Privacy Policy

• Account information: name, email, phone number, NTN/CNIC, password (stored as a salted hash), and business details you provide during signup or onboarding.
• Business data: invoices, buyers, items, tax returns, and FBR credentials/tokens you enter or connect in order to use the Service.
• Google account data: if you sign in with Google, we receive your name, email, and profile information as permitted by your Google account settings.
• Usage and device data: IP address, browser type, device identifiers, pages visited, and actions taken, collected automatically via logs and cookies (see our Cookie Policy).
• Payment data: where applicable, billing details are processed by our third-party payment processor; we do not store full card numbers.
• Communications: messages you send us for support, including via email or WhatsApp.

• To provide, operate, and maintain the Service, including preparing and transmitting invoices to FBR on your instruction;
• To create and manage your account, verify your identity, and provide customer support;
• To process billing and payments;
• To monitor, secure, debug, and improve the Service;
• To send you service-related communications, and, where permitted, product updates or marketing (you may opt out at any time);
• To comply with legal, regulatory, and tax record-keeping obligations under Pakistani law;
• To enforce our Terms of Service and protect our rights, users, and the public.

We do not sell your personal information. We may share information with:

• FBR: invoice and tax data you submit is transmitted to FBR's Digital Invoicing System as necessary to provide the Service, at your direction.
• Service providers: hosting, database, email, SMS/WhatsApp, analytics, and payment providers who process data on our behalf, under confidentiality obligations.
• Google: for authentication, if you use Google sign-in.
• Legal and safety: government authorities, regulators, or law enforcement, where required by law, court order, or to protect our rights, users, or the public, and we reserve the right to disclose information to defend ourselves in any dispute or investigation.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction.

We retain account and business data for as long as your account is active, and for as long afterward as necessary to comply with applicable tax, accounting, and legal record-keeping obligations (which may require retention of tax-related records for several years under Pakistani law), resolve disputes, and enforce our agreements. We may retain backup copies for a reasonable period after deletion requests for operational and legal purposes.

We take reasonable technical and organizational measures to protect information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure. You provide information at your own risk, and we are not liable for unauthorized access, breach, or loss resulting from circumstances beyond our reasonable control, including your own failure to safeguard your credentials.

You may request access to, correction of, or deletion of your personal information by contacting us at [email protected]. We may decline or limit a request where retention is required by law, necessary to complete a transaction, or needed to protect our legal interests. Deleting your account does not delete records we are legally required to retain, including filed tax and invoice data.

The Service is intended for business users who are at least 18 years old. We do not knowingly collect information from children, and any account found to belong to a minor may be terminated.

We may process and store information on servers located outside Pakistan. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your own.

We may update this Privacy Policy from time to time by posting the revised version with a new "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy can be sent to [email protected].