Privacy Policy

This Privacy Policy explains how Khise Digital Solution Pvt Ltd (“we”, “us”, “our”) collects, uses, stores, shares and protects information when you use the KDSPOZ Retail apps for Android (package com.kdspoz.retail), iPhone (bundle ID com.kdspoz.retail), Windows and macOS, their backend services, and this website (together, the “Service”). By using the Service you agree to this policy. If you do not agree, please do not use the Service.

1. Who we are

KDSPOZ Retail is a billing and point-of-sale (POS) app for retail shops. It lets shop owners and their staff create bills, accept payments, manage products and stock, keep customer records, print receipts and view business reports. It is developed and operated by Khise Digital Solution Pvt Ltd, India.

2. Scope & roles

• Shop account data (owner and staff accounts): we decide how this is processed and act as the data fiduciary / controller.
• Business data you enter (products, sales, your customers’ and suppliers’ details): you, the shop, decide what to record. We process it only on your behalf to provide the Service, and act as a data processor. Each shop is responsible for having a lawful basis to record its own customers’ information.

3. Data we collect

a) Information you provide

• Account & login: shop name, shop code, owner/staff name, mobile number, email (if provided), role, and password (stored only as a one-way hash) and PIN.
• Shop profile: business name, address, GSTIN/tax details, shop logo, bill/receipt settings and branch details.
• Catalogue & inventory: products, categories, brands, prices, SKUs, barcodes, variants, stock levels, stock adjustments and transfers, and product lists you import from an Excel/CSV file (the file is read on your device and only its rows are sent).
• Sales & finance records: bills, items sold, discounts, taxes, payment mode (cash, UPI, card, credit, wallet) and amounts, held bills, returns/credit notes, store credit, expenses, purchase bills and daily cash-closing figures.
• Your customers’ details (optional): name, mobile number, email, address, notes, loyalty points and store credit, entered by the shop.
• Supplier details (optional): supplier name, mobile number, email, address and GSTIN/tax number, entered by the shop.
• Printer settings: name and local network address of a network receipt or label printer, if you add one. These settings and Bluetooth printer details stay on your device.
• Barcode labels: barcodes generated for your products in the app are saved with the product so they can be scanned at billing. Label layouts and print options stay on your device.
• Shopify connection (optional): your Shopify store domain, and the products, prices and stock levels synced between the app and your store.

We do not collect or store card numbers, UPI PINs, or bank credentials. The app only records the payment mode and amount that the shop enters; actual payments happen outside the app.

b) Information collected automatically

• Technical & security data: IP address, request timestamps, device/app version and error logs that our servers record when the app communicates with them, used to keep the Service secure and working.
• On-device storage: login session tokens and app preferences are stored on your device so you stay signed in.

We do not use advertising IDs, show ads, or use third-party analytics, tracking or advertising SDKs in the app. We do not sell personal data.

c) Summary of data types (Google Play Data safety and App Store privacy details)

The table below lists every type of user data the app sends from your device to our servers, using the categories of the Google Play Data safety section; the App Store privacy details use the same information. The data is linked to your shop account and is never used to track you. All of it is collected only so the app can work and so we can manage your account. It is sent over an encrypted (HTTPS) connection, is not shared with third parties or used for advertising or analytics, and can be deleted on request (see Account & data deletion).

We do not collect location, contacts, SMS or call logs, files outside those you choose, payment card/UPI/bank details, health data, device or advertising IDs, app usage analytics or crash reports. Camera images used for barcode scanning are processed on the device and are never uploaded. The app contains no third-party SDK that collects data: its libraries (React Native, navigation, camera, image picker, Bluetooth printing, file sharing and Excel reading) work only on the device or send data to our own servers.

4. App permissions

The app asks for the following permissions only when the related feature is used:

You can deny or revoke any permission from Android Settings or iPhone Settings; only the related feature will stop working.

5. How we use data

• To create and manage your shop account and authenticate users.
• To provide billing, inventory, customer, reporting, printing and export features.
• To sync data across your devices and branches.
• To provide optional integrations you enable (such as Shopify).
• To provide support, respond to requests and send important service notices.
• To maintain security, prevent fraud and abuse, fix bugs and improve reliability.
• To comply with legal obligations, such as tax and accounting record requirements.

6. Shopify integration (optional)

If a shop owner chooses to connect a Shopify store:

• Connection uses Shopify’s official login and approval screen. We never ask for your Shopify password.
• We receive and store your store domain and name, location, products and variants (names, SKUs, barcodes, prices), inventory levels, and order details needed to adjust stock (order number, items, quantities, amounts and status).
• Shopify access tokens are encrypted on our servers and are never sent to the mobile app.
• We process Shopify’s privacy requests (customer data request, customer redact, shop redact) as required by Shopify.
• You can disconnect at any time from Settings → Integrations → Shopify, or by uninstalling the app from your Shopify admin. Stored access tokens are then removed.

Shopify’s own handling of data is governed by Shopify’s privacy policy.

7. Sharing & disclosure

We share data only as needed to run the Service:

• Hosting & infrastructure providers who store and process data on our behalf under confidentiality obligations.
• Integrations you enable, such as Shopify, only for the purpose you enabled them.
• When you share it: bills, receipts or Excel exports you choose to share via WhatsApp, email or other apps are sent by you through those apps.
• Legal reasons: when required by law, court order or a government authority, or to protect our rights, users or the public.
• Business transfer: if our business is merged or acquired, data may transfer under the same protections.

We do not sell, rent or trade personal data, and we do not share it for advertising.

8. Security

• All data between the app and our servers travels over encrypted HTTPS (TLS).
• Passwords are stored as one-way hashes; integration tokens are encrypted at rest.
• Each shop’s business data is kept in a separate database, isolated from other shops.
• Access is controlled by roles and permissions set by the shop owner.

No system is 100% secure, but we take reasonable measures to protect your data and will notify affected users and authorities of a personal data breach as required by law.

9. Retention

• Shop data is kept while your account is active so the Service works as expected.
• After account deletion, data is deleted or anonymised within 30 days, except records we must retain longer by law (for example tax or accounting records), which are kept only as long as required and then deleted.
• Server security logs are kept for a limited period (typically up to 90 days).

10. Account & data deletion

You can request deletion of your account and associated data at any time:

1. Email info@khisedigital.in with the subject “KDSPOZ account deletion request”, or message us on WhatsApp +91 98504 13801.
2. Include your shop code and the registered mobile number. We will verify the request with the account owner.
3. We confirm and complete deletion within 30 days, subject to legal retention described above.

Deleting the account removes the shop’s users, products, sales, customer records, settings and integration connections. You may ask for an export of your data before deletion. You can also request deletion of specific data (for example a customer record) without deleting the whole account. Uninstalling the app alone does not delete your account.

11. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may:

• access and get a summary of your personal data;
• correct or update inaccurate data (most data can be edited directly in the app);
• request erasure of your data;
• withdraw consent (this may stop parts of the Service from working);
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

If you are a customer of a shop using KDSPOZ, please contact that shop first, since they control your records. We will assist the shop in responding to your request.

12. Children

The Service is meant for businesses and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows the latest version. For significant changes we will notify users in the app or by other appropriate means. Continued use of the Service after changes means you accept the updated policy.

14. Contact & grievance officer