Privacy policy
What FiskIT collects, why, and how we look after it — including data we read from QuickBooks Online.
Who we are
FiskIT is a ZIMRA fiscalisation service operated by Hungwaru Smart Technology (“we”, “us”), 8220 Southview Park, Harare, Zimbabwe. For anything in this policy, contact [email protected].
We process personal information in line with the Cyber and Data Protection Act [Chapter 12:07]. For the business records our customers send us, our customer is the data controller and we process those records on their behalf.
What we collect
- Account details — your business name, TIN, VAT number, branch addresses, contact names, email addresses and phone numbers, and portal login details.
- Fiscal device details — ZIMRA device IDs, serial numbers, certificates and fiscal-day records needed to sign receipts on your behalf.
- Sales documents — invoices, receipts, credit and debit notes: line items, amounts, VAT, currency, payment method, and your customer’s name, address, TIN and VAT number where shown.
- Technical data — server logs (IP address, time, request) kept for security and troubleshooting.
QuickBooks Online data
If you connect QuickBooks Online to FiskIT, with your permission we:
- Read new invoices, sales receipts, credit memos and refund receipts, the customers on them, and your tax codes and rates — only what is needed to fiscalise each document.
- Write one thing back: the ZIMRA verification link, added to the document’s customer message so it prints on what your customer receives.
- Store your QuickBooks company ID, the access and refresh tokens Intuit issues to FiskIT, and a record of each document we processed (its number, status, fiscal receipt number and ZIMRA link).
We do not read your bank feeds, payroll, purchases or reports, and we never sell QuickBooks data or use it for advertising. Documents created before you connected are left alone. You can disconnect at any time from QuickBooks (Apps → My apps) or by asking us; we then stop reading your data and the stored tokens are revoked, so they can no longer be used.
Why we use it
- To sign and submit your fiscal documents to ZIMRA’s Fiscalisation Data Management System (FDMS), as the law requires of VAT-registered businesses.
- To run your account: support, billing, licence renewals and service notices.
- To keep the service secure and working, and to meet our own legal obligations.
Who we share it with
- ZIMRA — the fiscal data the FDMS requires for every signed document.
- Intuit — only through the QuickBooks connection you approve.
- Our service providers — Contabo hosts our servers in France, so your data is stored outside Zimbabwe, in the European Union, under the EU’s data protection law (GDPR) as well as ours; payment processors (such as Paynow) handle payments you make to us.
- Authorities — where a law, court order or ZIMRA lawfully requires it.
- Your tax consultant — only if you give written consent for them to see your reports.
How we protect it and how long we keep it
Data is sent over HTTPS. Each customer’s records sit in their own database. QuickBooks webhooks are verified with Intuit’s signature before we act on them, and admin access is limited to our staff.
We keep fiscal records for 6 years because tax law requires them to be available for inspection. QuickBooks tokens are revoked when you disconnect. Other account data is deleted or anonymised 12 months after your account closes, unless the law requires us to keep it longer.
Your rights
You may ask to see, correct or delete your personal information, object to how we use it, or withdraw consent you have given. Fiscal records already submitted to ZIMRA cannot be changed or deleted, by law. Email [email protected]; you may also complain to the Data Protection Authority (POTRAZ).
We will post any changes to this policy on this page and update the effective date above.