Privacy Policy

NeatPakPOS is offline-first. Your products, prices, sales, invoices, customers, suppliers, staff records and accounting live in a database file on this computer and are not sent to us.

Running NeatPakPOS does need a NeatPakPOS account, because your licence lives on it. You sign in once on each computer, and the app checks in with us at least once every 7 days to confirm the licence is still good. Everything else — selling, printing, reporting, backing up — works with no connection at all.

What we receive is limited to what is needed to give you an account, a licence and support: your name and business name, your email address, a record of the computers you have activated, your plan and the payments you make for it, and anything you deliberately send us such as feedback or a diagnostic report.

We do not sell your information, we do not show advertising, and we cannot read the business data on your computer.

This policy is issued by NeatPakPOS, the supplier of the NeatPakPOS point-of-sale software. It covers the desktop application and the account and licensing services that support it.

"You" means the business that installed NeatPakPOS and the people who use it — the owner, the manager and the cashiers who sign in.

The following is written only to this PC and never transmitted to us:

• Products, categories, brands, barcodes, cost and selling prices
• Sales, invoices, returns, quotations, layaway and instalment plans
• Customers, their contact details, ledgers, dues and purchase history
• Suppliers, purchase orders, goods received notes and payments
• Stock levels, tracked units (IMEI / serial numbers), adjustments and damages
• Expenses, accounting journals, registers and every report drawn from them
• Staff records, attendance and payroll, where those modules are enabled
• Backups you create, which are encrypted archives of the same databases — every shop on this PC, together with your product images

These files sit in the application data folder of the Windows account that runs NeatPakPOS. Anyone with administrator access to this computer can reach them, so the physical security of the PC is part of the security of your data.

Account details. When you create a NeatPakPOS account we store your name, your business name, your email address and a cryptographic hash of your password. We never store the password itself.

Your computers. A licence is tied to the computers you activate it on. For each one we store an identifier NeatPakPOS derives from this Windows installation — a one-way hash, so it identifies a PC rather than a person and cannot be turned back into a Windows identifier — together with the computer's name, its Windows version, the NeatPakPOS version it is running and when it last checked in. The computer name is stored so that you and we can tell your PCs apart when one has to be released or deactivated.

Licence and subscription records. Which plan you hold, when it started, when it expires, and which computers are activated against it.

Payments. Where you pay by card, our payment processor handles the payment and we receive only the result. Where you pay by bank transfer, JazzCash or Easypaisa, you send us the amount, the method, the transaction reference and — if you fill them in — the payer's name and phone number, because a person here has to match that payment to your account before it can be approved.

Verification codes. Short-lived codes emailed to you when you create an account, reset your password or change your email address. They expire within minutes.

Things you choose to send. Feedback, bug reports, support emails and any diagnostic report you attach. Feedback sent from inside the app also carries the name of the staff member who was signed in, the NeatPakPOS version and the computer's identifier, so support can tell which PC and which person the report came from. Nothing in this category leaves your computer until you send it.

Feedback you write in the app is saved on this computer first. It is only uploaded, or handed to your email program, when you send it — and it is not marked as sent until that hand-off actually succeeds.

A diagnostic report contains your NeatPakPOS and Windows versions, your regional, receipt and printing settings, your licence status, your store's name and tax configuration, the name and role of the staff member signed in, the size of your database, and the last lines of the application log. Your Windows profile path is replaced with a placeholder before the report is written.

Nothing is read out of your database for the report: it carries no customer list, no product list, no sales records and no price or cost tables. The log excerpt is the one part to be aware of. NeatPakPOS writes a line whenever something notable happens, so those last few hundred lines can mention recent invoice numbers and their totals, and the names of customers created or paid around that time.

You can open and read any diagnostic report before you send it. If you would rather not send one, turn the attachment off — support will still answer you.

• To create your account and let you sign in
• To issue, activate and validate your licence on this device
• To take payment for a plan, and to check and approve a transfer you tell us about
• To answer your support requests and reproduce the bugs you report
• To send service messages such as a renewal reminder or a security notice

We do not build advertising profiles, we do not sell or rent your details to anyone, and we do not use your information to train anything.

We use a small number of service providers to run the parts of NeatPakPOS that are online: a managed cloud database and authentication service for accounts, licences, subscriptions and submitted feedback; an email provider to deliver verification codes and replies; and a payment processor where you buy a plan by card. Each receives only what its job requires, and none is permitted to use your information for its own purposes.

Those services run on servers that may be outside Pakistan, so your account, licence and support records are processed abroad. The business data on your computer is not — it never leaves the PC in the first place.

Card details are handled by the payment processor. NeatPakPOS never sees or stores a full card number.

We may disclose information where the law compels us to. If that ever happens we will tell you, unless we are legally forbidden from doing so.

Account, licence and subscription records are kept for as long as your account exists, and afterwards only for as long as tax and accounting law requires us to keep proof of a sale.

Feedback and support correspondence is kept while the issue is open and for a reasonable period afterwards so that a returning problem can be traced.

Verification codes expire within minutes.

Data on your own computer is kept until you delete it. Uninstalling NeatPakPOS does not, by itself, erase your database or your backups.

Passwords are stored as BCrypt hashes, never in readable form. Traffic between the app and our services uses TLS. The licence record cached on this PC is digitally signed, so it cannot be edited or moved to another machine without being rejected.

Backup files are encrypted with AES-256, which stops anything other than NeatPakPOS reading them. Be clear about what that is worth: the key is built into the app rather than chosen by you, so anyone holding a copy of NeatPakPOS and a copy of your backup file can open it. Treat a backup as seriously as the database itself.

No system is perfect. If a breach ever affects your information we will tell you promptly and explain what happened and what to do.

Two things are in your hands and not in ours: who you give a Windows account on this PC, and where you keep your backups. A backup on a shared drive is as reachable as the drive is.

• Export: every list and report in NeatPakPOS can be exported to Excel or PDF at any time
• Backup: you own your database file and can copy it wherever you like
• Correct: your account email can be changed in Settings; write to us to correct the name or business name on the account
• Delete locally: removing the database and backup folders erases the local data for good
• Delete your account: email us and we will close it and delete the records we are not legally required to keep

Depending on where you live you may also have a statutory right to a copy of what we hold about you, to have it corrected, or to object to a particular use. Write to us and we will act on it.

NeatPakPOS is business software sold to retailers. It is not directed at children and we do not knowingly collect information from anyone under 16.

When this policy changes we update the effective date at the top and, if the change is significant, tell you inside the app the next time you sign in. The version you accepted is always readable here in Settings.

Email haider.faizi2020@gmail.com. We are available Monday to Saturday, 9:00 AM – 8:00 PM (PKT).