1. Introduction
Welcome to Pocket POS ("we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mypocketpos.in, use our mobile applications, or use our POS and billing software services.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your email address, password, phone number, business name, store location, and owner details.
- Business Data: Information about your store, products, customers, sales transactions, inventory, and financial records.
- Payment Information: When you make a payment, we collect payment method details processed through secure payment gateways. We do not store credit card data directly.
- Communication: Messages, emails, chat logs, and support requests you send to us.
- Contact Forms: Information submitted through contact forms on our website.
2.2 Information Collected Automatically
- Device Information: Operating system, device model, unique device identifiers, and mobile network information.
- Usage Data: Features accessed, transaction counts, time spent, interactions with our service, and error logs.
- Location Data: Approximate location based on IP address (not precise GPS).
- Cookies and Tracking: We use cookies, web beacons, and similar technologies to track user behavior and preferences.
2.3 Customer Data
As a POS system, you may store customer information (names, phone numbers, purchase history) within your store's data. This data is stored on your behalf and remains under your control. We act as a data processor for this information.
3. How We Use Your Information
- Provide, maintain, and improve our services
- Process transactions and send transaction confirmations
- Send billing statements and payment reminders
- Respond to support requests and inquiries
- Send promotional offers, newsletters, and updates (with your consent)
- Analyze usage patterns to improve user experience
- Prevent fraud and enhance security
- Comply with legal obligations
- Conduct research and analytics
4. Data Storage and Security
We store your data on secure servers hosted by cloud providers (Firebase, AWS) with encryption in transit and at rest. We implement industry-standard security measures including:
- SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Automatic backups and disaster recovery procedures
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Retention
- Active Account Data: Retained as long as you use our service.
- Transaction History: Retained for 7 years to comply with Indian tax and accounting regulations (Income Tax Act, GST Act).
- Account Information: Deleted 90 days after account closure, unless required for legal purposes.
- Support Communications: Retained for 3 years for reference and dispute resolution.
6. Sharing Your Information
We do not sell your personal information. We may share information in the following circumstances:
- Service Providers: Payment processors, email service providers, cloud storage, analytics providers, and support tools.
- Legal Requirements: When required by law, court order, or government request.
- Business Transfers: In case of merger, acquisition, or sale of assets.
- With Your Consent: When you explicitly authorize us to share information.
- Aggregated Data: We may share anonymized, aggregated data for analytics and research.
7. Your Rights and Choices
- Access: You can access, review, and download your personal information from your account dashboard.
- Correction: You can update or correct inaccurate information.
- Deletion: You can request deletion of your account and associated data (subject to legal retention requirements).
- Data Portability: You can request a copy of your data in a portable format.
- Marketing Communications: You can opt out of promotional emails by clicking "Unsubscribe" or adjusting notification preferences.
- Cookie Management: You can manage cookies through browser settings, though this may affect functionality.
8. Third-Party Links and Services
Our website and services may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information and terminate the child's account.
10. International Data Transfers
Your information may be transferred to and stored in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to such transfers subject to appropriate safeguards.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) including the right to know, delete, and opt-out. Contact us to exercise these rights.
12. European Union Rights (GDPR)
If you are located in the EU, your data is protected under GDPR. You have the right to access, rectify, erase, and port your data. You can also object to processing and lodge complaints with your local data protection authority.
13. India Data Protection
We comply with the Information Technology Act, 2000, Digital Personal Data Protection Act, 2023, and relevant RBI guidelines for payment systems and data protection.
14. Updates to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.