Gweta Online
Privacy
What we hold, why, who else touches it, and how to have it removed. Written to be read, not skimmed past.
Draft under legal review — not yet in effect. Questions in the meantime go to info@uhuruinnovative.com.
Who we are
Gweta Online is operated by Uhuru Innovative Solutions (Pvt) Ltd (“we”, “us”), a Zimbabwean company. We handle personal information in line with the Cyber and Data Protection Act [Chapter 12:07]. You can reach us about anything on this page at info@uhuruinnovative.com.
Two kinds of information, two roles
Your account. For your name, email address and how you use the service, we decide what is collected and why, and we are responsible for it.
Your firm’s material. Documents your firm uploads, and the client information inside them, belong to your firm. We process them only to provide the service to your firm and on its instructions. Your firm remains responsible for having the right to upload them, including under its professional duties of confidentiality.
What we collect
Account details
Your name, email address and the firm or organisation you belong to. Sign-in is handled by our authentication provider, which holds your login credentials; we never see your password.
What you put into the service
- Research questions and answers. Stored as threads so you can return to them and ask follow-ups.
- Vault documents. The files you upload, the text we extract from them and the search index built over that text.
- Workflow runs. The inputs to a workflow and the output of each step, kept so a run survives closing the page.
- Drafting instructions. Processed to produce the draft, then not kept. We record only the type of draft requested and the length of the instructions.
- Feedback. Ratings and any comment you choose to leave on an answer.
Usage records
Counts, timings and the size of each request. They let us apply fair-use limits, understand cost, and fix what is slow or failing.
Technical information
Our hosting infrastructure records standard request logs, including IP addresses, for security and diagnosing faults.
How we use it
- To provide the service: answer your questions, search your documents, run workflows and produce drafts.
- To keep it secure and within fair-use limits.
- To decide what law to add to the corpus next (see below).
- To contact you about your account and material changes to the service.
We do not sell personal information, we do not use it for advertising, and we do not use your questions or documents to train AI models.
Who at Uhuru can see your questions
Research questions are recorded together with the email address of the person who asked. A small number of our staff review them to see which judgments and legislation practitioners need and the corpus does not yet hold. That is how coverage grows. We do not read your vault documents or the answers in your threads in the ordinary course. We access them only when you ask us to (for example, to investigate a fault you report) or when the law requires it.
Who else processes it
We use a small number of providers to run the service. Each receives only what its task needs and processes it on our behalf.
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services | Hosts the application and database, including all stored threads and vault documents. | South Africa (Cape Town) |
| Clerk | Sign-in and account management. | United States |
| Anthropic | Generates answers, drafts and workflow output. Receives your question or instructions and the passages retrieved to answer it, which may include excerpts of your vault documents. | United States |
| Voyage AI | Builds the search index. Receives the text of your questions and of the documents you upload, so they can be searched by meaning. | United States |
We use these providers on their commercial terms, which do not allow them to train their models on what we send. We may also disclose information where the law requires it. We will tell you first unless we are prohibited from doing so.
Information leaving Zimbabwe
As the table shows, the service is hosted in South Africa, and some processing happens in the United States. By using the service you understand that your information is transferred there. We choose providers that protect it to a standard comparable to Zimbabwean law.
How long we keep it
- Vault documents can be deleted by your firm at any time from the vault. The file, its extracted text and its search index are removed together.
- Threads and workflow runs are kept while your account is open. To have any of them deleted sooner, write to us.
- Your account: when you ask us to close it, we delete your account details and your content within 30 days, apart from anything we must keep by law. Copies in backups are overwritten on their normal cycle.
How we protect it
Each firm’s material is isolated at the database level: every query is confined to the firm it belongs to by the database itself, not only by application code. Connections are encrypted in transit, and access to production systems is limited to the staff who need it to run the service.
Cookies
We use only the cookies needed to keep you signed in. We do not use analytics or advertising cookies.
Your rights
You can ask us for a copy of the personal information we hold about you, and ask us to correct it, delete it, or stop using it for a particular purpose. Write to info@uhuruinnovative.com and we will respond within 30 days. Requests about client information inside your firm’s documents are best made to the firm, which controls it. If you are unhappy with how we have handled your information, you may complain to the Data Protection Authority (POTRAZ).
Children
The service is for legal professionals and is not intended for anyone under 18.
Changes to this page
If we change how we handle personal information in a way that matters, we will update this page and tell account holders by email before the change takes effect.