CySo Solutions Ltd
Website privacy notice
Effective 10 October 2026. This notice covers this website, cysosolutions.com, only. It is written in plain language on purpose.
Using one of our products? Each product has its own privacy notice and terms, which explain what that product does with your data:
- CySo Invoicing: privacy notice · terms
- CySo Flow: privacy notice · terms · data-processing agreement
- CySo Mail Cloud: privacy notice · terms · data-processing agreement
- CySo Bank Connector: privacy notice · terms · data-processing agreement
- CySo Academy: in early access; its privacy notice and terms are on academy.cysosolutions.com and are still being finalised.
1. Who we are
CySo Solutions Ltd is the controller of the personal data described here. We are a software company registered in Cyprus.
- Company registration number: HE487195
- Address: Agia Fyla, Limassol, Cyprus
- Privacy contact: [email protected]
2. The contact form
The only personal data this website asks you for is what you type into the contact form:
- Name, so we know who we are replying to
- Email address, so we can reply
- Company, only if you choose to give it
- Your message
When you press Send, your details go over an encrypted connection to a small program run by our hosting provider, Cloudflare. It passes them to our email-delivery provider, Resend, which sends them as an email from [email protected] to our company mailbox, [email protected]. That mailbox is on a mail server we run ourselves, on servers rented from OVH SAS, a French hosting company.
Why, and on what legal basis: to answer your enquiry and, if you ask, to discuss our products or working together. The lawful basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering people who contact us (Art. 6(1)(f)).
How long: we review our enquiries at least once a year and delete those that led nowhere. If it leads to a conversation or a business relationship, we keep the correspondence for as long as that relationship needs, and for any period the law requires us to keep records. Resend keeps a delivery log of the messages it sends for a limited period under its own retention policy.
3. Cookies and security
We use no analytics, no advertising tags and no marketing pixels, and we do not track you across websites.
To protect the site from bots and attacks, Cloudflare runs a small security check in your browser. It may set one cookie, cf_clearance, which records that your browser passed the check, so you are not challenged again. It lasts up to one year and applies to cysosolutions.com and its subdomains. This cookie is strictly necessary for security, so it does not need your consent, and it is not used to identify you or to follow you around the web.
Cloudflare also asks your browser to report network errors (for example a page that failed to load) so the service can be kept reliable. These reports contain technical details such as the address that failed and your IP address.
The site uses its own copy of its fonts. Your browser does not contact Google or any other font service.
4. Server logs and downloads
Like almost every website, our hosting provider automatically processes technical information such as your IP address, browser type and the pages you request, to deliver the site and to keep it secure. The same applies when you download the CySo Invoicing Android app, which is served from updates.cysosolutions.com through Cloudflare. Cloudflare keeps these technical logs for a short time under its own policy; we do not export or keep them, and we do not use them to profile visitors. Lawful basis: our legitimate interest in running a secure, working website (Art. 6(1)(f)).
5. Who processes data for us
| Provider | What it does | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, runs the contact-form program and the security check, serves the Android app download | Global network; US company |
| Resend (Plus Five Five, Inc.) | Sends the contact-form email to our mailbox and keeps a delivery log | Sends from its EU (Ireland) region; US company |
| OVH SAS | Rents us the servers our own mail server runs on | EU; French company |
We do not sell your personal data, and we do not share it for advertising.
6. Transfers outside the EU
Cloudflare and Resend are US companies, and Cloudflare's network is global, so your data may be processed outside the European Economic Area. Where that happens, it is protected by the safeguards the GDPR recognises, in particular the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. Ask us at the address above for details.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or give it to you in a portable format. You can object to processing based on our legitimate interests. Email [email protected]; we reply within one month, free of charge, and may ask you to confirm who you are first.
You can also complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy), or to the authority in your own EU country.
8. How we protect it
The site is served only over HTTPS. The mailbox that receives enquiries is protected by access controls, and we collect and keep as little as we can. No system is perfectly secure, but we take protecting your data seriously.
9. Children
This website is for businesses and professionals. We do not knowingly collect data from anyone under 16. If you think a child has sent us personal data, tell us and we will delete it.
10. Changes
If we change how this website handles personal data, for example by adding a provider, we will update this notice and its effective date.