Privacy Policy

We collect only the information necessary to provide our services:

• Account Information: Name, email address, phone number, and business name provided during registration.
• Business Data: Products, customers, invoices, sales records, and inventory data you create within the app.
• Payment Information: Transaction IDs for subscription payments via bKash or Nagad. We do not store your mobile banking PIN or credentials.
• Device Information: Device model, operating system version, and app version for troubleshooting and compatibility purposes.
• Usage Data: Basic app usage analytics such as feature usage frequency and crash reports to improve the app experience.

Your information is used to:

• Provide and maintain the POS, invoicing, and inventory management services.
• Process subscription payments and manage your account status.
• Generate invoices, track dues, and produce business reports.
• Send important notifications about your subscription, payments, and service updates.
• Improve app performance, fix bugs, and develop new features.
• Provide customer support when you contact us.

• Your business data is stored securely on our servers with encryption in transit (HTTPS/TLS) and at rest.
• The mobile app stores data locally on your device using encrypted local storage (Hive) for offline functionality.
• We use industry-standard security measures including JWT authentication, secure API endpoints, and regular security audits.
• Your data is isolated per vendor account — no other vendor can access your data.

We do not sell, rent, or trade your personal or business data to third parties. We may share data only in the following cases:

• Courier Services: When you use the courier integration feature, order details (recipient name, address, phone) are shared with the selected courier provider to facilitate delivery.
• Payment Processors: Subscription payment verification with bKash/Nagad as required to confirm transactions.
• Legal Requirements: If required by law, regulation, or legal process.

Our web platform uses minimal cookies and tracking technologies:

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
• Preference Cookies: Store your settings such as language preference, theme (light/dark mode), and dashboard layout.
• Analytics: We collect basic usage analytics to understand feature usage and improve the platform. This data is aggregated and does not include personally identifiable information.

We do not use third-party advertising trackers, sell tracking data, or engage in cross-site tracking. Our mobile applications do not include any third-party analytics SDKs.

The POSSTAR mobile app requests the following device permissions:

• Camera: For barcode/QR code scanning to add products and process transactions.
• Storage: To save and share invoices as PDF files, and to cache data for offline use.
• Internet: To sync data with the server, process payments, and receive updates.
• Phone: To enable direct calling to customers for due collection.

• Your account and business data are retained as long as your account is active.
• If you delete your account, your data will be permanently removed from our servers within 30 days.
• Locally cached data on your device can be cleared by uninstalling the app or clearing app data from device settings.

You have the right to:

• Access and download your business data at any time through the app.
• Update or correct your account information.
• Request deletion of your account and associated data.
• Opt out of non-essential notifications.
• Export your data (invoices, customer lists, product lists) as CSV or PDF.

Our services are intended for business use and are not directed at children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or via email. The “Last updated” date at the top of this page indicates when the policy was last revised.

If you have any questions or concerns about this Privacy Policy or your data, please contact us: