Privacy Policy

Last Updated: August 1, 2025

Welcome to AspirozPOS, a product of Aspiroz Software Solutions ("we", "our", or "us"), headquartered in Chennai, Tamil Nadu, India. This Privacy Policy explains how we collect, use, store, share, and protect your personal and business data when you use our website at pos.aspiroz.com and our AspirozPOS software services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, business name, email address, phone number, and password when you create an account or request a demo.
• Business Information: GST number, business address, type of business (cafe, restaurant, or textile), and billing preferences.
• Payment Information: Subscription plan details and billing address. We do not store card numbers — payments are processed by certified third-party payment gateways.
• Communications: Messages you send us via contact forms, email, or support channels.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and actions taken within the software.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Cookies and Tracking Technologies: We use cookies and similar technologies to keep you logged in, remember preferences, and analyze website traffic.
• Transaction Data: Sales records, inventory data, and reports generated through the POS system (this is your business data which you own).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the AspirozPOS Service
• Process your subscription and send billing receipts
• Send product updates, feature announcements, and support communications
• Respond to your queries and provide customer support
• Comply with applicable Indian laws and regulations including GST requirements
• Detect and prevent fraud, abuse, or unauthorized access
• Analyze usage trends to improve product features and user experience
• Send promotional communications (you may opt out at any time)

3. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors (cloud hosting, payment processors, email services, analytics) who assist us in delivering the Service, bound by confidentiality agreements.
• Legal Requirements: When required by law, court order, or regulatory authority under Indian law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
• With Your Consent: In any other case, only with your explicit consent.

4. Your Business Data

All transaction records, inventory data, customer data, and sales reports you generate within AspirozPOS belong to you. We process this data only on your behalf to provide the Service. You may export or delete your business data at any time from within the platform. Upon account closure, your data is retained for 90 days and then permanently deleted unless legal obligations require otherwise.

5. Data Security

We implement industry-standard security measures to protect your information:

• Data encrypted in transit using SSL/TLS
• Data encrypted at rest using AES-256
• Role-based access control for our internal team
• Regular security audits and vulnerability assessments
• Automatic daily backups stored in secure, redundant servers

While we take all reasonable precautions, no system is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

6. Cookies Policy

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (login sessions, security tokens). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics). You may opt out via your browser settings.
• Preference Cookies: Remember your settings and preferences across sessions.

You can control cookie settings through your browser. Disabling cookies may affect certain features of the Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Account data is retained for up to 90 days after account closure. Anonymized, aggregated analytics data may be retained indefinitely.

8. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Portability: Request your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Objection: Object to certain types of processing of your data

To exercise any of these rights, contact us at privacy@aspiroz.com. We will respond within 30 days.

9. Children's Privacy

AspirozPOS is a business software product intended for use by adults operating businesses. We do not knowingly collect personal information from individuals under 18 years of age. If we discover that we have inadvertently collected such information, we will promptly delete it.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before sharing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes via email or a prominent notice on our website at least 14 days before the changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Any disputes shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu.