Privacy Policy
1. Who we are
India Business International, a proprietorship of T Sasimurugan, GSTIN 33AOLPP8759A2ZO, is the Data Fiduciary for the personal data described in this policy. Contact details are in section 10.
2. Data inside the app: stored on your device only
IBI Hospitality Industry PoS is an offline-first application. Everything you enter — menu items and photos, orders and bills, expenses, shop name, UPI ID, language and theme — is saved in your browser's local storage on your device. It is not transmitted to IBI or anyone else. We cannot see it, back it up or restore it. The "Backup & Restore" feature creates a file on your device that you control.
Your customers' names or phone numbers are not collected by the app. A bill you share on WhatsApp goes from your phone to theirs.
Cloud backup (optional)
If you switch on Cloud backup, the app encrypts a copy of your shop data on your device using a key derived from a 16-character backup code that only you hold, and uploads the encrypted copy to IBI's storage on Cloudflare. IBI stores only the encrypted file and the time it was uploaded, under an identifier that is a one-way hash of your code. IBI cannot decrypt the backup, cannot see which shop it belongs to, and cannot recover a lost code. A backup is deleted automatically 90 days after the last upload, or immediately when you restore it to a new phone and stop backing up. Turning the feature off in Backup & Restore stops all uploads.
3. Data we do collect, and why
| When | What | Why |
|---|---|---|
| You buy or renew a plan | Shop name, owner name, WhatsApp number, plan chosen, amount, UPI transaction reference, licence key, dates | To issue and manage your licence, to answer support queries and to keep the tax records the law requires |
| You book a demo call or message us | Your WhatsApp number, name and the message | To call you back and help you set up |
| The app checks its licence | Licence key and app version, plus the technical data any web request carries (IP address, browser type, time) | To confirm the licence is valid and to deliver updates; server logs are used only for security and are kept briefly |
| You use Cloud backup | An encrypted copy of your shop data that IBI cannot read, its size and upload time | To let you restore your shop on a new or reset phone using your backup code |
| You pay through a payment gateway (where offered) | Handled by Razorpay under its own privacy policy; we receive the payment ID, amount and status, never your card or bank details | To activate the licence automatically |
We do not collect location, contacts, camera or microphone data. The photo picker for menu items runs on your device; a chosen photo is stored only there. The optional "Search photos" feature sends your search word to Wikimedia Commons to fetch free-licence images.
4. Legal basis
We process the data above with your consent, given when you request a licence or a demo, and for the legitimate purposes of fulfilling your purchase, providing support and complying with Indian tax law.
5. Where the data is kept and who sees it
- Licence records are stored with Cloudflare (edge storage and hosting) and, for hand-issued keys, in a private GitHub repository. Both are processors acting on our instructions.
- Messages you send us are held in WhatsApp (Meta) on our business phone.
- Gateway payments are processed by Razorpay, an RBI-licensed payment aggregator.
- We do not sell personal data and do not use it for advertising. We share it only with the processors above or when Indian law requires.
6. Retention
Licence and payment records are kept for the life of the licence and afterwards for as long as Indian tax law requires us to keep accounting records (currently up to 8 years). Demo-call messages are deleted within 12 months. Server logs are retained for no more than 30 days.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to show you the personal data we hold about you, correct it, erase it once it is no longer needed for the purposes above, nominate a person to exercise these rights on your behalf, and raise a grievance. Write to the Grievance Officer in section 10; we respond within 30 days. You may also withdraw consent at any time, in which case we can no longer manage your licence. If you are not satisfied with our response you may approach the Data Protection Board of India.
8. Cookies and tracking
The Service sets no cookies and uses no analytics or advertising trackers. Browser local storage is used solely to run the app on your device.
9. Children
The Service is a business tool for shop owners and is not offered to persons under 18.
10. Contact and Grievance Officer
Grievance Officer
11. Changes
We may update this policy. The effective date changes when we do and material changes are announced inside the Service.