Privacy Policy

1. Who we are

This Privacy Policy explains how DevPOS, provided by Sardar Toheed, Multan, Pakistan, collects, uses and protects information when you use our Service at devpos.pro.

2. What we collect

Account and business information: business name, web address, business type, owner name, phone number, email address. Passwords are stored hashed — we never see your actual password.

Your business data: everything you enter in your workspace — products, sales, purchases, customers, suppliers, ledgers, expenses, reports. We process this only to operate your workspace; we do not analyse or mine it for other purposes.

Payment proofs: for manual payments, the receipt screenshot and transaction ID (TID) you submit so we can verify your JazzCash, Easypaisa or bank transfer.

Support messages: emails and messages you send us, kept so we can help you properly.

Technical data: login sessions, device and browser information, and IP address — used only for security, fraud prevention and reliability.

3. How we use it

We use your information to: provide and operate the Service; verify manual payments and manage subscriptions; send trial-ending, billing and renewal reminders; provide support; protect the Service from abuse; and meet legal obligations. We do not use your data for unrelated advertising.

4. Tenant isolation

Every workspace is stored under its own tenant_id. All database queries are tenant-scoped, so no tenant can ever see another tenant's data. Your staff only see your workspace — never other businesses.

5. Storage and security

Passwords are hashed with bcrypt; billing and configuration secrets are encrypted at rest; access to production systems is limited and logged. We take regular backups.

No method of transmission or storage is 100% secure, but we apply reasonable industry measures appropriate for a business SaaS.

6. What we NEVER do

We never sell your data. We never share it with advertisers. We never access your business data except with your permission to provide support, or where required by law. We never use your data to train third-party models or for anyone else's marketing.

7. Cookies and sessions

We use essential cookies/sessions only: to keep you logged in and to remember preferences such as language and theme. We do not use third-party advertising trackers.

8. Data retention and deletion

We keep your information while your account is active. After closure you have a 60-day export window; you may then request deletion, and we delete your workspace data — backups expire on normal rotation.

Payment proofs may be retained as long as financial-record laws require.

9. Your rights

You may request access, correction, export or deletion of your personal data at any time — email sardartoheed50@gmail.com or call +92 300 0936354. We respond within 7 business days.

10. Manual payments

JazzCash, Easypaisa and bank transfers are processed by your own provider. We see only the proof you submit (receipt screenshot and TID) — never your bank credentials, account PINs or card numbers.

11. Changes to this policy

Material changes to this policy are announced by email and in your workspace before they take effect. Continued use of the Service means you accept the updated policy.