Privacy Policy

NeatPakPOS is offline-first. Your products, prices, sales, invoices, customers, suppliers, staff records and accounting live in a database file on this computer and are not sent to us.

Running NeatPakPOS does need a NeatPakPOS account, because your licence lives on it. You sign in once on each computer, and the app checks in with us at least once every 7 days to confirm the licence is still good. Everything else — selling, printing, reporting, backing up — works with no connection at all.

What we receive is limited to what is needed to give you an account, a licence and support: your name and business name, your email address, a record of the computers you have activated, your plan and the payments you make for it, and anything you deliberately send us such as feedback or a diagnostic report.

We do not sell your information, we do not show advertising, and we cannot read the business data on your computer.

This policy is issued by NeatPakPOS, the supplier of the NeatPakPOS point-of-sale software. It covers the desktop application and the account and licensing services that support it.

"You" means the business that installed NeatPakPOS and the people who use it — the owner, the manager and the cashiers who sign in.

The following is written only to this PC and never transmitted to us:

• Products, categories, brands, barcodes, cost and selling prices
• Sales, invoices, returns, quotations, layaway and instalment plans
• Customers, their contact details, ledgers, dues and purchase history
• Suppliers, purchase orders, goods received notes and payments
• Stock levels, tracked units (IMEI / serial numbers), adjustments and damages
• Expenses, accounting journals, registers and every report drawn from them
• Staff records, attendance and payroll, where those modules are enabled
• Backups you create, which are encrypted archives of the same databases — every shop on this PC, together with your product images

These files sit in the application data folder of the Windows account that runs NeatPakPOS. Anyone with administrator access to this computer can reach them, so the physical security of the PC is part of the security of your data.

Account details. When you create a NeatPakPOS account we store your name, your business name, your email address and a cryptographic hash of your password. We never store the password itself.

Your computers. A licence is tied to the computers you activate it on. For each one we store an identifier NeatPakPOS derives from this Windows installation — a one-way hash, so it identifies a PC rather than a person and cannot be turned back into a Windows identifier — together with the computer's name, its Windows version, the NeatPakPOS version it is running and when it last checked in. The computer name is stored so that you and we can tell your PCs apart when one has to be released or deactivated.

Licence and subscription records. Which plan you hold, when it started, when it expires, and which computers are activated against it.

Your shops. Each shop you set up is registered against your account so that a licence cannot quietly become several businesses on several computers. We store the shop's own identifier, the name you gave it, and which of your computers is holding it. We store nothing from inside a shop — no products, no sales, no customers. The name is there so that you and we can tell your shops apart when one has to be moved or released.

Payments. You buy a plan inside the app, through the Microsoft Store. Microsoft takes the payment; we never see your card, and no card number ever reaches us or our servers. What we receive back is that a purchase happened — which product was bought and the reference for that transaction — which is what lets us start your plan.

Verification codes. Short-lived codes emailed to you when you create an account, reset your password or change your email address. They expire within minutes.

Things you choose to send. Feedback, bug reports, support emails and any diagnostic report you attach. Feedback sent from inside the app also carries the name of the staff member who was signed in, the NeatPakPOS version and the computer's identifier, so support can tell which PC and which person the report came from. Nothing in this category leaves your computer until you send it.

Feedback you write in the app is saved on this computer first. It is only uploaded, or handed to your email program, when you send it — and it is not marked as sent until that hand-off actually succeeds.

A diagnostic report contains your NeatPakPOS and Windows versions, your regional, receipt and printing settings, your licence status, your store's name and tax configuration, the name and role of the staff member signed in, the size of your database, and the last lines of the application log. Your Windows profile path is replaced with a placeholder before the report is written.

Nothing is read out of your database for the report: it carries no customer list, no product list, no sales records and no price or cost tables. The log excerpt is the one part to be aware of. NeatPakPOS writes a line whenever something notable happens, so those last few hundred lines can mention recent invoice numbers and their totals, and the names of customers created or paid around that time.

You can open and read any diagnostic report before you send it. If you would rather not send one, turn the attachment off — support will still answer you.

• To create your account and let you sign in
• To issue, activate and validate your licence on this device
• To take payment for a plan, and to check and approve a transfer you tell us about
• To answer your support requests and reproduce the bugs you report
• To send service messages such as a renewal reminder or a security notice

We do not build advertising profiles, we do not sell or rent your details to anyone, and we do not use your information to train anything.

