Welcome to TideNet.online, an API-based digital service platform operated by Tide Net. We are committed to protecting the privacy and security of the business data routed through our technical infrastructure.
This Privacy Policy outlines how we handle data in our capacity as a Non-Custodial Technical Service Provider (TSP).
1. Our Role: The Technical Bridge
TideNet operates strictly as a technical conduit. We provide the infrastructure (APIs and middleware) to facilitate data exchange between your enterprise systems and third-party service providers.
- Non-Custodial Nature: TideNet does not take possession of, manage, or store your financial assets, private keys, or consumer deposits.
- Data Processing vs. Data Ownership: In the context of the PDPA 2026, TideNet acts primarily as a Data Processor. You (our Client) remain the Data Controller for all end-user information routed through our system.
2. Information We Collect
To provide our technical services, we collect limited categories of data:
- Administrative Data: Names, business emails, and contact details of your technical and billing personnel.
- Metadata & Logs: Technical identifiers such as IP addresses, API keys, request timestamps, and response codes. These are used solely for security monitoring and system optimization.
- Integration Data: Technical payloads required to execute API handshakes between your system and integrated third parties (e.g., logistics tracking numbers or reporting IDs).
3. Purpose of Processing
We process data only for the following lawful purposes:
- To facilitate the technical integration between your business and third-party APIs.
- To monitor system health and maintain a 99.9% uptime guarantee.
- To ensure compliance with Pakistan’s Prevention of Electronic Crimes Act (PECA) 2016 by preventing unauthorized access or digital fraud.
4. Data Sovereignty & Localization
In accordance with Pakistan’s data localization frameworks, TideNet ensures that all critical personal data related to Pakistani citizens is processed and stored on local infrastructure within Pakistan, unless explicit consent or regulatory exemptions apply for cross-border transmission.
5. Security Architecture
We implement “Security by Design” to protect your business data:
- Encryption: All data in transit is protected using AES-256 encryption and TLS 1.3 protocols.
- Zero-Trust Access: We employ strict identity and access management (IAM) to ensure only authorized system processes can interact with your API streams.
- Non-Retention: We do not store sensitive transaction payloads longer than is technically necessary to confirm a successful delivery to the destination endpoint.
6. Third-Party Disclosures
TideNet only transmits data to the specific service providers you have explicitly connected via our API dashboard. We never sell, trade, or monetize your business data or metadata to third-party marketers.
7. Your Rights (PDPA 2026 Compliance)
As a business partner, you have the following rights regarding the administrative data we hold:
- Right to Access: Request a copy of the administrative data we hold about your business.
- Right to Correction: Update any inaccurate technical or contact information.
- Right to Deletion: Request the removal of your business profile upon termination of service, subject to legal record-keeping requirements.