Privacy Policy

When you apply: contact name, business name, email, phone, store type, city/district, and anything you write in the optional message field.

Once approved and onboarded: your business's legal name, PAN and VAT numbers, registered address, and phone — collected to issue compliant receipts and calculate VAT correctly.

In day-to-day use: the products, prices, and stock levels you enter; sales, receipts, and payment records; and staff accounts and roles you create for your own team.

Automatically: basic account/session information needed to keep you signed in securely (authentication cookies). We don't use third-party advertising trackers.

• To review and respond to enrolment applications
• To operate your store's point-of-sale, inventory, and reporting features
• To calculate VAT and print compliant receipts on your behalf, within the platform
• To contact you about your account — e.g. a billing issue, a security notice, or a product update
• To maintain the shared product catalogue (only the generic product info — name, brand, barcode — not your prices or stock)

We do not sell your information, and we do not share your business's sales, pricing, or inventory data with any other business on the platform.

Every business's sales, pricing, inventory, and customer data is isolated at the database level (row-level security tied to your account), not just hidden in the interface — another business's login cannot read your data even if they tried to query for it directly. Only the generic product catalogue (item names, brands, barcodes, suggested prices) is shared platform-wide, by design, so every store doesn't have to enter common products from scratch.

ByaparPOS is built on Supabase (a hosted Postgres database provider) and Resend (for transactional email). This means your data is stored and processed on cloud infrastructure outside Nepal, in a Supabase-operated data center in the Asia-Pacific region. Both providers are contracted to handle data only on our instructions and to maintain industry-standard security — they don't use your data for their own purposes.

While your account is active, we keep your data for as long as you use the platform. If your account is cancelled or terminated, we retain your business's data for 90 days (in case you want to return or need a final export), after which it is permanently deleted from our production systems. Enrolment applications that are never approved are kept for a reasonable review period and then deleted.

You can ask us to access, correct, export, or delete your business's data at any time by emailing support@byaparpos.com. Note that some sales/tax records may need to be retained for a period even after a deletion request, where Nepal's tax record-keeping requirements call for it.

Data is encrypted in transit. Access within your business is controlled by role (owner, manager, cashier, staff) so, for example, a cashier account can reach the till but not your reports or settings. Platform staff access to customer data is limited to what's needed to provide support or investigate an issue you've raised.

We use only the cookies necessary to keep you signed in securely. We don't use advertising or third-party tracking cookies.

ByaparPOS is a business tool and isn't directed at or intended for use by individuals under 18.

We may update this policy as the platform develops. We'll post the updated version here with a new "last updated" date.

Questions about this policy, or a data request: support@byaparpos.com.