Privacy Policy
Last updated: October 5, 2026
Data We Collect
Transaction telemetry, product catalog metadata, and operator audit logs are stored locally on your registers. Optional cloud relays receive only hashed, aggregated reporting — never raw customer records.
Local Device Storage
Customer PII, loyalty balances, and receipt history live on your own hardware inside the embedded SQLite vault. Uninstalling a node destroys its local store completely.
Encryption Protocols
Data at rest is protected with AES-256. All client-server and gateway communication requires TLS 1.3. FBR fiscal packets are RSA-2048 signed with SHA-256 integrity digests.
Regulatory Compliance
We design around GDPR data-minimization principles, Pakistan’s Personal Data Protection principles, and FBR record-retention rules. Customers may request export or erasure of operator-account data at any time.
Third-Party Processors
We share the minimum required payload with payment gateways (Raast, JazzCash, EasyPaisa) and the Federal Board of Revenue fiscal API. No data is sold or rented to any party.