Privacy Policy

Roxo Space is one account people can use across the apps of the Roxo group. It is operated by Brivo Synaptics (“we”, “us”), a company registered in Zambia. This policy explains what personal data Roxo Space handles, why, who we share it with, how long we keep it and the rights you have. We follow the Data Protection Act No. 3 of 2021 of Zambia.

Each app you use with your account, such as Asira or Switchgear, handles its own data as that app’s own terms and privacy policy describe. This policy covers the account itself.

1. Data we collect

• Account details: your name and email address, and your password if you choose one, stored only as a secure hash.
• Two-step sign-in: the fact that you set it up, and its secret. We never see the codes your authenticator shows afterwards, apart from checking each one.
• Sign-in records: when you signed in, the IP address and browser used, and your active sessions, so you can see them and so we can detect misuse.
• Cookies that keep you signed in and remember the last account used on this browser. We do not use advertising or tracking cookies on Roxo Space.

2. Signing in with Google

If you choose “Continue with Google”, Google sends us your name, email address and profile picture, and whether Google has verified that email address. We use them to create your account or sign you in to the existing account with that address, and to show your name and picture. We do not receive your Google password. We do not ask for access to your Gmail, contacts, files or anything else in your Google account, and we do not sell this data or use it for advertising. You can remove our access at any time in your Google account’s settings.

3. How we use data

• To run your account: sign you in, keep you signed in, reset your password and send the emails this takes.
• To sign you in to an app you choose: that app receives your name, email address and an identifier for your account. It never receives your password.
• To keep the service safe: limit repeated attempts, detect security incidents and keep records of them.
• To meet legal obligations.

We do not sell personal data.

4. Legal basis

We rely on performing our agreement with you, our legitimate interest in running a secure service, and legal obligations.

5. Who we share data with

• The apps you choose to sign in to, as described above.
• Google, if you choose to sign in with it.
• Email delivery providers, to send sign-in and password emails.
• Cloudflare and our hosting providers, for network security, hosting and storage.
• Authorities when the law requires it, and a buyer if Brivo Synaptics is sold or merged, under the same protections.

6. International transfers

Some of these providers, including Google and Cloudflare, process data outside Zambia. When data leaves Zambia, we rely on the safeguards the Data Protection Act allows, such as contractual protections and the providers’ own security commitments.

7. How long we keep data

• Account details: for the life of the account, and afterwards as long as the law requires.
• Audit records of account changes: up to 7 years.

8. How we protect data

Data is encrypted in transit (TLS). Passwords are stored only as hashes. Access is limited to people who need it.

9. Your rights

Under the Data Protection Act you may ask to access your data, correct it, delete it, restrict or object to its use, or receive a copy. You may also withdraw consent where we rely on it. To make a request, email us at the address below. We answer within 30 days. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner of Zambia.

10. Children

Roxo Space accounts are not meant for children.

11. Changes

We will update this page when our practices change and change the date at the top.

12. Contact

Brivo Synaptics, Zambia. Email: [email protected] (subject “Privacy”).