Effective Date: December 2025
This Privacy Policy relates to the use and access of the EcoFarmer AI chatbot assistant and related mobile application. The EcoFarmer AI chatbot assistant and related mobile application are offered by Econet AI. Econet AI and its entities ("Econet AI", "we" or "us" or "our") want you to be familiar with how we collect, use and disclose Personal Information when using our chatbot assistant and related mobile application. This Privacy Policy describes our processing practices in connection with Personal Information that we collect online and offline through:
Collectively, we refer to the services provided through the Chatbot and App as the "Services."
"Personal Information" is information that identifies an individual or relates to an identifiable individual. We may collect the following categories of Personal Information:
A. Personal Information we may receive from you (please keep in mind that the type of information we collect is dependent on the product concerned.
| Category | Description |
|---|---|
| Name & Contact Details | Such as name(s), surname, title, prefix, email address, and telephone number. |
| Identity information | Such as driver's licenses, identity cards, government-issued IDs, passports, any identification number or professional or trade-related information and address, online identifier. |
| Demographic Information | Such as gender, date of birth. |
| Organization Contact Details | Such as name of employer or affiliation, job title, organization email address, organization telephone number, organization postal address, country of business. |
| User Content | Such as reviews about our technology products and trainings that we have provided to you, and other content you may create or share with us during our relationship, including posts on Our Social Media. |
| Preferences | Such as language, interests, and other feedback/preferences that you might express during your use of our Services. |
| Marketing Data | Such as your choices regarding our newsletters, surveys, and other marketing/advertising displayed or provided to you, and preferred methods of such promotional communication. |
| Relationship History | Such as details of your communications, donations, or interactions with us. |
| User Photographs and Videos | Such as photos and videos submitted by you while using our Services. |
| Recordings | Such as audio and/or video recordings of online or in-person trainings. |
| Location data | If you choose to share your device location with us when you use our Apps. This may include precise geolocation, if you choose to share it. |
| IP Address | Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems, and administering the Services. We may also derive your approximate location from your IP address when using our website. |
| Financial Data | Such as airtime transactions, mobile money wallet transactions, wallet transactions, debit cards, credit cards, and any transaction on any payment platform. |
B. Personal Information we collect through your use of our Services or from other sources:
| Category | Description |
|---|---|
| Social Media Information | Such as profile pictures, social media account ID, and other social media profile information, including lists of friends/followers on social media. |
| Event Photographs and Videos | Such as photos and videos taken at one of our trainings. |
| CCTV and Site Security Information | Such as images or video footage captured or recorded by CCTV and other security measures on our office premises. |
| Device Information | Such as information about your devices and your use of our Services. This includes data obtained through cookies and similar technologies, as described in Other Information. |
We and our service providers collect, receive, record, collate and store Personal Information in a variety of ways, including through our Services. We need to collect Personal Information in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
We and our service providers use Personal Information for the following purposes:
*For more information on our legal obligations, please see section 'Other Disclosures' below.
** For more information on disclosure of Personal Information in connection with a sale or business transaction, please see 'Other Disclosures' below.
The following information provides a general overview of how we disclose Personal Information through our organization-wide practices. This may not fully apply to the specifics of how information is processed, stored, or managed for the services or platforms you use.
| Recipients | Purpose |
|---|---|
| Cassava AI entities | - Operations and general activities - Providing the functionality of the Services |
| Implementation partners who assist us with, for example, user acquisition, onboarding, trainings, and outreach activities | - Communicating important changes - User-care service - Personalizing our Services - Providing the functionality of the Services - Relationship building and engagement - Visits, trainings, and events - Improving and developing new products and Services |
| Website hosting service providers | - Improving the Services - Operations and general activities - Providing the functionality of the Services |
| Information technology and related service providers | - Fraud prevention and security - Improving the Services - Operations and general activities - Providing the functionality of the Services |
| Email delivery service providers | - Communicating important changes - User-care service - Improving the Services - Marketing - Personalizing our Services - Providing the functionality of the Services - Relationship building and engagement - Visits, trainings, and events |
| Advertising networks | - Improving the Services - Marketing and fundraising - Personalizing our Services - Relationship building and engagement |
| Analytics and Chatbot providers for our Services | - Aggregating and/or anonymizing Personal Information - User-care service - Fraud prevention and security - Improving the Services - Marketing - Operations and general business - Personalizing our Services - Relationship building and engagement |
| User survey providers | - Improving the services - Participating in market-wide aggregate-level studies |
| Subject-matter information and analysis providers, such as providers of weather forecasts and providers of image-based plant pest and disease identification | - Providing the functionality of the Services - Operations and general business - Personalizing our Services - Improving the Services |
| Law enforcement, public, regulatory and government authorities, courts, or tribunals | - Due Diligence and Anti-Fraud - Emergency and Incident Response - Fraud prevention and security - Legal and compliance |
| Emergency services | - Emergency and Incident Response - Legal and compliance |
| Auditing service providers and other professional advisors, such as accountants, actuaries, experts, consultants, lawyers, banks and financial institutions | - Due Diligence and Anti-Fraud - Fraud prevention and security - Legal and compliance - Improving and developing new products and Services |
| Other services, including, without limitation, our Social Media Pages | - Individual user public interactions and communications, such as message boards, chat, profile pages, blogs and other services to which you choose to post information and content - Social sharing activities |
By using the Services, you may elect to disclose Personal Information on message boards, chat, profile pages, blogs and other services to which you are able to post information and content (including, without limitation, Our Social Media), or through which you are able to send messages through the Services. Please note that any information you post or disclose in this context will become public and may be available to other users and the general public.
