationship communications (see Section 5); detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and improve the Service’s reliability and features.

3. Legal Basis

Where Ghana’s Data Protection Act, 2012 (Act 843) or another applicable data protection law requires a lawful basis, we rely on: performance of a contract (providing the Service you signed up for), consent (for communications described in Section 5, and for a Contact’s own data where a User relies on Contact consent), and legitimate interest (security, fraud prevention, and service improvement), balanced against your rights.

4. Communications & Consent

4.1 We send account and service communications by email and, where connected, WhatsApp — including onboarding updates, activity digests, billing notices, and occasional relevant updates about the Service. You can withdraw this consent at any time using the unsubscribe link in any email or by contacting us, without affecting your ability to use the Service.

4.2 Where a User sends communications to their own Contacts through the Service, that consent is the User’s responsibility to obtain and record; the Service is designed to require a recorded, per-channel consent before a message can be sent to a Contact, and to honor a Contact’s revocation of that consent going forward.

5. How We Share Information

We share information with: (a) sub-processors who help us run the Service (hosting and infrastructure providers, our database provider, email/SMS/WhatsApp delivery providers, and Paystack for payments), each bound by confidentiality and data protection obligations; (b) professional advisors, where necessary; and (c) a competent authority, where required by law. We do not sell personal data.

6. Zera as Processor for Contact Data

Where a User inputs their own Contacts’ personal data into the Service, Zera processes that data only as instructed by the User, to provide the Service, and does not use it for Zera’s own independent purposes. The User remains responsible, as data controller, for having a lawful basis to collect and process that Contact data.

7. Data Retention

We retain personal data for as long as your account is active, and for a reasonable period after termination to allow data export (see Terms of Service, Section 9.2), unless a longer retention period is required by law or a shorter period is requested and legally permissible.

8. Your Rights

Subject to applicable law, you may have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise these rights, contact us at contact@orellahub.com. A Contact whose data was input by a User should generally direct such a request to that User in the first instance, as the data controller for that data; we will support the User in responding.

9. Security

We maintain reasonable technical and organizational safeguards to protect personal data against unauthorized access, loss, or disclosure, including encryption of sensitive credentials at rest. No system is completely secure; we will notify affected Users without undue delay if we become aware of a security incident affecting their data.

10. Cookies

We use essential cookies to operate the Service (authentication, session management) and, where enabled, limited analytics cookies to understand product usage. Essential cookies cannot be disabled without affecting the Service’s functionality.

11. Children’s Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from children.

12. International Transfers

Our infrastructure providers may process data outside Ghana. Where this occurs, we take reasonable steps to ensure a comparable level of protection applies, as required under Act 843.

13. Changes to This Policy

We may update this Policy from time to time. We will notify Users of material changes by email or in-product notice at least 14 days before they take effect.

14. Contact

Questions about this Policy, or a request to exercise your data protection rights, can be sent to contact@orellahub.com.