Legal

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Zyntel Co. Limited ("Zyntel", "we", "us") collects, uses, and protects information about you when you use our websites and products (KantaHub, zyntForms).

1. Who we are

Zyntel Co. Limited is a technology company incorporated in Uganda and headquartered in Kampala. We build operational intelligence software for healthcare and regulated industries.

2. Information we collect

Information you provide

  • Account information: name, email address, organisation name
  • Contact form submissions
  • Data you enter into KantaHub or zyntForms (equipment records, lab results, form responses)

Information collected automatically

  • Log data: IP address, browser type, pages visited, timestamps
  • Device information: operating system, screen size
  • Usage data: features used, actions taken within the product

3. How we use your information

  • To provide, maintain, and improve our products
  • To respond to support requests and contact form submissions
  • To send important product and security updates (not marketing unless you opt in)
  • To comply with legal obligations applicable in Uganda and any jurisdictions we operate in

4. Data storage and security

Your data is stored on Neon PostgreSQL (serverless Postgres) with encryption at rest and in transit. Hosting is provided by Railway. We apply role-based access control so only authorised team members can access production data. We do not sell your data to third parties.

zyntForms — anonymous sessions: If you create a form without registering an account, your form and any responses collected are stored for 14 days. After 14 days, all data from unregistered sessions is permanently and automatically deleted. Creating an account before the 14-day window preserves your data indefinitely under your account.

5. Third-party services (sub-processors)

We use the following third-party services to operate our products. Each has its own privacy policy and meets adequate data protection standards.

  • Neon — PostgreSQL database hosting (AWS infrastructure, us-east-1 region)
  • Railway — application hosting and deployment
  • Cloudflare — DNS, CDN, DDoS protection, and file storage (R2)
  • Resend — transactional email delivery
  • Flutterwave — payment processing for African markets
  • Stripe — payment processing for international markets
  • PostHog — product analytics (anonymised usage events)

6. Data retention

We retain your data for as long as your account is active or as required by law. You may request deletion of your account and data at any time by emailing [email protected]. We will process deletion requests within 30 days.

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing in certain circumstances

To exercise any of these rights, contact us at [email protected].

8. Cookies

Our marketing site (zyntel.net) uses minimal cookies — only those necessary for security and basic analytics (session identifiers). We do not use tracking cookies or cross-site advertising cookies. Our products (KantaHub, zyntForms) use session cookies required for authentication. For full details, see our Cookie Policy.

9. Children's privacy

Our products are designed for healthcare and business teams. We do not knowingly collect data from children under 18. If you believe we have collected data from a minor, contact us immediately.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-product notice. The "Last updated" date at the top of this page reflects the current version.

11. Contact

For privacy questions or data requests: [email protected]
Zyntel Co. Limited, Kampala, Uganda.