- Sanya Business — business OS at
sanya.tz - Netpoa — hosting & domains at
netpoa.com/sanya.tz/hosting - SanyaSMS — bulk-SMS gateway
- Kanisa MS — church management at
kanisa.or.tz
Terms of Service (Master)
The master contract between you and Netpoa Limited (trading as Sanya Group). Covers cross-cutting clauses — payment, IP, liability, governing law. Each service has its own Schedule below.
Read master terms → 📚Service Schedules
Per-service operational rules that attach to the Master Terms. Hosting (A), Domains (B), Cloud (C) — each Schedule covers refund window, suspension clock, and service-specific obligations for that service.
Browse schedules → 🔒Privacy Policy
What personal data we collect, why we collect it, who we share it with, and how long we keep it. Aligned to Tanzania's Personal Data Protection Act 2022.
Read privacy → 🇹🇿Data Protection (PDPA)
Our compliance with Tanzania's PDPA Act 2022 — your rights as a data subject, our DPO contact, how to file complaints.
Read data protection → ⚖️Acceptable Use Policy
What you can and can't do with Sanya. Spam, illegal content, security probes, mass-SMS abuse — clearly disallowed, with consequences.
Read AUP → 💸Refund & Cancellation
How subscriptions cancel, when refunds apply (yes there are situations where they do), and what happens to your data after you leave.
Read refund policy → 🍪Cookie Policy
The handful of cookies Sanya sets to make sign-in work. No advertising trackers, no third-party analytics on customer pages.
Read cookie policy → 🛡️Security at a Glance
How Sanya protects your data — encryption, tenant isolation, 2FA, audit logs, breach response. Honest about what we have today and what's still on the roadmap.
Read security overview → 📝Data Processing Agreement
A signable DPA template under TZ PDPA Act 2022, ready for B2B customers whose auditors or regulators require formal data-processing documentation.
View DPA template →How these policies fit together
When you sign up for any of our services, you agree to the Master Terms of Service, the Service Schedule for the specific product you're buying (hosting, domains, cloud, etc.), the Acceptable Use Policy, and acknowledge the Privacy Policy. The other documents apply automatically — they describe how we already operate, not extra obligations on you.
The Master + Schedule structure means cross-cutting rules (governing law, liability, IP, dispute resolution) live in one place and apply to every service. Service-specific rules (refund window, suspension clock, fair-use limits) live in the Schedule for that service, so you don't have to read VPS rules to understand hosting and vice versa.
If you handle other people's personal data inside Sanya (customer records, employee details, vendor information), you're a data controller under Tanzania's PDPA and Netpoa Limited (Sanya Group) is your data processor. The Data Protection page explains what that means for both of us.
If anything in these policies changes, we'll email every active customer at least 14 days before the new version takes effect. The "Effective" date at the top of each page is your source of truth.
- You own your data. We're stewards, not buyers.
- Pay your subscription on time, don't break the law, and we'll keep your workspace running.
- If we ever change our rules in a way that affects you, we'll tell you first.
Older versions
We're a young company — there are no archived versions yet. From version 2 onwards we'll publish a changelog with the date each clause was modified, so you always know what changed and when.
Filing a complaint
If you believe Sanya has violated any of these policies or Tanzania's data-protection law, please:
- Email support@sanya.tz with the details — we'll respond within 5 business days.
- If you're not satisfied, escalate to our Data Protection Officer at dpo@sanya.tz.
- For PDPA-specific concerns, you may also contact the Personal Data Protection Commission (PDPC) of Tanzania.