Privacy Policy

Last updated: 28 May 2026

This policy explains what data we collect, how we use it, and what choices you have. We try to keep it short and honest.

1. Who we are

Pride POS ("we", "us") is operated by the Pride POS team based in India. For privacy questions, contact hello@pridepos.com.

2. What we collect

Category	What	Why
Account	Name, email, business name, GSTIN (if you give it), phone	To create your account, send transactional emails, generate GST-compliant invoices
Business data	Items, customers, bills, ledger, service jobs, staff details, stock	This is the data you put into the app. We store it so you can use the app.
Payment	Razorpay customer id, subscription id, payment id	To bill you for the subscription. We never see your card number — Razorpay handles that.
Usage	Login times, errors, page views, API calls	To debug issues and improve the product. No third-party analytics or ad networks.
Communications	Emails you send us, support tickets	To answer you.

3. What we do NOT collect

We do not run ads or third-party trackers in the app.
We do not sell, rent, or share your business data with anyone.
We do not store credit card numbers. Razorpay handles payments end-to-end.
We do not access your data except (a) to provide the Service, (b) when you ask us for support, or (c) when required by law.

4. Where the data lives

All your data is stored in Supabase's Asia-Pacific Mumbai region (ap-south-1) on AWS. Data is encrypted at rest and in transit. Database backups run daily on Supabase Pro.

5. Who else we share it with

We use these third-party services to run Pride POS. They only see what they need to do their job:

Supabase — hosts the database + authentication. India region.
Razorpay — processes subscription payments. Receives your name, business name, email, phone for billing only.
Resend — sends transactional emails (welcome, payment receipts, trial reminders). Receives your email and the email content.

We do not share data with anyone else for marketing or analytics.

6. Your rights

Access: See all your data in the app or download a JSON export from Settings → Billing.
Correction: Edit any data you've put in.
Deletion: Cancel from Settings → Billing. We delete business data after 30 days. (Bill audit history is retained 6 years as required by GST law.)
Portability: The JSON export covers this — it's a plain machine-readable file you can take anywhere.
Opt out of emails: Transactional emails (payment receipts, security alerts) cannot be opted out of while you have an active account. We do not send marketing emails.

7. Customer data you collect

When you record customer names, phone numbers, GSTINs etc. in your Pride POS account, you are the data controller for that information. You are responsible for telling your customers how you use their data and obtaining their consent where required. Pride POS processes that data on your behalf.

8. Security

We follow security best practices:

Row-level security in the database — your data is invisible to other tenants at the database level.
Encrypted connections (HTTPS) for all communication.
Staff PINs are hashed (SHA-256, salted) — never stored in plaintext.
Owner-only override for cancelling or refunding bills.
Append-only audit log of every bill change.

No system is perfectly secure. If you believe your account is compromised, email hello@pridepos.com immediately.

9. Cookies

We use a small number of essential cookies (and localStorage) to keep you signed in and remember your active outlet. We don't use cookies for advertising or tracking across other sites.

10. Children

Pride POS is a business tool. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We'll email the account owner at least 14 days before any material change to this policy.

12. Contact

Privacy questions or requests: hello@pridepos.com.

This is a plain-language summary written for clarity. Before launching commercially, please have a lawyer review the final version against the DPDP Act 2023 and other applicable law.