Privacy Policy

1. Introduction

Welcome to CDAS (Central Deduction Administration System), a mobile application developed and operated by NYBSYS. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the CDAS mobile application ("App").

By downloading, installing, or using this App, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.

2. About the Application

CDAS is a salary deduction administration platform that connects four operational parties:

• NYBSYS Administrator – Manages the overall system and provides support to all parties.
• Employers – Manage employee records and related information within the CDAS web system.
• Agencies – Provide deduction schemes or policies to employees through the CDAS platform.
• Employees (App Users) – Submit deduction requests, track application progress, and view deduction history through this mobile application.

This mobile App is designed exclusively for Employees who have been registered in the CDAS system by their Employer.

3. How Employees Access the App

The CDAS mobile app does not have a self-registration or sign-up option. Access is fully managed through the CDAS system by the Employer:

1. The Employer adds or updates the employee's valid email address in the CDAS web system.
2. The CDAS system automatically sends a system-generated email to that address containing login credentials and an access link.
3. The employee uses those credentials to log in securely to the App.

4. Information We Collect Through the App

Since there is no registration process in the App, the information collected through the App is limited to the following:

4.1 Authentication & Session Data

• Email address and password used to authenticate your identity.
• Login session tokens and timestamps.

4.2 Deduction Request Activity Data

• Deduction requests submitted through the App.
• Request application status and progress updates.
• Deduction history.

4.3 Device & Technical Information

• Device type and operating system version.
• App version in use.
• Crash logs and technical error reports (used solely for improving App stability).

5. Information Collected by Your Employer

Your personal and employment details are entered into the CDAS system by your Employer through the CDAS web platform — not through this App. NYBSYS acts as a data processor for this information on behalf of your Employer and uses it solely to:

• Link your account to your deduction records.
• Facilitate monthly salary deductions as agreed between your Employer and the registered Agency.
• Distribute collected amounts to the respective Agency and NYBSYS as per agreed terms.

6. How We Use Your Information

Information available in the CDAS system is used for the following purposes:

• Authentication – To verify your identity and allow secure access to the App.
• Request Processing – To manage deduction requests submitted through the App.
• Status Tracking – To display your current request status, progress, and history within the App.
• Deduction Management – To coordinate monthly salary deductions through your Employer and distribute amounts accordingly.
• Notifications – To send updates on request status, approvals, and deduction information.
• Customer Support – To assist you with account or App-related issues.
• App Improvement – To analyze technical data and improve App performance and stability.
• Legal & Compliance – To comply with applicable laws and regulations.

7. How We Share Your Information

We do not sell your information. Your data may be accessed by the following parties strictly for operational purposes:

8. Data Storage and Security

• All data is stored on secure servers managed by NYBSYS.
• We apply industry-standard security practices including encrypted communications (SSL/TLS), secure login mechanisms, and restricted access controls.
• Only authorized personnel can access user data, on a strict need-to-know basis.
• We regularly review our security practices to guard against unauthorized access or data loss.

9. Data Retention

Data is retained for as long as:

• Your account remains active in the CDAS system, or
• It is required to fulfill the operational and legal purposes described in this policy.

Upon account deactivation or removal by the Employer, personal data will be deleted or anonymized within 90 days, unless a longer retention period is required by applicable law.

10. Your Rights

You have the following rights regarding your data:

• Access – Request information about what data is held about you.
• Correction – Request correction of inaccurate data (coordinate with your Employer or NYBSYS support).
• Deletion – Request deletion of your data, subject to legal and contractual retention requirements.

To exercise any of these rights, please contact us using the details in Section 13.

11. Children's Privacy

The CDAS App is intended for use by employed adults only. We do not knowingly collect information from individuals under the age of 18. If we become aware that a minor has been given access, we will immediately revoke access and remove associated data.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When changes are made:

• The "Last Updated" date will be revised accordingly.
• Significant changes will be communicated via the App or email notification.

Your continued use of the App after updates constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please reach out to us: