Data protection
Data protection
Current version · 2 October 2026
Personal information in SoftWorkX is handled so a company can run its work, and so each person can sign in only to what their role allows. This notice follows the Cyber and Data Protection Act of Zimbabwe in plain language.
Two responsibilities
The organization that opens a workspace decides why its customer, supplier, employee, student, and borrower records exist. That organization is responsible for those records. The operator of levamen.co.zw processes them so the SoftWorkX apps can store, display, and post them. Account details used to sign in are processed by the operator to provide the workspace.
What is protected
- Names, email addresses, phone numbers, and postal addresses entered on partners and people
- Sign-in details for each user
- Documents that name a person, such as an invoice, a lease, a loan, a ticket, or a fiscal receipt
Passwords are stored as a one-way hash. The refresh cookie described in the privacy policy is HttpOnly and is marked Secure on this site.
Why it is processed
Processing is limited to running the workspace the organization asked for: signing people in, applying roles, posting the company's documents, and showing the reports those roles may open. A record is not used to build an advertising profile.
Access inside the company
Each user receives the permissions of their role. An administrator installs apps and invites people. A person who lacks a permission does not receive that part of the company record. The company sign-in address, such as /t/your-company, selects the organization before the password is checked.
Security of the site
Pages and the API are served over HTTPS. The database is not published on the public internet. Session renewal uses the HttpOnly cookie. These measures reduce the chance of a casual disclosure. They are the controls this installation actually runs.
Keeping and correcting records
The organization keeps a record for as long as it needs that record for its work. An administrator, or a user with the right permission, can correct it in the relevant app. A person who wants to see, correct, or remove personal information about themselves should ask the administrator of the workspace that holds it. The administrator is the person who can act on that company's data.
A request about this website
If the request is about an account on levamen.co.zw rather than a business record inside a company, use the path on the contact page. Sign in, and the workspace administrator can take it from there. The contact named on this site is that administrator, together with the operator of levamen.co.zw.