We also use and disclose your Personal Information as necessary or appropriate, especially when we have a legal obligation or legitimate interest to do so, as set out in further detail below:
| Purpose | Further Detail |
|---|---|
| To comply with applicable law and regulations | This may include laws outside your country of residence, which could give rise to a legal obligation requiring us to process your Personal Information. |
| To cooperate with public and government authorities and law enforcement, and for other legal reasons |
|
| In connection with an organizational change | We have a legitimate interest in disclosing or transferring your Personal Information to a third party in the event of any reorganization, merger, assignment, transfer, or other disposition of all or any portion of our organization. Such third parties may include, for example, an acquiring entity and its advisors. You will be notified of any such change and of possible changes to the processing of your Personal Information in accordance with applicable law and the 'Updates to This Privacy Notice' section. |
We and our service providers collect some information automatically, including through cookies, pixel tags, and similar tracking technologies.
"Other Information" is any information that does not reveal your specific identity or does not directly relate to an identifiable individual:
If you do not want information collected through the use of cookies, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting particular cookies from a particular website. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services.
Pixel tags (also known as web beacons and clear GIFs) may also be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates.
You can learn about Google's practices by going to www.google.com/policies/privacy/partners/ and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
We may use and disclose such information for any purpose, except where we are required to do otherwise under applicable law. If we are required to treat such information as Personal Information under applicable law, then we may use and disclose it for the purposes for which we use and disclose Personal Information as detailed in this Policy. In some instances, we may combine such information with Personal Information. If we do, we will treat the combined information as Personal Information as long as it is combined.
We and our service providers may collect Other Information in a variety of ways, including:
We seek to use reasonable organizational, technical, and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contacting Us" section below.
You have choices regarding marketing-related communications.
Where required by applicable law, we will ask for your prior opt-in consent. If you no longer want to receive solicitation emails from us on a going-forward basis, you may opt-out by following the unsubscribe instructions in any such message or by contacting the data protection officer at dpo@econet.co.zw
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing from us, we may still send you important administrative messages, from which you cannot opt out.
If you would like to request to access/review, correct, update, suppress/delete, object to, restrict or opt out of the processing of Personal Information, withdraw your consent (which will not affect the lawfulness of processing prior to the withdrawal), or if you would like to request to receive an electronic copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), please contact us in accordance with the 'Contacting Us' section below. We will respond to your request consistent with applicable law.
In your request, please make clear what Personal Information you would like to have changed, whether you would like to have your Personal Information suppressed from our database or otherwise let us know what limitations you would like to put on our use of your Personal Information. For your protection, we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any activities that you began prior to requesting a change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion). Further, certain Personal Information may be exempt from requests pursuant to applicable data protection laws or other laws and regulations.
We retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained as outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable law. The criteria used to determine our retention periods include:
Where a legal obligation arises or retention is advisable in light of our legal position, in some circumstances, we will retain certain Personal Information, even after we no longer provide the Services to you, for example:
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties.
This includes any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our entities.
In addition, we are not responsible for the information collection, use, disclosure or security policies or practices of other organizations, such as Facebook, Apple, Google, Twitter, LinkedIn, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Apps or Our Social Media.
The Services are not directed to individuals under the age of eighteen (18), and we do not knowingly collect Personal Information from individuals under 18.
Your Personal Information may be stored and processed in countries where we have facilities or in which we engage service providers. By using the Services, you understand and agree that your Personal Information may be transferred to countries outside of your country of residence, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.
Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., national social security numbers, information related to racial or ethnic origin, political opinions, membership of a political association, religion or other beliefs, philosophical beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services or otherwise to us.
The "LAST UPDATED" legend at the top of this Privacy Policy indicates the date when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
Cassava AI, located at No.2 Old Mutare Road, Msasa, Harare, Zimbabwe, is the entity responsible for collection, use and disclosure of your Personal Information under this Privacy Policy.
If you have any questions about this Privacy Policy, please contact us.
You can reach us at legal@econet.co.zw or at:
No.2 Old Mutare Road
Msasa
Harare
Zimbabwe
Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.
For purposes of this Privacy Policy, these entities are considered to be "affiliates" of Econet AI: