Privacy Policy

1 Information We Collect

When you create an account or use Sarmaya, we collect the following types of information:

• Account information: Your name, email address, phone number, and business name provided during registration.
• Business data: Inventory records, sales invoices, purchase orders, customer records, supplier records, and financial transactions you enter into the system.
• Usage data: Log files, IP addresses, browser type, pages visited, and features used — to help us improve the product.
• Payment information: Billing details for subscription payments. We do not store full card numbers; payments are processed through secure third-party providers.
• Communications: Messages you send us via email or WhatsApp for support purposes.

2 How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the Sarmaya platform
• Process your subscription and send billing receipts
• Respond to support requests via WhatsApp or email
• Send product updates, feature announcements, and important notices
• Monitor and improve the performance and security of our systems
• Comply with applicable legal obligations in Pakistan

We do not use your business data for advertising, profiling, or sale to third parties.

3 Data Storage & Security

Your data is stored on secure cloud servers. We apply industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS) between your browser and our servers
• Encrypted storage for sensitive fields
• Automatic daily backups to prevent data loss
• Access controls — only authorized Sarmaya team members can access infrastructure
• Role-based access within your account — you control who on your team sees what

4 Data Sharing

We do not sell, trade, or rent your personal or business data to third parties. We may share limited data with trusted service providers who assist us in operating the platform, including:

• Cloud hosting and infrastructure providers
• Payment processors for subscription billing
• Email delivery services for transactional notifications

These providers are contractually required to handle your data securely and only for the purposes we specify. We may also disclose data if required by Pakistani law or a valid court order.

5 Cookies

Sarmaya uses cookies to keep you logged in, remember your preferences, and understand how you use the application. We use:

• Essential cookies: Required for the application to function — session management and authentication.
• Analytics cookies: Help us understand which features are used most so we can improve them.

You can disable cookies in your browser settings, but this may affect your ability to use certain features of the platform.

6 Your Rights

As a Sarmaya user, you have the right to:

• Access your data: Request a copy of the data we hold about you and your business.
• Correct your data: Update inaccurate information at any time through your account settings or by contacting us.
• Export your data: Request an export of your business data (products, customers, invoices, etc.) in a readable format.
• Delete your account: Request deletion of your account and associated data. We will fulfill this within 30 days, subject to any legal retention requirements.
• Opt out of marketing: Unsubscribe from non-essential communications at any time.

To exercise any of these rights, contact us at [email protected] or via WhatsApp.

7 Data Retention

We retain your data for as long as your account is active. If you cancel your subscription:

• Your data remains accessible for 30 days after cancellation so you can export it.
• After 30 days, your data is deleted from our active systems.
• Backups are purged within 90 days of account deletion.
• Some financial records may be retained longer if required by applicable Pakistani law.

8 Changes to This Policy

We may update this Privacy Policy from time to time as our product evolves. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify active subscribers via email or in-app notification

Continued use of Sarmaya after changes are posted constitutes acceptance of the updated policy.