Jump to Section (9 Topics)
Categories of Information Processed
To fulfill point-of-sale invoicing, inventory management, and tax reporting, the Software processes the following specific categories of business information:
Store Administrative Metadata:
Store business name, registered address, GSTIN / tax identification number, phone number, email address, invoice numbering prefixes, and receipt footer policies.
Proprietary Commercial Records:
Product names, SKUs, barcode mappings, wholesale purchase prices, retail selling prices, current stock units, tax classifications (HSN/SAC rates), completed sales invoices, quotations, credit notes, and operating expense vouchers.
Customer & Supplier Ledgers:
Customer names, phone numbers, delivery addresses, GSTIN numbers, outstanding customer credit balances, payment histories, and supplier payable records.
Terminal Security Credentials:
Cryptographically hashed administrator passwords, OAuth tokens, and localized Master PIN hashes.
Opt-In Diagnostic Telemetry:
When you voluntarily submit feedback using the "Send Feedback" tool, anonymous environmental data (browser engine, client version, viewport size) is included only if you explicitly choose to include diagnostic logs.
Strict Purpose Limitation
Your data is processed strictly and exclusively for operational retail functionality:
- Generating and printing legal tax invoices, thermal sales slips, and quotation vouchers.
- Tracking live stock levels, low-inventory alerts, and item batch reconciliation.
- Calculating Goods and Services Tax (CGST, SGST, IGST) and formatting statutory GSTR summary tables.
- Maintaining customer credit accounts and logging payment settlements.
- Delivering secure multi-device synchronization across authorized store terminals.
We NEVER use your commercial data for behavioral advertising, competitor price intelligence, merchant credit profiling, algorithmic market aggregation, or commercial benchmarking.
Zero-Trust Platform Admin Isolation
In accordance with BillSara's architectural privacy rules, platform administrators and development engineers are technically segregated from your financial transactions:
Platform administrators CANNOT query, inspect, aggregate, or view proprietary merchant sales data (invoices, gross turnover, profit margins, customer credit ledgers, or supplier payables). Platform administration tools are strictly restricted to store metadata (store name, registered owner contact, state/location, GSTIN) and subscription licensing management.
In cloud-connected stores, multi-tenant database partitioning is enforced cryptographically using Row-Level Security (RLS) policies at the database layer. No merchant store can query or access records belonging to another merchant store.
Support Access & Remote Assistance Policy
Platform operators and support engineers CANNOT access, inspect, or impersonate a merchant store POS terminal without explicit merchant authorization.
If technical diagnostics are required to troubleshoot an issue, the merchant must explicitly grant consent or provide a time-limited, merchant-generated Support PIN from Account Settings. Without active merchant authorization, remote terminal access is cryptographically locked.
Storage Architecture: Hybrid Local + Encrypted Cloud
BillSara combines the resilience of local edge computing with cloud multi-tenant synchronization:
Offline-First Local Storage:
Operational records are stored client-side in your terminal's browser database (IndexedDB and LocalStorage), enabling zero-latency checkout and uninterrupted billing during network outages.
Encryption in Transit:
When cloud sync is active, all communication between your POS terminal and our cloud infrastructure is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
Encryption at Rest:
Cloud-synced database volumes and backup repositories are secured using industry-standard Advanced Encryption Standard (AES-256).
Data Controller vs. Data Processor Status
Under applicable statutory data protection frameworks (including GDPR, Indian Digital Personal Data Protection Act, and global privacy standards):
Merchant as Data Controller:
You, the merchant, act as the sole Data Controller for all personal records of your retail shoppers, clients, and suppliers (e.g. mobile numbers, addresses, purchasing history). You are responsible for ensuring that you have legal grounds to record and manage their contact details.
BillSara as Data Processor:
Aniz Studio acts strictly as a Data Processor, handling and synchronizing consumer customer data exclusively on your behalf and in strict conformance with your operational usage.
Absolute Prohibition on Third-Party Trackers & Data Brokers
We maintain an uncompromising stance against commercial surveillance:
- We do not embed third-party advertising pixels, retargeting tags, or telemetry SDKs (such as Meta Pixel, Google AdSense, or TikTok trackers).
- We do not use invasive session-recording tools (such as FullStory or Hotjar) that record merchant screen actions or keyboard strokes.
- We do not sell, rent, license, or disclose merchant contact lists, sales volumes, or commercial metrics to commercial data aggregators, banks, or financial brokers.
Data Portability & Irreversible Erasure Rights
You maintain uncompromised sovereignty over your enterprise records at all times:
You can download a complete, unencrypted offline backup of your full database in standard JSON format or export clean Excel spreadsheets (.xlsx) at any time from Settings. Furthermore, when you execute "Delete Account & Store Workspace", all local database stores, cache indexes, and remote cloud database records linked to your store are permanently wiped from the database without residual retention.
Local Terminal Security & Access Protections
BillSara equips merchants with built-in security features to safeguard terminal operations:
Master Lock PIN:
Safeguards administrative controls, inventory cost adjustments, tax configuration, and data wipe utilities behind a secure 4-digit PIN.
Automatic Screen Lock:
Locks terminal sessions during inactivity to prevent unauthorized physical access at checkout counters.