Privacy policy
Last updated 2026-09-22
Draft — the company details, governing-law clause and contact points below are placeholders until the company registration and the owner's decisions are final (docs/26). Do not rely on this text yet.
What we collect
- Account data: the business name, the administrator's name and e-mail, and the users they invite.
- Business data you enter or import: products, stock, sales, purchases, suppliers, customers and books.
- Technical data: sign-in events, device identifiers of registers, and an audit log of changes made in the product.
How we use it
Only to provide, secure and improve the service for you: running your point of sale and back office, computing your reports and insights, billing your plan and answering support requests. We do not sell data and we do not use one customer's data to serve another.
Where it is stored and who processes it
In AWS Asia Pacific (Singapore), on Amazon Web Services and Neon (database), encrypted at rest and in transit. Sign-in is handled by Amazon Cognito; card payments by PayHere (we never see card numbers). Each company's data is isolated at the database level.
Retention
For as long as your account is active, then 90 days after cancellation so you can return or export, after which it is deleted. Invoices and payment records are kept as long as accounting law requires.
Your rights
You can export your data from the product, correct it there, and ask us to delete your account. Contact support@webdesigns.lk.
Cookies
The product uses browser storage only to keep you signed in, remember your preferences and run the register offline. The public site sets no tracking cookies.