We use a small number of service providers to run the parts of NeatPakPOS that are online: a managed cloud database and authentication service for accounts, licences, subscriptions and submitted feedback; an email provider to deliver verification codes and replies; and Microsoft, which takes the payment when you buy a plan inside the app and tells us that the purchase happened. Each receives only what its job requires, and none is permitted to use your information for its own purposes.

What Microsoft does with what it collects when you buy something from the Microsoft Store is governed by Microsoft's own privacy statement, not this one.

Those services run on servers that may be outside Pakistan, so your account, licence and support records are processed abroad. The business data on your computer is not — it never leaves the PC in the first place.

Card details are handled entirely by Microsoft. NeatPakPOS never sees, receives or stores a card number, and there is nothing of that kind on our servers to be taken.

We may disclose information where the law compels us to. If that ever happens we will tell you, unless we are legally forbidden from doing so.

Account, licence and subscription records are kept for as long as your account exists, and afterwards only for as long as tax and accounting law requires us to keep proof of a sale.

If you delete your account, it is scheduled rather than erased on the spot. For 30 days nothing is removed and you can cancel; after that the account, its subscription history, its registered shops and its device registrations are permanently deleted by an automatic process. What survives is a record that an account with that email address was deleted, and when — we keep that so we can answer a later query about a deletion, and because a payment we have already reported for tax cannot be unreported.

One thing deliberately outlives a deleted account: a record that this computer has used its one free trial. It holds the hardware fingerprint, no name or address, and exists so that deleting and re-creating accounts is not a way to obtain unlimited free trials.

Feedback and support correspondence is kept while the issue is open and for a reasonable period afterwards so that a returning problem can be traced.

Verification codes expire within minutes.

Data on your own computer is kept until you delete it. Uninstalling NeatPakPOS does not, by itself, erase your database or your backups, and neither does deleting your account.

Passwords are stored as BCrypt hashes, never in readable form. Traffic between the app and our services uses TLS. The licence record cached on this PC is digitally signed, so it cannot be edited or moved to another machine without being rejected.

Backup files are encrypted with AES-256, which stops anything other than NeatPakPOS reading them. Be clear about what that is worth: the key is built into the app rather than chosen by you, so anyone holding a copy of NeatPakPOS and a copy of your backup file can open it. Treat a backup as seriously as the database itself.

No system is perfect. If a breach ever affects your information we will tell you promptly and explain what happened and what to do.

Two things are in your hands and not in ours: who you give a Windows account on this PC, and where you keep your backups. A backup on a shared drive is as reachable as the drive is.

• Export: every list and report in NeatPakPOS can be exported to Excel or PDF at any time
• Backup: you own your database file and can copy it wherever you like
• Correct: your account email can be changed in Settings; write to us to correct the name or business name on the account
• Delete locally: removing the database and backup folders erases the local data for good
• Delete your account: Settings → Delete Account, in the app. No email to us, no waiting on a reply

Deleting your account is deliberately not instant. You are asked why you are leaving, asked to type DELETE, and asked to confirm; the account is then scheduled for deletion in 30 days. During those 30 days NeatPakPOS is locked, we email you a reminder before the date, and one tap cancels the whole thing and puts everything back, including any time left on your plan. After the 30 days it is deleted automatically and cannot be recovered by us or by you.

Two things that surprise people, so they are said plainly here. Deleting your account does NOT delete your shop's records — those live on this computer, not with us, and are still here afterwards unless you also tick the box that erases them, which happens immediately and cannot be undone. And a subscription dies with the account: time still left on a paid plan is not refunded.

Depending on where you live you may also have a statutory right to a copy of what we hold about you, to have it corrected, or to object to a particular use. Write to us and we will act on it.

NeatPakPOS is business software sold to retailers. It is not directed at children and we do not knowingly collect information from anyone under 16.

When this policy changes we update the effective date at the top and, if the change is significant, tell you inside the app the next time you sign in. The version you accepted is always readable here in Settings.

Email support@neatpakpos.com. We are available Monday to Saturday, 9:00 AM – 8:00 PM (PKT).