Terms of Service

Last updated: July 15, 2026

These Terms of Service ("Terms") govern access to and use of Rizzit, a receipt management and KRA eTIMS compliance validation platform (the "Service") provided by Open Crafts Interactive [, a company registered in Kenya under registration number [Company Registration Number], with its registered address at [Registered Address]] ("Open Crafts Interactive", "Company", "we", "us", or "our").

Rizzit is a business-to-business product. By creating an account, accepting an invitation to join an organization on Rizzit, or otherwise using the Service, you confirm that you are entering into these Terms on behalf of a business or other organization ("Customer", "you", "your"), and that you are authorized to bind that organization to these Terms. If you do not have that authority, or do not agree to these Terms, do not use the Service.

1. Definitions

• "Account" means the organization-level workspace created on Rizzit, together with the individual user accounts of its Authorized Users.
• "Authorized User" means an individual whom Customer has invited to access the Service under Customer's Account, in a role such as owner, admin, accountant, or member.
• "Receipt Data" means receipt images, scans, and the transaction, merchant, and tax information extracted from them, including any KRA PIN, eTIMS QR data, or other compliance information contained in or derived from a receipt.
• "Customer Data" means Receipt Data together with any other data, content, or information Customer or its Authorized Users submit to, or generate within, the Service (organization records, notes, approval decisions, and similar).
• "Subscription Plan" means the pricing tier (e.g. Biashara, Growth, or Enterprise) Customer has selected, as described at rizit.cloud/#pricing or in an applicable order form.
• "GavaConnect" means the Government of Kenya's API gateway through which we access KRA's eTIMS validation services.

2. The Service

Rizzit lets Customer's Authorized Users capture and manage business receipts, automatically extract structured data from them, validate receipts against KRA's eTIMS system via GavaConnect, flag likely fraud or duplicate submissions, and export receipt data for accounting and tax filing purposes.

Not affiliated with KRA. Open Crafts Interactive is an approved consumer of the GavaConnect API for the purpose of eTIMS QR validation. We are an independent third-party software provider - we are not the Kenya Revenue Authority, we are not affiliated with, endorsed by, or acting as an agent of KRA, and a validation result returned by the Service is KRA's own data relayed to you through GavaConnect, not a determination made or guaranteed by us. Final decisions on tax deductibility, filings, and compliance remain KRA's and Customer's responsibility; the Service is a tool to help Customer make those decisions faster and with better information, not a substitute for professional tax or legal advice.

AI-assisted extraction. Data fields shown against a captured receipt (merchant name, amounts, line items, and similar) are produced by an automated extraction process, including third-party machine learning models, and are provided with a confidence indicator. Extraction may contain errors, particularly for damaged, low-quality, or unusual receipts. Customer is responsible for reviewing extracted data - especially anything flagged with low confidence - before relying on it for accounting, tax, or compliance purposes.

3. Accounts and Registration

Customer must provide accurate, current information when creating an Account and keep it up to date. Customer is responsible for all activity under its Account, for maintaining the confidentiality of its Authorized Users' credentials, and for promptly removing access for any Authorized User who should no longer have it (for example, a departing employee). Authorized Users must be at least 18 years old.

Customer controls which roles it assigns to its Authorized Users, and is responsible for those role assignments - including who can approve or reject receipts, manage billing, or export Receipt Data.

4. Subscription, Fees, and Billing

• Free trial. New Accounts may start with a 14-day free trial. We may change or discontinue trial terms at any time, including for future signups.
• Fees. Subscription fees are billed in advance on the interval stated for Customer's Subscription Plan (e.g. monthly, or monthly-billed-annually), in Kenyan Shillings (KSh) unless otherwise agreed in writing. Fees exclude applicable taxes, which Customer is responsible for unless we are legally required to collect them.
• Payment methods. We accept payment via M-Pesa (through Safaricom's Daraja API), bank transfer, and credit card, as made available for Customer's plan. Customer authorizes us (and our payment processors) to charge the payment method on file for recurring subscription fees and any usage-based add-ons (for example, additional receipt-processing units or seats) Customer purchases.
• Auto-renewal. Subscriptions renew automatically at the end of each billing period unless cancelled before the renewal date.
• Failed or late payment. If a payment fails or is overdue, we may suspend Customer's access to paid features until the account is brought current. We will make reasonable efforts to notify Customer before suspending access.
• Price changes. We will give Customer at least 30 days' notice before a price increase takes effect on its next renewal.
• Refunds. Except as required by law or expressly stated in an order form, fees are non-refundable, including for partial billing periods.

5. Customer Data

As between the parties, Customer owns Customer Data. Customer grants us a worldwide, non-exclusive license to host, process, transmit, and display Customer Data solely to provide, maintain, and improve the Service, provide support, and as otherwise permitted under our Privacy Policy or these Terms.

Customer is solely responsible for the accuracy, legality, and rights to submit any Customer Data, including for having any consents needed to submit receipts or other records that may contain personal data about third parties (for example, a merchant's staff details on a receipt).

