Privacy Policy

1Who we are

SellyPOS is a point-of-sale and business-management application, published by Selly Systems ("we", "us"), Muhammad Center, Opposite Soneri Bank, Jalalpur Jattan Road, Gujrat, Pakistan.

Privacy questions: hello@sellypos.com.

2The short version

3What we collect

3.1Google sign-in

You sign in with Google. We request only openid, email and profile. We receive your Google account identifier, your email address (and whether Google has verified it) and your name. We never receive your Google password.

3.2Business and owner details

What you give us at set-up, such as: your name, business name, business type, country, city, optional address, mobile number, optional tax number (NTN), and the username and display name of the administrator account. We do not receive passwords or PINs.

3.3Computer and licence information

To issue and enforce licences, we receive: a device identifier and device public key; the Software version, edition and operating-system version; a description of the computer (for example processor, memory, manufacturer and model); a computer name if you choose to give one; and identifiers derived from your computer, which are hashed before they leave it, used to apply licence and trial rules once per computer and to detect copied installations. The Software checks in with our servers periodically while online. Our servers also see your IP address and standard request data.

3.4Updates

The Software checks for updates about once a day unless you turn that off. The request carries no business data. The download server sees your IP address and standard request data.

3.5Support

What you tell us when you contact us (email, telephone, WhatsApp), and the account details we need to verify you.

3.6Usage analytics

The Software does not currently send us usage analytics. If we introduce them, they will be limited to counts that contain no money values and no records about people. We will update this policy first, and ask for consent where the law requires it.

4What the Software does not send us

By design, SellyPOS does not send us your sales, customers, products, suppliers, purchases, staff or payroll records, financial figures, tax records, receipts, invoices, backups or datastore, and it does not send us your passwords or PINs. We have no remote access to your point-of-sale system built into the Software.

5Your business data, and your responsibilities

Your business data lives on your computer, under your control. We hold no copy and cannot restore it for you. It may include personal data about your customers, suppliers, the people you buy devices from, and your staff (names, phone numbers, addresses, ID numbers such as CNIC, balances, attendance and pay). You are the controller of that data. You must have a lawful basis to collect it, tell the people concerned, protect it, and answer their requests.

Requests from your customers or staff. Send them to your own business. Records that SellyPOS must keep for tax or accounting reasons, and the audit log, cannot be erased. Within those limits, the Software lets an authorised user archive a person and clear optional fields such as phone, ID number, email and address.

6Things you choose to send out

When you share a receipt, statement, reminder, payslip or purchase document, SellyPOS opens WhatsApp (or email) with the content, or puts a file on your clipboard. Nothing is sent until you press send. After that, the recipient service's terms apply. Printing goes through your Windows print system and may leave copies in its queue.

7Several computers on one network

If you use a Master PC with client tills, business data, including staff sign-in verifiers, is copied between your computers over an encrypted connection on your local network. It does not pass through us. Securing your network is your responsibility.

8How we use what we collect

To create and maintain your account and licence; to enforce licence limits and prevent fraud, copying and abuse; to verify you for support and recovery; to send service, security and update notices; to maintain and improve the Software; and to meet legal obligations. We do not sell your data and we do not use it for advertising.

9Legal basis

We process this data to perform our agreement with you, on your consent where you give it (for example when you sign in with Google), to meet legal obligations, and for our legitimate interests in securing the Software and licences. We handle it in line with applicable Pakistani law.

10Who we share it with

We use no advertising networks and no third-party analytics inside the desktop application.

10.1Google user data — limited use

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. It is used only to provide sign-in, licensing and recovery, is not used for advertising, and no human reads it except for support you request, security, or legal reasons.

11Local logs

Diagnostic logs stay on your computer, mask personal fields, and are not uploaded by the Software.

12How long we keep it

We keep account and licence records while your account is open and for a reasonable time afterwards, then delete or anonymise them. We keep what we need to comply with law, resolve disputes, prevent fraud, and enforce licence rules such as one trial per computer. That includes hashed computer identifiers, which may remain after an account is closed. Security and support records are kept as long as needed for those purposes.

13Your rights

You may ask us to show, correct, export or delete the account data we hold about you, or to withdraw consent for Google sign-in. Write to hello@sellypos.com. We aim to reply within 30 days, and we may need to verify you first. We may decline where the law lets us (for example to keep records we must keep, or to protect licence enforcement).

You can revoke Google access at any time at your Google account's permissions page.

14Security

We use TLS in transit and reasonable access controls. No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.

15International transfers

Our servers are in Singapore, and sign-in involves Google's systems, so your account data is processed outside Pakistan. By using the Software you accept this. Regional notices for the UK and EEA are at sellypos.com/privacy/uk and sellypos.com/privacy/eu.

16Children

SellyPOS is business software. We do not knowingly collect data from anyone under 18.

17This website

This section covers sellypos.com only. Nothing on it is needed to use SellyPOS, and nothing you do here is linked to your SellyPOS account.

• Analytics. We use Google Analytics 4, loaded through Google Tag Manager, to count visits, downloads and which pages help people. It sets cookies and records your approximate location from your IP address, your browser and device type, the pages you open and the buttons you press. We do not use it for advertising, and advertising storage is switched off.
• Prices in your currency. To show rupees in Pakistan and US dollars elsewhere, our website asks our service for your country. Cloudflare, which hosts it, works the country out from your IP address, and we do not ask for your device's location. We use the answer only to choose the currency, and we do not store it. To stop abuse, our service keeps a one-way scrambled form of your IP address, which cannot be turned back into the address, for about a minute. You can switch currency yourself at any time.
• Visitors in the UK, the European Economic Area and Switzerland. Analytics cookies are off by default for you (Google Consent Mode). Google may still receive cookieless measurements without identifiers.
• Forms. Our forms do not send anything to us. They write a WhatsApp message on your device, which you read and choose whether to send. Once you send it, WhatsApp's own privacy policy applies to it.
• Downloads and videos. Installers are served from dl.sellypos.com through Cloudflare, which keeps standard request logs. Walkthrough videos load from YouTube (in privacy-enhanced mode) only when you press play.
• Your choices. You can block or delete cookies in your browser, or install Google's Analytics opt-out add-on.

18Changes

We will publish changes here with a new date. For material changes we will notify you in the app or by email in advance where practicable, and at least 30 days in advance unless a change is needed sooner for law or security. Continuing to use SellyPOS after that means you accept the revised policy.

19Contact

See also our Terms of Service.