KRUX · Legal
Terms · Privacy · Data Partnership Agreement
Published   1 May 2026
Document   KRX/LEG/v1.0

Legal — in plain language.

Three short documents covering the relationship between you and KRUXVON Ltd. They are intentionally readable in one sitting. The full Data Partnership Agreement is one page.

§ 01Terms of Service § 02Privacy Notice § 03Data Partnership Agreement

§ 01Terms of Service

Last updated · 1 May 2026

These are the terms between you (the entity, its directors, and its authorized operators) and KRUXVON Ltd, the Kenyan limited company that operates the KRUX network. By creating a KTIN or using any KRUX surface — including the workspace, the public terminal, and the verification page — you accept these terms.

1. What KRUX provides

KRUX provides a permanent trade identity number (the KTIN), a workspace for managing clearances, calculations against the published regulator SLAs, and a public verification record. KRUX does not file applications with regulators on your behalf, does not act as a clearing agent, and does not provide legal or tax advice.

2. What you provide

You provide accurate entity information at registration and accurate shipment information as you record clearances. You are responsible for ensuring that the people you authorize to operate your workspace are authorized to act on the entity's behalf.

3. The KTIN

The KTIN is issued once. It is permanent and is not reissued under another identity. If the underlying entity ceases to exist, the KTIN is retired but its record is preserved on the verification surface for as long as KRUX operates.

4. The score

The KRUX Compliance Score is computed using the published methodology (§ Standard). Scores cannot be purchased, escalated, or fast-tracked. If you believe a score is incorrect, file an appeal under §07 of the methodology.

5. Termination

You may stop using KRUX at any time. We may terminate access to the workspace for material breach of these terms (e.g. submitting fraudulent clearances). The verification record will remain public unless a fraud determination has been made and disclosed.

These terms do not override your obligations under Kenyan law, KRA regulations, or any individual regulator's published procedures. KRUX assists; KRUX does not replace.

6. Liability

KRUX provides the workspace and the calculation engine on an "as is" basis. We work hard to be accurate, but the regulator's procedures are the source of truth. Where our calculation differs from a regulator's published procedure, the regulator's procedure governs.

7. Governing law

These terms are governed by the laws of Kenya. Disputes are resolved by Kenyan courts of competent jurisdiction, or by arbitration in Nairobi under the rules of the Nairobi Centre for International Arbitration if both parties agree.

8. Changes

Material changes to these terms are published with 30 days' notice to every KTIN holder via the workspace and the email of record. The version dated above is the version in effect.

§ 02Privacy Notice

Last updated · 1 May 2026

This notice describes what data KRUX collects about you and the entity you operate, how it is used, and how to exercise your rights under the Kenya Data Protection Act, 2019.

1. What we collect

2. What we publish

On the public KTIN verification page we publish: entity name, KTIN, status, tier, score, issuance date, shipment count, on-time rate, and the regulator + outcome + date of each clearance. We do not publish CIF values, contents, supplier names, port-of-loading, HS codes, or any reference number tied to a single shipment.

3. What we share

We share anonymised aggregates with founding partners (see DPA). We do not sell data. We do not share data with marketers. We respond to lawful requests from Kenyan regulators and courts.

4. Where data lives

Data is stored on infrastructure operated by KRUXVON Ltd within Kenya and within data centers covered by the Kenyan Data Protection Act adequacy framework. We maintain a register of sub-processors and update it at this page.

5. Your rights

You have the right to access, correct, and (subject to the permanence of the KTIN record) request deletion of your data. Write to privacy@kruxvon.com. We respond within 30 days.

6. Retention

The KTIN verification record is preserved indefinitely. Workspace operational data is retained for 7 years from the date of the underlying clearance — to support regulator and tax audit requirements — and then deleted.

7. Children

KRUX is a commercial trade network. It is not intended for, and does not knowingly collect data from, minors.

8. Contact

Data Protection Officer: Haji, Founder · privacy@kruxvon.com · KRUXVON Ltd, Nairobi, Kenya.

§ 03Data Partnership Agreement

DPA v1.0 · For founding partners

The Data Partnership Agreement is the one-page document signed before any founding partner contributes data to the KRUX network. It is written in plain English. The full text appears below; the signed copy is exchanged by post or qualified e-signature.

"Your records belong to you. Data contributed to the network is fully anonymised — no company names, KRA PINs, or reference numbers. Individual businesses cannot be identified from any output."

The agreement, in five points

1. What you contribute. You agree that the metadata of your shipment clearances — regulator, SLA, days-to-clearance, outcome, date — may be included in network aggregates KRUX publishes (e.g. on the Network page).

2. What stays private. Your entity name, KTIN, shipment contents, CIF values, HS codes, supplier names, reference numbers, and any information that could identify a single transaction are not contributed to network aggregates. They remain in your workspace.

3. How anonymisation works. Aggregates are computed across the cohort. KRUX commits to never publish a metric where fewer than three entities would contribute to it. This prevents reverse identification by elimination.

4. Revocation. You may revoke participation at any time by writing to hq@kruxvon.com. Revocation removes your records from future aggregates within 30 days. It does not remove your records from aggregates already published — those have already been anonymised and cannot be retrospectively unwound.

5. No third-party sharing. KRUX will not share raw shipment data with any third party — including buyers, banks, insurers, or government bodies — except in response to a lawful order or as part of an investigation you initiate.

Term and signature

The DPA is signed once. It runs for as long as you remain an active KTIN holder. It is exchanged with a 1-page cover letter from KRUXVON Ltd's Founder. Both parties retain originals.

The DPA is published here for transparency. The legally binding instrument is the signed paper or qualified e-signature copy exchanged between KRUXVON Ltd and the participating entity. Any changes to the DPA require fresh signatures.