Test money. Real business records.
Invoice files, names and emails remain real personal and confidential information even while payments are simulated.
1. Controller
Notoris Technologies Limited is the controller for the Zeronda pilot. It is incorporated in England and Wales under company number 16729024 and operates from Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB. Contact info@notoris.xyz for privacy questions or rights requests.
2. Information we process
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, Clerk user ID, sign-in and session information. | You and Clerk. |
| Business | Legal/trading names, company number, website, phone, description, Stripe account reference and verification status. | The beneficiary and Stripe. |
| Invoice evidence | Original file, filename/type/size, cryptographic hash, supplier, number, dates, currency, subtotal, tax, total, extraction confidence and validation flags. | The beneficiary; extracted from the uploaded file. |
| Request | Beneficiary and sponsor names/emails, purpose, status, amount chosen, timestamps and invitation delivery. | The businesses, Zeronda and Resend. |
| Test payment | Stripe Checkout session, PaymentIntent, amount, currency, connected-account reference and payment outcome. Zeronda does not receive raw card or bank credentials. | Stripe. |
| Security | Duplicate indicators, malware-scan status, access records and diagnostics. | Your device and service providers. |
3. Invoice registry and automated checks
Zeronda keeps a canonical invoice registry and a submission log. Exact hashes identify byte-for-byte resubmissions; a semantic fingerprint can compare normalized supplier identity, invoice number, date, currency and total. These controls help prevent duplicate requests and funding.
Document extraction and rules can flag missing fields, arithmetic mismatches, unusual dates, low confidence and duplicates. A passed check is not proof of authenticity. In the pilot, a failed or ambiguous invoice is blocked or held for review rather than silently forwarded.
4. Sponsor data supplied by a beneficiary
A beneficiary may provide a sponsor’s name and work email before that sponsor has an account. Zeronda creates a contact record so legitimate earlier requests appear if the sponsor later signs up with the same email. The email is used for the requested one-to-one workflow, not unrelated marketing.
The invitation identifies its source, links to this notice and requires the sponsor to authenticate with the invited email before seeing the invoice.
5. Purposes and proposed lawful bases
Account and requested workflow processing is proposed as necessary to take requested steps or perform the pilot arrangement. Security, duplicate prevention, service reliability and carefully limited sponsor invitation delivery are proposed legitimate interests. Notoris must document necessity and balancing assessments; writing a basis here does not create one.
Complete the record of processing, legitimate-interests assessments, DPIA screening, processor inventory and retention schedule before a broader cohort or live payments.
6. Recipients
- The other business: authenticated beneficiary and sponsor users see the evidence and status needed for the request.
- Clerk: authentication and sessions.
- Resend: transactional sponsor email.
- Stripe: beneficiary verification and Test-mode payment processing.
- Private storage and extraction providers: invoice storage, malware status and document extraction where configured.
- Professional advisers or authorities: where legally required or necessary for claims and compliance.
7. Retention and deletion
Invoices must be retained long enough to enforce duplicate-funding controls, preserve the pilot audit trail, address disputes and meet lawful accounting or compliance needs. That does not justify indefinite storage. A final category-by-category schedule has not yet been approved, so Zeronda does not promise an invented period.
Where deletion of a canonical record would undermine fraud prevention, Zeronda should consider retaining a restricted hash and minimal identity record while deleting the original file when legally appropriate.
8. International transfers and security
Providers may process data outside the UK. Notoris must verify actual regions, contractual roles and transfer safeguards for the accounts used. Invoice storage is private, access-controlled and no-store when retrieved; production deployment requires encryption and malware scanning. No online service can promise absolute security.
9. Your rights
Depending on the circumstances, you may have rights of access, correction, erasure, restriction, portability, objection and safeguards concerning solely automated decisions. Contact info@notoris.xyz. You may also complain to the Information Commissioner’s Office.
10. Changes
This notice must be updated before material changes to the operator, providers, evidence uses, retention, fraud systems or live-money model. Material changes should be communicated actively.