Privacy Policy

We collect information necessary to operate, maintain, and provide the POS service:

• Merchant Account Information: Your name, email address, phone number, store name, store address, business registration details, and currency preference.
• Shop Operational Data: Product titles, SKU/barcode numbers, purchase costs, retail selling prices, stock inventory counts, supplier records, and store expenses.
• Sales & Customer Records: Invoices, transaction timestamps, payment methods (cash, card, bank transfer), digital credit book (ණය පොත) balances, and customer contact info (name and phone number) recorded for digital receipts or credit tracking.
• Technical & Log Data: IP addresses, browser specifications, device operating system, and hardware peripherals (thermal printer communication logs) used to assist with technical support.

We use collected data solely to deliver, enhance, and secure the Vyapara platform:

• Processing counter checkouts, stock level updates, and barcode lookups.
• Calculating accurate profit margins, sales totals, expense reports, and tax totals.
• Generating thermal receipts, standard PDF invoices, and WhatsApp share links.
• Managing user authentication, sessions, and role-based staff permissions.
• Communicating critical billing notices, system updates, and responding to support tickets.

We do not sell, rent, license, or trade your business data, product pricing, sales volume, or customer contact records to any third-party advertisers, data aggregators, or competitors. Your business data belongs strictly to you.

We use industry-standard security protocols to keep your information safe:

• Row-Level Security (RLS): Database-enforced tenant isolation guarantees that your store records and customer data can only be queried by authenticated members of your own shop.
• Encryption in Transit & at Rest: All web traffic is encrypted using modern TLS (Transport Layer Security) 1.3 / HTTPS. Cloud databases and backups are encrypted at rest.
• Local Data Storage: Local browser storage and IndexedDB are used on your cash register device solely to enable fast offline transactions during connectivity interruptions.

Vyapara uses strictly essential cookies and local storage tokens to:

• Maintain your authenticated login session securely.
• Remember your active shop selection and language preference (vyapara_pos_lang).
• Enable local offline synchronization for counter billing.

We do not employ third-party cross-site advertising tracking cookies.

We retain your business data as long as your account remains open. You have the right to:

• Export your sales reports, customer ledgers, and inventory catalog at any time into CSV or PDF formats.
• Request permanent erasure of your account and associated shop data upon ending your subscription by contacting hello@vyaparalk.com.