Your information and privacy

Who operates the platform

Legal Pulse Zambia is operated by DigitalIQ ICT Solutions Ltd. Privacy controls are available in account settings. A private contact channel will be confirmed before public registration opens.

Information the platform uses

Accounts contain your name, email and a password hash. The service stores session records, saved authorities and research conversations. Practitioner contributions and review records have separate attribution and audit requirements. Public guides can be browsed without creating an account.

Why it is used

Account information supports sign-in, email verification and recovery. Bookmarks and conversations let you return to research. Limited security records support abuse prevention and incident investigation. Account registration and questions are not used to create an advertising profile.

AI questions and external providers

When live AI is enabled and you confirm the AI sharing notice, your question, selected legal-source excerpts and up to six recent conversation messages may be sent to OpenAI. Use anonymous examples and remove names, NRC numbers, addresses and confidential case details before submitting. The API request uses store=false. Provider security-monitoring retention and access depend on its account terms and controls.

OpenAI data controls

Service providers and location

The hosting and database platform is Cloudflare. The production database is currently located in eastern North America. Cloudflare Turnstile processes browser security signals for bot checks. Resend handles account verification and password-reset emails. Questions are not included in verification or reset emails. Hosting, AI and email services may process data outside Zambia. Transfer requirements and provider agreements must be assessed before public registration opens. Public registration and live AI remain disabled during these launch checks.

Storage and deletion

Member sign-in sessions expire after eight hours. Verification and reset links expire after 30 minutes. The daily cleanup removes research conversations after 90 days from creation. Expired security counters and account tokens are cleared during cleanup. You can delete individual conversations or request account deletion immediately through account settings. Account deletion removes active account records, bookmarks and research conversations. Provider logs, protected backups and necessary editorial or security records can have separate retention periods. Restoration procedures must preserve deletion requests.

Your controls

Account settings offer a download of your account, bookmarks and conversations, deletion controls, authenticator setup and sign-out from all devices. An administrator must transfer their responsibilities before deleting a super administrator account. Keep recovery codes secure. For changes to profile details or other privacy requests during the local preview, contact the project operator directly through your existing contact route.

Manage account security and privacy

Cookies and security

The platform uses essential sign-in cookies with HttpOnly and SameSite protection, with Secure enabled for HTTPS deployment. Optional analytics have not been added. Browser security headers, password hashing and access checks reduce risks. Avoid using shared devices for sensitive research and sign out when finished.

Before public launch

The operator must publish its legal identity, working privacy contact, applicable legal bases, final provider and retention details, and complete the relevant Zambian data-protection registration and transfer assessment. This notice will be updated as those arrangements are confirmed.