6. Acceptable Use

Customer and its Authorized Users will not, and will not permit anyone else to:

• submit fraudulent, forged, or intentionally altered receipts, or otherwise attempt to manipulate eTIMS validation or fraud-detection results;
• use the Service to violate any applicable law, including Kenyan tax and data protection law;
• attempt to reverse engineer, decompile, or access the Service's underlying source code, except to the extent applicable law prohibits this restriction;
• probe, scan, or bypass rate limits or other technical restrictions on the Service (including export request limits) or attempt to gain unauthorized access to another organization's Account or data;
• resell, sublicense, or provide the Service to third parties outside Customer's own organization, except as expressly agreed in writing; or
• upload malicious code or content that infringes a third party's intellectual property or other rights.

We may suspend access for a breach of this section, particularly where needed to protect the Service, other customers, or KRA's systems accessed via GavaConnect, and will give notice where reasonably practicable.

7. Intellectual Property

We and our licensors retain all right, title, and interest in and to the Service, including its software, design, and the Rizzit name and mascot, excluding Customer Data. Nothing in these Terms transfers any of our intellectual property to Customer, except the limited right to use the Service as set out here. Customer retains all rights in Customer Data.

8. Confidentiality

Each party may receive non-public information about the other ("Confidential Information"). Each party will use the other's Confidential Information only to perform its obligations under these Terms, and will protect it with the same degree of care it uses for its own confidential information of similar nature, and no less than reasonable care. This section does not apply to information that is public, independently developed, rightfully received from a third party, or required to be disclosed by law (in which case the disclosing party will give notice where legally permitted).

9. Term, Suspension, and Termination

These Terms apply for as long as Customer has an active Account or Subscription Plan. Either party may terminate for the other party's material breach that remains uncured 30 days after written notice. We may suspend or terminate an Account immediately for conduct described in Section 6 (Acceptable Use), non-payment under Section 4, or where required to comply with law or a GavaConnect/KRA integration requirement.

On termination, Customer's right to access the Service ends. We will make Customer Data available for export for a reasonable period (at least 30 days, unless prohibited by law or a security concern requires earlier deletion) after termination, after which we may delete it in accordance with our Privacy Policy and standard data retention schedule.

10. Service Availability and Support

We aim to keep the Service reliably available but do not guarantee uninterrupted or error-free operation. We may perform planned maintenance, and will try to schedule it to minimize disruption. Specific uptime commitments or support response times, if any, are set out only in an Enterprise order form or a separate service level agreement.

11. Warranties and Disclaimers

Except as expressly stated in these Terms, the Service is provided "as is" and "as available." To the maximum extent permitted by Kenyan law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that eTIMS validation results, fraud flags, or AI-extracted data will be complete, accurate, or error-free, or that the Service will meet Customer's specific tax or regulatory outcomes. Nothing in this section limits any warranty that cannot be excluded under applicable Kenyan consumer or contract law.

12. Limitation of Liability

To the maximum extent permitted by law:

• neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising from or relating to these Terms or the Service, even if advised of the possibility of such damages; and
• each party's total aggregate liability arising from or relating to these Terms will not exceed the fees Customer paid to us in the 12 months immediately preceding the event giving rise to the claim.

These limits do not apply to: (a) a party's indemnification obligations; (b) a party's breach of Section 8 (Confidentiality); (c) Customer's payment obligations under Section 4; or (d) liability that cannot be limited under Kenyan law, including for death, personal injury, fraud, or willful misconduct.

13. Indemnification

Customer will indemnify and hold us harmless from third-party claims arising from Customer Data, Customer's breach of Section 6 (Acceptable Use), or Customer's violation of applicable law. We will indemnify and hold Customer harmless from third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes that third party's intellectual property rights. Each indemnifying party's obligation is conditioned on prompt notice, control of the defense, and reasonable cooperation from the indemnified party.

14. Changes to the Service or these Terms

We may update the Service and these Terms from time to time. For material changes to these Terms, we will provide at least 14 days' notice (by email or in-Service notice) before the change takes effect. Continued use of the Service after a change takes effect constitutes acceptance of the updated Terms; if Customer does not agree, it should stop using the Service and may terminate under Section 9.

15. Force Majeure

Neither party is liable for a failure or delay in performance (other than payment obligations) caused by events beyond its reasonable control, including outages of GavaConnect, KRA's eTIMS systems, our sub-processors' infrastructure, natural disasters, or government action.

16. Governing Law and Dispute Resolution

These Terms are governed by the laws of Kenya, without regard to conflict of law principles. The parties will first attempt in good faith to resolve any dispute through good-faith negotiation between senior representatives. If unresolved within 30 days, either party may bring the dispute before the courts of Kenya, which have exclusive jurisdiction, seated in Nairobi.

17. General Provisions

• Assignment. Neither party may assign these Terms without the other's written consent, except to a successor in a merger, acquisition, or sale of substantially all assets.
• Severability. If any provision of these Terms is found unenforceable, the remaining provisions remain in full effect.
• No waiver. A party's failure to enforce a provision is not a waiver of its right to do so later.
• Entire agreement. These Terms, together with our Privacy Policy and any order form or addendum signed by both parties, are the entire agreement between the parties regarding the Service, and supersede prior agreements on the same subject.
• Notices. We may give notice by email to the address on Customer's Account, or by posting in the Service. Customer may give notice to us at the address in Section 18.

18. Contact

Questions about these Terms can be sent to [email protected].