JPOS is a cloud point-of-sale (SaaS) service owned and operated by Jantrah Tech Private Limited (Trading as JPOS), a private limited company registered in the Islamic Republic of Pakistan. This Privacy Policy explains what information we collect when you use jpos.jantrah.com, how we use and protect it, and the choices you have. By using the Service you consent to the practices described here.
1. Information we collect
Account & business information
- Registration details: business name, your name, email address, contact number, city, and (optionally) business address, WhatsApp number, NTN and website.
- Staff user accounts you create inside your business (names, usernames, contact details, roles).
Business data you enter
- Products, prices, stock, sales, purchases, customer and supplier records (including udhaar/credit ledgers), expenses, payroll and related records. This data belongs to you; we store and process it only to provide the Service.
Payment-related information
- When you renew your subscription by Easypaisa or bank transfer, we collect the details you submit as payment proof: transaction ID, sending account/wallet details you choose to share, amount, date and an optional slip image.
- We do not collect or store card numbers, CVVs, wallet PINs or banking passwords — ever.
Technical & usage information
- Log data such as IP address, browser type, pages visited, sign-in times and security events (e.g. failed login attempts). We keep these logs for security, audit and fraud-prevention purposes.
2. How we use information
- To create and operate your account and provide every feature of the Service.
- To send service emails: email verification, password reset, billing reminders and important service notices.
- To verify subscription payments and manage billing, renewals and the grace period.
- To secure the platform: detecting unauthorised access, abuse, and fraudulent payment submissions.
- To provide customer support and improve the Service.
- To comply with legal obligations under the laws of Pakistan.
We do not use your business data for advertising and we do not sell it to anyone.
3. Payment information
Subscription payments are made by direct transfer to our published Easypaisa or bank account, or — where offered — through licensed Pakistani payment service providers and gateways (such as PayFast, easypaisa or 1LINK member channels). When a gateway is used, your card or wallet credentials are entered on and processed by that provider’s secure systems under their own privacy policy; they never pass through or reside on our servers. We receive only the confirmation of payment (amount, reference, status) needed to activate your subscription.
4. Cookies & sessions
- We use strictly necessary cookies: a session cookie to keep you signed in and a CSRF token cookie to protect forms against forgery.
- An optional “remember me” cookie keeps you signed in between visits if you choose it.
- We do not use third-party advertising or cross-site tracking cookies.
- You can clear or block cookies in your browser, but the Service will not function without the strictly necessary ones.
5. Data storage & security
- All traffic between your browser and the Service is encrypted with HTTPS/TLS.
- Passwords are stored only as strong one-way hashes — we cannot read your password.
- Each business’s data is logically isolated: no other business on the platform can access your records, and our access controls enforce this on every request.
- Security logs and audit trails record sensitive actions for accountability.
- Operational backups are taken regularly to protect against data loss.
No system can be guaranteed 100% secure, but we apply reasonable technical and organisational measures consistent with good industry practice and with our obligations under the Prevention of Electronic Crimes Act, 2016 and other applicable laws of Pakistan.
6. When we share data
We share personal data only with:
- Service providers we rely on to run the platform — hosting/infrastructure providers and our transactional email provider — bound to use the data only to provide their service to us;
- Payment providers, to the minimal extent needed to confirm or process a payment you initiate;
- Authorities, where disclosure is required by the laws of Pakistan, a court order, or a lawful request by a competent authority;
- A successor entity, if the Company undergoes a merger or acquisition — in which case this policy continues to apply to your data.
7. Retention & deletion
- Your account and business data are retained while your subscription is active, and for a reasonable period after access is paused for non-payment so you can resume without losing anything.
- If you close your account, we delete or anonymise your personal data within a reasonable period, except records we must keep to comply with legal, tax or accounting obligations, or to resolve disputes.
- Security and payment-verification logs are retained as long as needed for their purpose.
8. Your rights
You may, at any time:
- access and update your profile and business information from inside the app;
- ask us for a copy of the personal data we hold about you;
- ask us to correct inaccurate data or delete data we are not legally required to keep;
- close your account and request deletion of your business data.
To exercise any of these rights, contact us using the details below. We will respond within a reasonable time.
9. Children
The Service is a business tool intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version, and material changes will be notified by email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance.
Jantrah Tech Private Limited (Trading as JPOS)
P#Mc18, Phase 5, Ghouri Town, Islamabad, Pakistan