Privacy Policy

1. Information We Collect

When you create an account, configure stores, and execute transactions using goPOS, we collect only the necessary information required to operate the ERP service:

• Account Information: Merchant name, company name, trade license number, business email, phone numbers, and outlet physical addresses.
• Catalog & Inventory Records: Product names, SKUs, barcode numbers, batch numbers, supplier contacts, and purchase prices.
• Sales & POS Transactions: Invoice records, quantities sold, timestamped cashier IDs, customer phone numbers (for SMS receipts/loyalty), and payment methods.
• Device & Telemetry Data: IP addresses, browser versions, thermal printer connection status, and offline sync logs.

2. How We Use Your Information

We use collected information exclusively to provide, maintain, and optimize goPOS cloud services:

• Generating real-time financial statements, trial balances, and inventory valuation reports.
• Executing multi-warehouse stock replenishment orders and automated low-stock notifications.
• Transmitting digital SMS invoices and loyalty points updates to your retail customers.
• Troubleshooting cashier hardware issues and delivering 24/7 technical customer support.

3. Multi-Tenant Isolation & Encryption

goPOS utilizes a robust multi-tenant cloud architecture where each Merchant's data is strictly partitioned by unique organizational identifiers (`organizationId`).

All data in transit is encrypted using TLS 1.3 / SSL, and all database volumes and automated backups are encrypted at rest using industry-standard AES-256 protocols.

4. Payment Security & MFS Gateways

For subscription billing and integrated POS payments (bKash, Nagad, Visa, MasterCard), goPOS never stores raw bank PINs, CVV codes, or credit card numbers. All electronic payment transactions are tokenized through Bangladesh Bank licensed, PCI-DSS compliant payment gateways.

5. Cookies & Local Storage Policy

goPOS uses minimal first-party cookies and browser local storage for essential application operation:

• `NEXT_LOCALE`: Remembers your chosen interface language preference (English 🇬🇧 or Bangla 🇧🇩).
• Session & Auth Tokens: Secure HTTP-only cookies to keep your cashier terminal authenticated safely.
• IndexedDB / Local Storage: Temporary offline product catalog cache to enable rapid barcode scanning when offline.

6. Data Retention & Export Rights

You maintain complete control over your commercial records. You may export full datasets (Invoices, Customers, Stock Balances, Financial Ledgers) in Excel/CSV format at any time. Upon account termination, you may request complete data purging from our production databases.

7. Third-Party Disclosures

We do not sell, rent, or trade your commercial data. We only share minimal metadata with trusted infrastructure providers (such as cloud hosting and SMS gateway aggregators in Bangladesh) strictly necessary to deliver the service.

8. Contact our Data Protection Team

If you have questions about this Privacy Policy or wish to make an inquiry regarding your store data, please reach out to our Data Protection Officer: