Test money. Real business records.
Invoice files, names and emails remain real personal and confidential information even while payments are simulated.
1. Controller
Notoris Technologies Limited is the controller for the Zeronda pilot. It is incorporated in England and Wales under company number 16729024 and operates from Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB. Contact info@notoris.xyz for privacy questions or rights requests.
2. Information we process
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, Clerk user ID, sign-in and session information, pilot access entitlement and last-used beneficiary or sponsor workspace. | You, Zeronda administrators and Clerk. |
| Business | Legal/trading names, company number, website, phone, description, Stripe account reference and verification status. | The beneficiary and Stripe. |
| Invoice evidence | Original file, filename/type/size, cryptographic hash, supplier, number, dates, currency, subtotal, tax, total, extraction confidence and validation flags. | The beneficiary; extracted from the uploaded file. |
| Request | Beneficiary and sponsor names/emails, purpose, status, amount chosen, timestamps and invitation delivery. | The businesses, Zeronda and Resend. |
| Test payment | Stripe Checkout session, PaymentIntent, amount, currency, connected-account reference and payment outcome. Zeronda does not receive raw card or bank credentials. | Stripe. |
| Security | Duplicate indicators, malware-scan status, access records and diagnostics. | Your device and service providers. |
3. Invoice Intelligence and the invoice registry
Zeronda calls its invoice file-safety, integrity, extraction, risk assessment and duplicate-detection system “Invoice Intelligence”. Zeronda keeps a central invoice registry and a submission log. Exact hashes identify identical resubmissions; a semantic fingerprint can compare normalised supplier identity, invoice number, date, currency and total. These controls help prevent duplicate requests and payments.
Invoice Intelligence assigns a 0–100% risk score using identified evidence factors such as missing fields, arithmetic mismatches, unusual dates and extraction uncertainty. Lower scores indicate fewer identified concerns. The score is a decision-support signal, not a probability of fraud or proof of authenticity. High-risk evidence may still be shown to the sponsor with a warning. Unsafe files, duplicates and requests without a usable payable amount can be blocked or paused because Zeronda cannot safely process them.
4. Sponsor data supplied by a beneficiary
A beneficiary may provide a sponsor’s name and work email before that sponsor has an account. Zeronda creates a contact record so legitimate earlier requests appear if the sponsor later signs up with the same email. The email is used for the requested one-to-one workflow, not unrelated marketing.
The invitation identifies its source, links to this notice and requires the sponsor to authenticate with the invited email before seeing the invoice.
5. Purposes and proposed lawful bases
Account and requested workflow processing is proposed as necessary to take requested steps or perform the pilot arrangement. Security, duplicate prevention, service reliability and limited sponsor invitation delivery are proposed legitimate interests. Notoris must document necessity and balancing assessments; stating a basis here does not establish one.
Complete the record of processing, legitimate-interests assessments, DPIA screening, processor inventory and retention schedule before a broader cohort or live payments.
6. Recipients
- The other business: authenticated beneficiary and sponsor users see the evidence and status needed for the request.
- Clerk: authentication, sessions and secure account invitations for named sponsors.
- Resend: transactional sponsor email.
- Stripe: beneficiary verification and Test-mode payment processing.
- Private storage and extraction providers: invoice storage, malware status and document extraction where configured.
- Professional advisers or authorities: where legally required or necessary for claims and compliance.
7. Retention and deletion
Invoices must be retained long enough to prevent duplicate payments, preserve the pilot audit trail, address disputes and meet lawful accounting or compliance needs. That does not justify indefinite storage. A final category-by-category schedule has not yet been approved, so Zeronda does not state an unconfirmed period.
Where deletion of a central record would undermine fraud prevention, Zeronda should consider retaining a restricted hash and minimal identity record while deleting the original file when legally appropriate.
8. International transfers and security
Providers may process data outside the UK. Notoris must verify actual regions, contractual roles and transfer safeguards for the accounts used. Invoice storage is private, access-controlled and no-store when retrieved; production deployment requires encryption and malware scanning. No online service can promise absolute security.
9. Your rights
Depending on the circumstances, you may have rights of access, correction, erasure, restriction, portability, objection and safeguards concerning solely automated decisions. Contact info@notoris.xyz. You may also complain to the Information Commissioner’s Office.
10. Changes
This notice must be updated before material changes to the operator, providers, evidence uses, retention, fraud systems or live-money model. Material changes should be communicated actively.