Privacy Policy

1. Who this policy covers

Our customers ("merchants") are businesses that subscribe to ZenxPOS, and the owners and staff who sign in to it. For their account and usage data, we decide how the data is used.

Our merchants' customers and suppliers. When a merchant records a customer's or supplier's details (for example a name or mobile number on a bill), the merchant decides why that data is collected and is responsible for informing those people. We process that data only on the merchant's instructions, to provide the Services. Requests about such data should go to the merchant first; we will help the merchant respond.

2. Information we collect

We collect only what is needed to run the Services:

We do not collect your card numbers, UPI PINs or bank passwords. Payments are entered on the payment gateway's secure pages and handled by the gateway. We do not use advertising or analytics SDKs, and we do not sell or rent personal data.

3. Android app permissions

The ZenxPOS app asks only for permissions needed for POS features. You can refuse or withdraw any permission in Android settings; the related feature will stop working.

4. How we use information

• To provide the Services — create and manage accounts, run billing, inventory, reports and integrations, print and share invoices.
• Security — verify sign-ins, limit the number of devices per user, alert you about sign-ins from new devices (using device and approximate location), prevent fraud and misuse, and keep audit logs.
• Subscriptions and payments — process renewals, issue GST invoices and receipts, and keep accounting records.
• Support — answer questions, troubleshoot problems and onboard your team.
• Service communications — renewal reminders, invoices, security alerts, OTPs and important changes to the Services.
• Improvement — understand how features are used (from our own server logs) to fix issues and improve performance.
• Legal compliance — meet tax, accounting and legal obligations and respond to lawful requests.

5. Consent and legitimate uses

We process personal data with your consent, which you give when you register, sign in or submit a form, and for legitimate uses permitted by law, such as performing the contract with your business, complying with tax and legal obligations, and keeping the Services secure. You may withdraw consent at any time by writing to our Grievance Officer; withdrawal does not affect processing already done, and some Services cannot be provided without the data they need.

6. How we share information

We share data only with the service providers we need to run the Services, under contracts that require them to protect it and use it only for us:

We may also disclose data when required by law, court order or a government authority; to protect the rights, safety or property of our users, the public or us; or to a successor in a merger, acquisition or sale of assets, who must honour this policy.

Our providers may store or process data outside India. Where they do, we use providers that apply security safeguards at least as strong as this policy, as permitted by Indian law.

7. How we protect information

• All data is encrypted in transit using HTTPS (TLS).
• Passwords are stored as salted one-way hashes; we cannot see your password.
• Payment-integration credentials are encrypted at rest (AES-256-GCM) and never shown back through our apps.
• Role-based access controls limit what each staff account can see and do, the number of devices signed in to an account is limited, and sign-in sessions can be ended remotely.
• Access to production systems is restricted to authorised personnel, and actions in your account are recorded in audit logs.
• Database backups help us recover from data loss.

8. How long we keep information

• Account and business data are kept while your subscription is active.
• After your subscription ends, we keep your data for a 7-day grace period and a further reasonable period so that you can renew or export it, unless you ask us to delete it sooner.
• When you ask us to delete your account, we delete or anonymise your data within 30 days of verifying the request; copies in backups are removed within 90 days.
• Invoices, payment records and other data we must keep under tax, accounting or other laws (for example GST and the Companies Act) are retained for the period those laws require, generally up to 8 years, and are then deleted.
• Website enquiries are kept for up to 2 years unless they become a customer relationship.

See Account & Data Deletion for how to request deletion.

9. Your rights

Subject to applicable law, you have the right to:

• Access a summary of your personal data and how it is processed.
• Correct and update inaccurate or incomplete data. Most details can be edited directly in the app.
• Erase your data when it is no longer needed, except where we must keep it by law.
• Export your business data in a commonly used format.
• Withdraw consent for processing based on consent.
• Grievance redressal through our Grievance Officer, and, if you are not satisfied, a complaint to the Data Protection Board of India.
• Nominate another person to exercise these rights in the event of your death or incapacity.

To use these rights, email info@slifax.com from your registered email address. We may need to verify your identity before acting on a request.

10. Cookies and local storage

Our website does not use advertising or analytics cookies. The ZenxPOS app and our web software store your sign-in session and preferences on your device so that you stay signed in; signing out removes the session. You can clear this data at any time through your device or browser settings.

11. Children's privacy

The Services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Third-party services and links

The Services may link to or integrate with third-party services such as payment gateways and messaging providers. Their own privacy policies govern how they handle data; we encourage you to read them.

13. Changes to this policy

We may update this policy as the Services or the law change. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify you in the app or by email before they take effect.