Privacy Policy

Who we are

ZidPay is restaurant-management software operated by Fortéch Solutions, a company based in Fès, Morocco, and available at the domain zpay.ma.

For the personal data processed through the service, Fortéch Solutions acts as the data controller. For any question about this policy or your data, you can write to us at contactus@zpay.ma.

Data we collect

We collect only what the service needs to work:

• Account details: name, email address, phone number and business name.
• Restaurant operational data you enter: menu, orders, tables, staff records, inventory, reservations and sales.
• Payment data, handled by third-party payment processors — we never store full card numbers.
• Minimal technical logs, kept for the security and reliability of the service.

How we use it

We use your data to:

• Provide and operate the service day to day.
• Handle billing and subscriptions.
• Provide support and answer your requests.
• Protect the security of your account and the platform.
• Improve the product and fix what can be fixed.

Legal basis

We process your data on the basis of performance of our contract with you, our legitimate interest in operating and securing the service, and your consent where the law requires it.

Processing is carried out in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, under the oversight of the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

Where your data lives

ZidPay is offline-first by design: your data lives first on your own devices and on your Hub, inside your venue.

Cloud sync is hosted on Amazon Web Services, in the Europe (Paris) region. This keeps your data under your control day to day, even when the internet drops.

Sharing

We never sell your data. We share it only with the providers the service depends on:

• Payment processors, to handle card transactions.
• Cloud hosting (Amazon Web Services), for sync and backup.
• Communication tools (email, WhatsApp), to reach and support you.

Each of these providers only accesses the data strictly needed for its role.

Retention

We keep your data while your account is active, and for the periods required by law (including accounting and tax records).

You can request deletion of your data at any time; we act on it subject to our legal retention obligations.

Your rights

You have the right to access, rectify, object to, delete and port your data. To exercise these rights, write to us at contactus@zpay.ma.

You also have the right to lodge a complaint with the CNDP if you believe your rights are not being respected.

Security

We protect your data with encryption in transit, strict access controls, and the principle of least privilege — everyone only accesses what they actually need.

No system is perfectly unbreakable, but we treat the security of your data as a responsibility, not an option.

Changes and contact

We may update this policy to reflect changes to the service or to the law. The last-updated date is shown at the top of this page.

For any question about this policy or your personal data, write to us at contactus@zpay.ma.