Privacy Policy

BizPOS Technologies (“BizPOS”, “we”, “us”, or “our”) operates the BizPOS point-of-sale platform, including our website, admin portal, cashier application, tablet application, and the customer-facing websites we host on behalf of our merchants (together, the “Service”).

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have. It applies to visitors of this website, to businesses that sign up for a BizPOS account, and to the staff members those businesses invite.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect only what we need to run the Service. That falls into four categories:

• Account & signup information— your name, business name, business type, phone number, email address, city, and the password you set. This is collected when you start a free trial or when we create an account for you.
• Business & operational data— the data you enter while running your business: products, categories, recipes, inventory, orders, receipts, expenses, staff records, attendance, payroll, suppliers, and payment records.
• Your customers’ information— where you choose to record it: customer name, phone number, delivery address, order history, loyalty points, and feedback. You provide this data and remain responsible for it; we process it only on your instructions (see Your Data and Your Responsibilities).
• Technical & usage information— IP address, browser and device type, operating system, pages viewed, timestamps, error logs, and diagnostic information. This is collected automatically and used to keep the Service secure and working.

We do not collect or store full card numbers, CVV codes, or bank credentials. Card payments taken in your shop are handled by your own bank or payment terminal; BizPOS records only the amount and the tender type.

We use the information described above to:

• Create and administer your account, and authenticate you and your staff.
• Provide the core features of the Service — taking orders, printing receipts, tracking inventory, generating reports, and syncing your data across devices.
• Process subscription payments, issue invoices, and manage renewals or trial expiry.
• Send you service messages: setup instructions, security alerts, billing notices, maintenance windows, and important changes to the Service.
• Provide customer support and troubleshoot the problems you report to us.
• Monitor performance, prevent fraud and abuse, and keep the platform secure and available.
• Understand aggregate usage patterns so we can improve existing features and plan new ones.
• Comply with applicable law, tax obligations, and lawful requests from authorities.

We do notsell your data, your business data, or your customers’ data to anyone. We do not use your business data to build advertising profiles.

We may send you product updates, tips, and offers by email, SMS, or WhatsApp. You can opt out at any time by using the unsubscribe link, replying “STOP”, or emailing us at info@bizpos.pk. Opting out of marketing does not stop essential service messages such as billing notices and security alerts.

Where you use BizPOS to send campaigns or receipts to your own customers, you are the sender. You are responsible for holding a valid basis to contact those recipients and for honouring their opt-out requests.

We share information only in these limited circumstances:

• Service providers— vetted third parties who help us run the platform, such as cloud hosting and database providers, email and SMS/WhatsApp delivery gateways, payment processors, and error monitoring tools. They may access data only to perform work for us and are bound to keep it confidential.
• Within your organisation— your staff members can see the data their assigned role and permissions allow. Account owners control who is invited and what each person can access.
• Legal requirements— when we are required to disclose information by law, regulation, court order, or a valid request from a government authority.
• Protecting rights and safety— where disclosure is reasonably necessary to investigate fraud, enforce our Terms of Service, or protect the rights, property, or safety of BizPOS, our users, or the public.
• Business transfer— if BizPOS is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

Your data is stored on managed cloud infrastructure. Servers may be located outside Pakistan, which means your information may be transferred to and processed in other countries. We take steps to ensure it remains protected to the standard described in this policy wherever it is held.

Security measures we apply include:

• Encryption in transit using HTTPS/TLS on all of our applications and APIs.
• Encryption at rest for our databases and backups.
• Hashed passwords — we never store your password in readable form and cannot recover it for you.
• Role-based access control, so each staff member sees only what their permissions allow.
• Tenant isolation, so one business’s data is not visible to another.
• Regular automated backups and periodic restore checks.
• Restricted internal access on a need-to-know basis.

No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. Keeping your own login credentials confidential is your responsibility.

The BizPOS cashier and tablet applications are built to keep selling when the internet drops. To do this, they cache a copy of the data needed to operate — your menu, prices, settings, open orders, and any orders taken while offline — on the device itself.

This cached data stays on the device until it is synced to our servers and cleared. Because of that, you should treat every BizPOS terminal as a device holding business data: keep it physically secure, use a device lock, and sign staff out of shared terminals when they finish a shift.

We use a small number of cookies and browser storage keys:

• Essential— to keep you signed in and to secure your session. The Service does not work without these.
• Preferences— to remember choices such as light or dark theme and your selected branch or printer.
• Analytics— to understand aggregate traffic and usage so we can improve the product.

You can block or delete cookies in your browser settings, but doing so will sign you out and may break parts of the Service. We do not use cookies for cross-site advertising.

We keep your data for as long as your account is active and for a reasonable period afterwards so that you can reactivate without losing your history.

• Active accounts — retained for as long as the subscription is running.
• Cancelled or expired accounts — retained for up to 90 days, after which the data is scheduled for deletion.
• Invoices, tax records, and transaction logs — retained for as long as applicable Pakistani law requires, even after account closure.
• Anonymised, aggregated statistics that cannot identify you or your customers may be retained indefinitely.

You can request an export of your data before closing your account. Contact us and we will provide it in a machine-readable format.

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correctinformation that is inaccurate or incomplete — most fields can be edited directly in your account.
• Export your business data in a portable format.
• Delete your account and request erasure of your data, subject to records we must legally retain.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time.

To exercise any of these rights, email info@bizpos.pk from the address on your account. We will respond within 30 days. We may need to verify your identity before acting on a request.

For the business data you enter — including your customers’ details — you are the data controller and BizPOS is the data processor. We process that data only to provide the Service to you and on your instructions.

You are responsible for:

• Having a lawful basis to collect and store your customers’ information.
• Telling your customers how their data is used, and honouring their requests for access or deletion.
• Keeping account credentials secure and removing staff access promptly when someone leaves.
• Setting staff permissions appropriately so people can only see what their job requires.

If one of your customers contacts us directly about their data, we will refer them to you, since you control that record.

The Service may link to or integrate with third-party products — payment gateways, messaging providers, delivery platforms, accounting tools, or websites we link to from our pages. Those services have their own privacy policies and we are not responsible for their practices. We encourage you to read them before you connect an integration or share information.

The Service is a business tool intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes to the Service or to legal requirements. When we do, we will revise the “Last updated” date at the top of this page. If the changes are significant, we will notify you by email or through an in-app notice before they take effect.

Continuing to use the Service after an update means you accept the revised policy.

For any question, request, or complaint about this Privacy Policy or how we handle your data, contact:

BizPOS Technologies
Johar Town, Lahore, Punjab, Pakistan
Email: info@bizpos.pk
Phone: +92 300 123 4567

See also our Terms of Service, which govern your use of the platform.