Privacy Policy

1. Information we collect

We collect only what the Service needs to work:

• Account information: your name, email address, mobile number and password. Passwords are stored only as a one-way hash; we never see or store the password itself. You may also add a profile photo.
• Shop information: the shop name, address, email, logo, business type and settings, and the accounts of employees you add to your shop together with the permissions you give them.
• Business records you enter: products, prices, stock, batches and expiry dates, sales and invoices, purchases, suppliers, expenses, rewards and reports.
• Your customers’ information: names, phone numbers, email addresses, addresses, photos, and the due (baki) and payment history you record for them.
• Subscription payments: the package you choose and the payment details you submit, such as the bKash or Nagad sender number and transaction ID. If you pay through a payment gateway, the gateway handles your card or wallet details; we receive only the result of the payment.
• Sign-in and device information: the time and IP address of your last sign-in, and, if you enable notifications in the mobile app, a push notification token and the device name.

2. Device permissions in the mobile app

The mobile app asks for these permissions only when you use the feature that needs them:

• Camera: to scan barcodes and to take product, customer or receipt photos. Barcode scanning happens on your phone. A photo leaves your phone only when you choose to save it.
• Photos: to pick an existing image as a product, customer or shop photo.
• Biometric unlock: to unlock the app with your fingerprint or face. This is handled entirely by your phone’s operating system; we never receive your biometric data.
• Network: to sync your data. The app keeps a copy of your shop’s data on your phone so you can keep selling offline, and sends it to our servers when you are back online.

3. How we use information

We use the information we collect to:

• provide the Service: run your billing, stock, ledger and reports, and sync them between your phone and the web;
• create and secure your account, verify your email, reset your password and detect suspicious sign-ins;
• process and verify subscription payments and manage your package;
• send service messages, such as payment confirmations, expiry reminders and important notices;
• answer your support requests and fix problems you report;
• comply with the law and enforce our Terms and Conditions.

We do not sell your information or your customers’ information, and we do not use it for advertising.

4. Your customers’ data

The customer records in your shop belong to your shop. You decide what to record about your customers and are responsible for having their permission to do so. We store and process those records only on your behalf and only to provide the Service to you.

If one of your customers asks us about their data, we will refer them to you.

5. Who we share information with

We share information only in these cases:

• Inside your shop: the shop owner and employees can see shop data according to the permissions the owner gives them.
• Service providers: companies that host our servers, store our files, deliver emails or notifications, or process payments, only to the extent they need it to provide those services to us.
• Legal reasons: when required by law, court order or a government authority of Bangladesh, or to protect the rights, safety and property of our users or of Point Khata.
• Business transfer: if Point Khata is merged, acquired or sold, information may be transferred as part of that transaction, under this policy.

6. Cookies and local storage

We use cookies to keep you signed in, and your browser’s local storage to remember things like the shop you last selected. These are needed for the Service to work.

We do not use third-party advertising cookies or trackers.

7. Uploaded images

Product images, logos, photos and receipts you upload are stored under a long, random file name so that printed receipts and product pictures can be displayed without signing in. Anyone who has the exact link to an image can open it, so do not upload images containing information you would not want shared.

8. How long we keep information

We keep your account and shop data for as long as your account is active. If you ask us to delete your account or shop, we delete or anonymise its data within 30 days, except records we must keep longer by law (for example payment records) or to resolve a dispute, which are kept only as long as needed.

Copies in backups are overwritten in the normal backup cycle.

9. Security

We protect your data with encrypted connections (HTTPS), hashed passwords, per-shop separation of data and role-based permissions. No system is completely secure, so please use a strong password, do not share it, and remove employees’ access when they leave your shop.

10. Your choices and rights

You can:

• see and update your account and shop information in the app;
• export your reports;
• turn off push notifications in your phone’s settings;
• ask for a copy of your data, correction of it, or deletion of your account and shop by emailing [email protected] from the email address on your account.

11. Children

The Service is meant for businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us their information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date above, and for important changes we will notify you in the app or by email. Continuing to use the Service after a change means you accept the updated policy.

13. Contact us

For any question about this policy or your data, email [email protected].