Terms & Conditions

Terms Governing Your Use of CoreStack

These terms define your rights and obligations when using our website, products, integrations, and communication channels, including API-enabled and AI-assisted features.

Last updated: March 7, 2026

Clear Usage Rules

These terms explain acceptable use across websites, APIs, and communication channels.

Account Responsibility

You are responsible for account activity and keeping credentials and keys secure.

Project Governance

Commercial details are controlled by signed proposals and statements of work.

Regular Updates

Terms may be revised as services evolve, with updated dates posted on this page.

1. Acceptance of Terms

By accessing or using CoreStack websites, products, APIs, and communication channels, you agree to be bound by these Terms and Conditions. If you do not agree, you must not use the services.

If you use the services on behalf of an organization, you represent that you have authority to bind that organization to these terms.

2. Services and Scope

CoreStack provides technology services that may include software engineering, AI systems, messaging automation, API integrations, cloud deployments, analytics tooling, and related consulting.

Service features may change over time as we improve performance, security, compliance posture, and operational reliability. We may add, modify, or discontinue selected features where necessary.

3. Eligibility and Lawful Use

You agree to use our services only for lawful purposes and in compliance with applicable regulations, contractual obligations, and platform policies in your jurisdiction.

You must not use the platform to send malicious content, perform unauthorized access attempts, violate intellectual property rights, or interfere with service integrity.

No abuse, harassment, fraud, or unlawful data collection

No attempts to bypass access controls or security mechanisms

No use of the services for malware distribution or exploitation

No impersonation or false identity claims in communications

4. Accounts, Authentication, and API Keys

You are responsible for safeguarding usernames, passwords, API public keys, tokens, and any integration credentials issued to your account. All actions performed with your credentials are treated as authorized unless promptly reported.

If compromise is suspected, notify us immediately. We may rotate keys, suspend sessions, or restrict access to protect users and infrastructure.

Keep secrets confidential and out of public repositories

Rotate keys and tokens using secure operational practice

Promptly report unauthorized access or suspicious activity

Ensure integration endpoints are configured securely

5. KORA and Automated Agents

KORA answers questions on this website and on WhatsApp, and can quote insurance, build a website from a conversation or open a support request. It is software. It is usually right and it is not always right.

Quotations, documents, calculations and generated websites produced by an agent are drafts until a person confirms them. A quotation is an indication, not a binding offer, until we issue it in writing. Do not act on an automated reply for anything financial, legal, tax or contractual without checking it with us first — ask for a person and you will get one.

By messaging us on a channel you consent to us replying on that channel and storing the conversation as described in our Privacy Policy. Reply STOP at any time to end automated messaging. Standard network or carrier charges are between you and your provider.

6. Your ERP Tenant, Licensing and Your Data

CoreStack ERP is licensed per module, per tenant, on a subscription. Your tenant is logically isolated from every other customer and you control who in your organisation has access to what. Sharing one licence across separate legal entities, or reselling access, needs our written agreement first.

The data in your tenant is yours. We do not claim ownership of your ledger, your customers, your employees or the documents you upload, and we do not use them to train models for anyone else. We hold and process them to run the service for you, on your instructions.

You can export your data at any time while the subscription is active, in a structured, machine-readable format. If the subscription ends, you keep access to export for the wind-down period in your agreement — thirty days unless we have agreed otherwise. After that we delete live data and it ages out of backups on the schedule in our Privacy Policy.

We aim for availability of 99.5% per calendar month excluding scheduled maintenance, which we announce in advance and run outside business hours where we can. Where a support plan is in place, response targets are set out in that plan.

7. Proposals, Deliverables, and Change Requests

Project timelines, scope, milestones, acceptance criteria, and deliverables are defined in signed proposals, statements of work, or master agreements. Those documents govern project-specific obligations.

Scope additions or material requirement changes may require a change request process, revised timelines, or adjusted fees.

8. Fees, Invoicing, and Payment Terms

Unless otherwise agreed in writing, invoices are due according to the payment schedule in the applicable proposal or contract. Late payments may result in suspension of work, delayed delivery, or additional charges where legally permitted.

Taxes, duties, or regulatory fees applicable to your jurisdiction are your responsibility unless expressly stated otherwise in a signed agreement.

9. Intellectual Property

CoreStack retains ownership of pre-existing materials, internal frameworks, templates, and reusable components unless explicitly assigned in a written agreement. Client-specific deliverables may be licensed or assigned as defined in project contracts.

You grant us a limited right to use submitted materials solely to provide requested services and support your implementation.

10. Third-Party Services and Compliance

The platform depends on services we do not control: hosting, ZRA Smart Invoice, mobile money and card networks, WhatsApp, and email delivery. Outages, rule changes or rejections at those services can affect what CoreStack can do, and we are not liable for their failures.

Where CoreStack transmits invoices to the Zambia Revenue Authority, we transmit what you enter. You remain the taxpayer. Ensuring that what you invoice is accurate, correctly classified and filed on time is your responsibility, as is statutory payroll: we calculate from the rates and records you configure.

Where the law changes — a new tax rate, a new filing format, a new statutory deduction — we update the platform as soon as practicable, but we cannot guarantee that an update lands before a deadline set by a third party.

11. Disclaimers and Limitation of Liability

Services are provided on an as-available basis unless a separate written agreement includes specific service levels. To the fullest extent permitted by law, we disclaim implied warranties including merchantability, fitness for a particular purpose, and non-infringement.

CoreStack is not liable for indirect, incidental, special, consequential, or punitive damages, including lost revenue, data loss, business interruption, or reputational harm arising from use of the services.

12. Suspension and Termination

We may suspend or terminate access where there is suspected abuse, security risk, legal non-compliance, unpaid fees, or material breach of these terms. Where feasible, we will provide notice and remediation steps.

Upon termination, access rights end, but provisions related to confidentiality, payments due, liability limitations, and dispute resolution survive as applicable.

13. Governing Law and Updates

These terms are governed by applicable laws in our operating jurisdiction unless a project-specific agreement states otherwise. Disputes should first be addressed through good-faith business negotiation.

We may update these terms from time to time. Continued use after the effective date of revised terms constitutes acceptance of the updated version.