Privacy Policy

Who is responsible

CyberSafeHills & Partners Ltd, Republic of Rwanda, operates Madeizzy and decides how your personal data is used. Contact us at info@cybersafehills.com or +250 781 064 017 for any privacy question.

What we collect

We keep audit logs of important actions, such as refunds and administrator changes, to protect users and the platform.

Payments

Card and mobile-money details are entered on DPO Pay's page and are handled by DPO Pay. Madeizzy does not receive or store your full card number or mobile-money credentials. We receive the payment status, amount, currency and reference that DPO Pay reports, and we keep them to record your order, refunds and creator earnings. DPO Pay is responsible for the data it collects under its own privacy notice.

How we use data and why

• To provide the service you asked for: accounts, checkout, delivery and support.
• To meet legal, tax, accounting and payment-provider obligations.
• To keep Madeizzy secure and to detect fraud and abuse.
• To understand and improve the service using first-party, aggregate analytics.
• To send service messages such as sign-in links, receipts and replies to your requests.

Where the law requires your consent, we ask for it and you can withdraw it.

Who we share data with

We share data only where needed: with the payment provider (DPO Pay) to take and refund payments; with infrastructure and service providers that host the platform, store files and send email, under obligations to protect the data; with the creator of a product you bought, limited to what is needed to support your purchase; with professional advisers; and with authorities where the law requires. We do not sell personal data.

Some creators' tools use third-party AI services to process content that a creator supplies; buyer personal data is not sent to them for that purpose.

International transfers

Our providers may process data outside Rwanda. Where they do, we require appropriate safeguards as Rwandan data-protection law expects.

How long we keep data

Raw analytics events are kept for 13 months, after which only aggregated counts remain. We keep orders, payment records, entitlements, audit logs and support records for as long as needed to meet legal, tax and accounting obligations and to resolve disputes. When they are no longer needed we delete or anonymise them.

Security

We use access controls, encrypted connections, short-lived signed download links, restricted staff access and audit logging. No system is perfectly secure, so we cannot guarantee absolute security; please tell us at once if you suspect a problem.

Your rights

Under Rwandan data-protection law you may have the right to know what data we hold, to have it corrected, to object to or restrict some uses, to have it deleted, and to complain to the supervisory authority. Contact us to use these rights; we may need to confirm your identity first.

You can ask us to close your account. Some records, such as orders and payments, must be kept for legal reasons after closure, and we tell you what we keep and why.

Cookies

See the Cookie Policy for the cookies and browser storage we use.

Children

Madeizzy is not designed for children. If you are under the age of legal capacity to contract, use it only with a parent or guardian's involvement. If we learn we hold a child's data without proper authority, we will delete it.

Automated decisions

We do not make decisions with legal or similarly significant effect about you solely by automated means. Automated checks, such as scanning files or spotting suspicious payments, lead to a human review before serious action.

Changes

We publish each version with its effective date and tell you about material changes where practical.