Privacy policy.

How we handle information in our company payment portal.

Who is responsible

SOCIETE CYDISTA, Tunisia, operates this portal. Address: 4190 Tunisie. For privacy requests contact business@cydista.com.

Information processed

We store staff account email addresses, hashed passwords, account lockout information, payment-link titles and descriptions, invoice references, amounts, currencies, expiry dates, and simulated payment results with timestamps. Information included by staff in an invoice reference or description may identify a customer. Please include only information needed to explain the payment.

The current checkout does not request customer names, email addresses, card numbers, or bank details. Hosting systems may process IP addresses and technical request information for security and troubleshooting. Payment links and receipts are confidential bearer links: anyone with a valid link can access its details.

Why we use it

We use this information to administer company invoice requests, display payment details to the intended customer, record results, protect staff access, and resolve support questions. Any future live processing will require a review of applicable Tunisian data-protection requirements and provider arrangements.

Cookies and local storage

Essential cookies maintain staff sign-in, remember the selected language and protect forms against cross-site request forgery. The sign-in session lasts up to four hours. The language cookie is kept for one year. This application includes no advertising cookies or analytics trackers. The interactive staff interface uses a server connection to process actions.

Access and hosting

Authorized CYDISTA personnel can access payment records. Company-managed Windows Server and SQL Server; hosting location to be confirmed. No payment provider receives data in the current simulation. Provider disclosures will be updated before any integration goes live.

Retention

Retention periods must be confirmed by SOCIETE CYDISTA before live operation.

Your requests

Contact the privacy address to request access to or correction of personal information, or to raise an objection or request deletion, subject to applicable requirements for preserving invoice and business records. Provide an invoice reference where possible; never include card details. Requests will be reviewed under applicable Tunisian law, including Organic Law No. 2004-63.

Security

Access to the workspace requires authentication. Passwords are hashed, payment-link identifiers use cryptographically random tokens, and payment changes are checked on the server. Production hosting must use HTTPS and restricted database access. No system can guarantee absolute security.

Updates

This notice must be updated when actual payment services, hosting arrangements, or data-handling practices change.