Privacy Policy

Last updated: 10/29/2026

GreenPOS ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our desktop application, website, and related services (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Full name (optional)
• Password (stored securely using industry-standard hashing)

Business Data

Your business data — including products, sales transactions, customers, inventory, employees, and reports — is stored locally on your device. We do not have access to this data unless you explicitly enable a cloud backup or synchronization feature.

Usage Information

We automatically collect certain information when you use the Service:

• Device information (operating system, device model)
• Application version and update status
• IP address (for authentication and security purposes)
• Login timestamps and session duration

Payment Information

Payments are made manually via JazzCash, EasyPaisa, or bank transfer. We collect the payment method you used, the transaction ID you provide for verification, and any optional notes you submit. We do not store credit card numbers, bank account numbers, or other financial credentials on our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription payments
• Send important account-related notifications (e.g., subscription renewals, security alerts)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Communicate with you about updates, features, and support

3. Data Storage and Security

Local Storage: Your business data is stored on your device in a local SQLite database. This data never leaves your device unless you choose to export it or enable cloud backup.

Cloud Storage: Account information and authentication data are stored on secure servers provided by Supabase. We implement industry-standard encryption (TLS/SSL) for data in transit and at rest.

Security Measures: We employ appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (TLS 1.3)
• Secure password hashing (bcrypt)
• Row-level security policies on all database tables
• Regular security audits and updates

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Verification: We verify payments manually using the transaction ID you provide.
• Infrastructure Providers: With Supabase (database) and Vercel (hosting), to operate the Service
• Legal Requirements: When required by law, subpoena, or other legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Portability: Request export of your data in a structured, machine-readable format
• Objection: Object to processing of your personal data for certain purposes

To exercise any of these rights, please contact us at getgreenpos@gmail.com. We will respond to your request within 30 days.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data from our servers within 30 days, except where we need to retain certain information for legal or legitimate business purposes.

Your business data stored locally on your device remains under your control. We do not have access to or retain copies of your business data after account deletion.

7. Children's Privacy

The Service is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at getgreenpos@gmail.com.