Privacy Policy

1. Data ownership & tenant isolation

Your business data — customer profiles, sales invoices, inventory records and staff accounts — belongs to you. Every operational record is scoped to your business with a tenant_id, and that scoping is enforced on every request rather than left to individual queries to remember.

• POS transactions, inventory ledger entries and customer records are all tenant-scoped.
• No business can read another business's data.
• Platform-administrator access is recorded in an audit trail.

2. Information we collect

We collect what is needed to operate the service you signed up for:

• Business information — business name, owner name, email, phone, address and city.
• Staff credentials — employee names, emails and hashed passwords for dashboard and POS access.
• Transaction data — sales, purchase orders, returns and inventory movements.
• Customer records — the CRM entries your own staff create.
• Marketplace buyer accounts — name, email, phone and delivery address, where someone shops on the marketplace.

We do not sell, rent or share your business data with third parties for marketing.

3. How we use your data

• Operating your POS terminal and processing checkouts.
• Producing your analytics, reports and inventory dashboards.
• Sending transactional email — verification codes, password resets, order and invoice notices.
• Billing and subscription management.
• Listing your products and fulfilling marketplace orders, if you have opted in to the marketplace.
• Investigating fraud, abuse and policy violations.

4. Data security

• Transport — traffic is served over TLS.
• Passwords — salted and hashed; plaintext passwords are never stored.
• Sessions — HttpOnly cookies with SameSite enforcement.
• CSRF — every state-changing request requires a valid token.
• Rate limiting — authentication endpoints are throttled against brute force.
• Append-only ledger — inventory movements are recorded as new entries and never rewritten, so history stays auditable.

No system is perfectly secure. If you believe an account has been accessed without authorisation, contact us immediately and change the password.

5. Third-party services

Some functions rely on outside providers, each governed by their own privacy policy:

• Payment and wallet providers — JazzCash, EasyPaisa and RAAST bank transfer, where enabled for your account.
• Couriers — delivery partners receive the recipient details needed to complete a delivery, and nothing more.
• Email delivery — transactional mail is sent through an email provider.
• Content delivery networks — fonts and front-end libraries are loaded from public CDNs.

6. Data retention & deletion

Data is retained while your subscription is active. After an account is terminated:

• Data is held for 30 days so an account can be recovered if the closure was a mistake.
• After 30 days, tenant-scoped data is purged.
• Financial records may be retained longer where tax or regulatory obligations require it.

Export your data before you close the account. We keep the dashboard readable during the wind-down period precisely so you can.

7. Your rights

• Export your business data at any time from the dashboard.
• Request deletion of your account and its associated data.
• Correct or update your business and personal information.
• Opt out of non-essential communications. Transactional messages about your own orders and account cannot be switched off while the account is active.

8. Contact us

For privacy questions, data access requests or security concerns, email sales@softstore.pk or use the contact page. Security reports are read first.