Privacy Policy &
Data Governance

This Privacy Policy explains how Invenrix Inventory Management ("we", "us", "our") collects, protects, utilizes, and manages personal and business data when you use our Point of Sale (POS) system, web management portal, mobile apps, hardware sync engines, and related cloud services (collectively, the "Platform").

We respect the sensitive and proprietary nature of commercial retail data. We do not sell, rent, or trade your store data, sales volumes, or customer lists to any third party for advertising or marketing purposes.

To provide high-performance inventory synchronization, POS billing, and financial reporting, we collect the following categories of information:

• Account & Registration Details: Store name, corporate registration number, tax/VAT identifiers, owner name, business email addresses, phone numbers, and store physical addresses.
• Catalog & Inventory Records: Product names, SKU codes, barcode serials, cost prices, retail selling prices, stock quantities, supplier lists, and warehouse transfer histories.
• Transaction & Register Logs: Sales invoices, transaction timestamps, payment method types (cash/card), items purchased, discount overrides, cashier IDs, register open/close cash counts, and return receipts.
• Technical & Diagnostic Data: IP addresses, browser versions, operating systems, printer drivers, crash reports, and system performance metrics used strictly for troubleshooting and stability.

We process collected data solely for legitimate commercial purposes directly related to delivering and improving the POS service:

• Real-time stock level synchronization between multiple branches, registers, and warehouses;
• Automated generation of daily sales reports, gross profit margin calculations, and general ledger accounts;
• Triggering automated low-stock notifications and supplier reorder alerts;
• Authenticating staff logins and enforcing role-based permissions (Cashier, Store Manager, Auditor);
• Providing 24/7 technical support, bug fixing, and software updates.

We implement defense-in-depth security standards to protect your confidential commercial data from unauthorized access, alteration, or interception:

Our cloud infrastructure utilizes strict logical multi-tenant database isolation. Each merchant account operates in an isolated environment with separate tenant identification tokens, ensuring that no other business or third party can ever view, query, or leak your sales figures, stock costs, or margins.

When you record customer contact information at the POS counter (such as customer name, phone number, or loyalty account number for WhatsApp digital receipts), that data is stored solely for your store's customer relationship management (CRM) and warranty verification.

We do not contact your shoppers, market external goods to them, or build cross-merchant profiling databases.

Zero Credit Card Data Storage: Invenrix Inventory Management does not store, process, or transmit raw credit card numbers, CVV security codes, or magnetic stripe information on our servers.

All electronic card transactions are handled directly through certified, PCI-DSS compliant EMV payment terminals or integrated gateway providers. Our system only records the transaction reference ID, card type (e.g. Visa/Mastercard), and approved authorization code.

We use essential authentication cookies and secure session tokens strictly to keep administrators and cashiers securely logged into the POS register, maintain session state, and protect against Cross-Site Request Forgery (CSRF) attacks.

We do not use invasive third-party tracking cookies or advertising pixels on the authenticated POS dashboard.

You have the absolute right to export your data at any time during an active subscription:

• Full Data Portability: Export complete inventory catalogs, historical sales registers, customer ledgers, and expense reports into standard Excel (XLSX), CSV, and PDF formats.
• Right to Deletion: Upon account closure or upon request, you may request permanent eradication of your store database from active servers following a 30-day grace period.

Your data is stored in certified, enterprise-grade cloud data centers with physical security, environmental controls, and 24/7 monitoring. When data is transferred across jurisdictions for cloud resilience, transfers are conducted under standard contractual clauses ensuring equivalent data protection safeguards.

Under international data protection regulations (including GDPR, CCPA, and regional statutory privacy frameworks), you are entitled to:

• Right of Access: Request a full copy of all personal and corporate records stored in our systems;
• Right to Rectification: Update inaccurate product listings, company profile information, or cashier credentials;
• Right to Restriction: Restrict certain background processing operations where legally justified;
• Right to Withdraw Consent: Revoke authorization for marketing emails or non-essential communication at any time.

For any privacy-related questions, data export requests, or regulatory audits, please reach out directly to our Data Protection Office: