Last Updated: October 30, 2026
1. Introduction
Welcome to SmartLexa ("we", "our", "us"). We are committed to protecting your privacy and handling your data transparently. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS POS platform.
By using our Service, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Information You Provide
Account Registration:
- Company name, owner name, and business details
- Email address and phone number
- Password (encrypted using bcrypt)
- Billing and payment information
- Business address
Business Data:
- Product and inventory information
- Customer records (names, contacts, purchase history)
- Supplier information
- Employee details
- Sales and transaction records
- Financial and accounting data
Payment Information:
- Transaction IDs from EasyPaisa, JazzCash, or Bank
- Payment screenshots (for verification)
- We do NOT store your card numbers or PINs
2.2 Information We Collect Automatically
- IP address and location (city/country level)
- Browser type and version
- Device type (desktop, mobile, tablet)
- Operating system
- Pages visited and time spent
- Login times and session duration
- Referring URLs
2.3 Cookies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze usage patterns
- Improve the Service
You can disable cookies in your browser settings, but some features may not work properly.
3. How We Use Your Information
3.1 To Provide the Service
- Create and manage your account
- Process sales and transactions
- Generate invoices and receipts
- Provide reports and analytics
- Enable features specific to your business type
3.2 To Communicate
- Send important account notifications
- Respond to support requests
- Send billing and subscription updates
- Inform about new features (you can opt-out)
3.3 To Improve the Service
- Analyze usage patterns
- Fix bugs and technical issues
- Develop new features
- Personalize user experience
3.4 To Ensure Security
- Detect and prevent fraud
- Prevent abuse and spam
- Protect against unauthorized access
- Comply with legal requirements
4. Data Sharing and Disclosure
4.1 We Do NOT Sell Your Data
We never sell, rent, or trade your personal or business data to third parties for marketing purposes.
4.2 When We May Share
We may share your information with:
| Recipient |
Purpose |
Data Shared |
| Payment Processors |
Process payments |
Transaction amount, email |
| Email Service Providers |
Send emails |
Email address, name |
| Cloud Hosting |
Store data |
Encrypted data |
| Analytics Providers |
Improve service |
Anonymized usage data |
| Law Enforcement |
Legal compliance |
As required by law |
5. Data Security
5.1 Security Measures
We implement industry-standard security measures:
- Encryption: SSL/TLS for data in transit, AES-256 for data at rest
- Password Hashing: Bcrypt with salt
- Access Control: Role-based permissions
- Monitoring: 24/7 security monitoring
- Backups: Daily encrypted backups
- Firewalls: Protection against attacks
5.2 Your Responsibility
You are responsible for:
- Keeping your password confidential
- Logging out from shared devices
- Reporting suspicious activity immediately
- Ensuring your employees follow security practices
5.3 Data Breach Notification
In case of a data breach affecting your data, we will notify you within 72 hours via email and provide details of the breach and remediation steps.
6. Your Rights
6.1 Access Your Data
You can request a copy of all data we hold about you and your business at any time.
6.2 Update Your Data
You can update your account information from your dashboard settings.
6.3 Delete Your Data
You can request deletion of your account and data. We will delete data within 30 days, except:
- Data required for legal compliance
- Data needed for dispute resolution
- Financial records for tax purposes
6.4 Export Your Data
You can export your data in CSV, Excel, or PDF format at any time from your dashboard.
6.5 Opt-Out
You can opt-out of marketing emails using the unsubscribe link in the footer of any marketing email.
7. Data Retention
7.1 Active Accounts
We retain your data as long as your account is active.
7.2 Cancelled Accounts
After cancellation:
- First 30 days: Data retained for reactivation
- After 30 days: Data permanently deleted
7.3 Legal Requirements
Some data may be retained longer if required by law (e.g., financial records for 7 years for tax purposes).
8. Children's Privacy
Our Service is not intended for children under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
9. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We recommend reading their privacy policies.
10. International Data Transfers
Your data may be transferred to and processed in countries other than Pakistan. We ensure appropriate safeguards are in place to protect your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be:
- Posted on this page
- Announced via email to registered users
- Effective 30 days after posting (for material changes)
12. Contact Us
If you have questions about this Privacy Policy or your data, contact us:
- Company: SmartLexa
- Owner: Mian Moeez
- Email: privacy@smartlexa.com
- Phone: +92 303 6622626
- WhatsApp: +92 303 6622626
- Address: Eid Gah Road, Faisalabad, Pakistan
13. Compliance
We comply with:
- Pakistan's Prevention of Electronic Crimes Act (PECA) 2016
- General Data Protection Regulation (GDPR) principles
- General Data Protection Regulation (GDPR) principles
Your privacy is our priority. We are committed to protecting your data and being transparent about our practices.