Privacy Policy

Who we are

POSGIRI is a cloud based point of sale and retail platform operated from Bangladesh. In this policy "we", "us" and "POSGIRI" mean the POSGIRI team, and "you" means anyone who uses our website or services.

For personal data that merchants collect about their own customers through POSGIRI, the merchant is the data controller and POSGIRI acts as a data processor on the merchant's instructions.

What we collect

We only collect what we need to run the service:

Account data — name, business name, email address, phone number and the password hash for your login.
Business data — products, prices, stock levels, orders, invoices, customers and suppliers that you enter into POSGIRI.
Billing data — subscription plan, payment status and transaction references. Full card numbers are handled by our payment partners and never stored on our servers.
Technical data — IP address, browser type, device type, pages visited and timestamps, recorded in server logs for security and troubleshooting.
Support data — messages, attachments and call notes when you contact us.

How we use your data

We use personal data to provide and maintain the service, authenticate logins, process subscription payments, send service notices and invoices, respond to support requests, detect fraud and abuse, meet our legal obligations, and — where you have consented — measure how the site is used so we can improve it.

We do not sell your personal data, and we do not share it with advertisers.

Legal basis

We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest in keeping the service secure and working, where the law requires it, and — for analytics cookies — where you have given consent. You can withdraw consent at any time without affecting the service.

Who we share it with

We share data only with service providers who help us run POSGIRI, and only as far as they need it:

Hosting and infrastructure providers that run our servers and backups.
Payment gateways that process subscription and order payments.
SMS and email providers that deliver notifications you have asked for.
Analytics providers, only if you accept analytics cookies.

We may also disclose data if we are required to by law, a court order or a lawful request from a public authority.

How long we keep it

Account and business data is kept for as long as your account is active. After you close your account we keep it for a limited wind down period so you can export or restore your records, then we delete or anonymise it, except where we must retain invoices and tax records for longer under Bangladeshi law. Server logs are kept for a short rolling window.

How we protect it

Traffic to POSGIRI is encrypted in transit over HTTPS. Passwords are stored only as salted hashes, never in readable form. Each merchant's data is isolated from every other merchant's. Access by our staff is limited to what their role requires and is logged. Backups are taken regularly and access to them is restricted.

No system can be guaranteed completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

Your rights

You can ask us to give you a copy of your personal data, correct anything inaccurate, delete data we no longer need, restrict or object to certain processing, export your data in a portable format, or withdraw a consent you previously gave. Write to us using the details below and we will respond within a reasonable period.

Children

POSGIRI is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes or the law requires. When we make a material change we will update the date at the top of this page and, where appropriate, tell you inside the dashboard or by email.