Privacy Policy

1. Introduction

Welcome to Storezyy ("we", "our", "us", or "the Platform"). We provide a modern Point of Sale (POS), inventory management, and digital billing platform for retail businesses, kirana stores, supermarkets, and merchants.

This Privacy Policy explains how Storezyy collects, uses, protects, and stores information when you access or use our web application, software services, and related tools (collectively, the "Services"). By registering for an account or using Storezyy, you consent to the data practices described in this policy.

2. Information We Collect

We collect information necessary to provide seamless POS billing, account security, and store operations:

• Merchant Account Information: When you register, we collect your full name, email address, mobile/telephone number, business/store name, physical store address, GSTIN (optional), and dynamic UPI VPA address.
• Account Authentication & OTP Data: We generate and record 6-digit one-time passwords (OTP) for email verification and passwordless authentication. Cryptographically secure JWT tokens and encrypted password hashes are maintained to preserve your active login session.
• Store Business & Transaction Data: Data you input into the POS software, including product catalogs, item names, barcodes, SKU codes, pricing, tax rates, stock/inventory levels, invoice records, customer names, customer phone numbers, sales totals, payment method identifiers (Cash/UPI/Card), and transaction timestamps.
• Subscription & Plan Enquiry Data: When you enquire about or select a plan (Free Trial, Pro Monthly, Premium Yearly, or Custom Enterprise), we store the selected plan identifier, store name, contact person, phone number, and enquiry notes.
• Technical & Device Telemetry: Browser type, operating system version, device identifiers, and system access timestamps used strictly for security audits, error diagnostic logs, and multi-device POS synchronization.

3. How We Use Your Information

We utilize the collected information strictly for legitimate business and operational purposes:

• Core POS Operations: Generating printable invoices, computing transaction taxes/discounts, scanning product barcodes, creating dynamic UPI QR codes, and tracking inventory stocks.
• Account Security & Identity Verification: Sending email OTP codes, verifying merchant ownership, authenticating logins, and preventing unauthorized access.
• Store Isolation & Multi-Tenancy: Ensuring complete multi-tenant store isolation so that your store inventory and billing ledger are exclusively accessible to your authenticated account.
• Customer Support & Plan Activation: Contacting you via phone, WhatsApp, or email regarding plan enquiries, onboarding assistance, customer support requests, and manual plan activations.
• Platform Reliability & Maintenance: Diagnosing bugs, optimizing POS offline caching performance, and improving system uptime.

4. Cookies & Client-Side Storage

Storezyy utilizes browser localStorage and session storage technologies to deliver high-performance, offline-resilient POS operations:

• Authentication Tokens (abc_auth_token): Stored locally to preserve your secure session without requiring you to re-authenticate on every page refresh.
• Store Configuration Cache: Caches your store name, tax settings, address, and receipt layout for instantaneous POS load times.
• Theme & UI Preferences: Remembers your visual settings such as Dark/Light theme mode.

5. Third-Party Service Providers

We may partner with trusted third-party service providers solely to enable core platform features:

• Transactional Email Delivery: SMTP email service providers (such as Google Workspace / Gmail SMTP) to dispatch OTP verification codes and welcome notifications.
• Cloud Database & Server Infrastructure: Secure cloud hosting platforms operating with encrypted storage.
• Direct Communication: WhatsApp Business messaging for customer support and plan callback requests.

No Online Payment Gateway Intermediary: Storezyy does not route merchant subscription fees through third-party automated payment gateways (e.g., Razorpay, Stripe). All paid plan subscriptions are discussed directly and activated manually by the Storezyy administration team.

6. Data Security Measures

We employ robust technical and organizational security controls to protect your business data:

• Encryption in Transit: All client-server communications are transmitted over encrypted HTTPS/TLS protocols.
• Cryptographic Hashing: Passwords are protected using salted bcrypt hashing algorithms. Verification OTP codes are validated against temporary hashed tokens.
• Strict Store Isolation: Database queries enforce strict store_id isolation, ensuring no store can read or modify another merchant's catalog or invoices.
• Access Control: Administrative console endpoints are protected by multi-factor role validation and signed JWT credentials.

7. Data Retention & Ownership

Merchant Data Ownership: You retain complete ownership of your store products, customer contacts, and sales ledgers. Storezyy acts as a service provider and data processor.

Retention Period: We retain your store data for as long as your account remains active. If you choose to close your account or request data deletion, we will purge your store catalog, user profile, and associated records within 30 days, subject to applicable legal, accounting, and tax compliance requirements.

8. Your Rights & Data Choices

As a Storezyy merchant, you have the right to:

• Access & Review: View all stored profile details, inventory products, and invoices directly in your POS workspace.
• Correction & Updates: Modify your store name, contact details, GSTIN, UPI ID, and products at any time via Settings.
• Export Data: Download and export your sales reports, customer ledgers, and invoice records.
• Account Deletion Request: Request complete removal of your merchant account and data by emailing us at storezyycare@gmail.com.

9. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect platform enhancements, operational changes, or legal updates. Any modifications will be published on this page with an updated "Last Updated" date. Significant modifications will be communicated via in-app banner or email notice.

10. Contact Us

If you have any questions, privacy concerns, or requests regarding this Privacy Policy, please contact our support team: