Legal
Privacy Policy
Last updated: 5 October 2026
This policy explains what information ZexPOS ("we", "us") collects when you use our website (zexpos.com), the ZexPOS web app and the ZexPOS POS apps for Windows, Android and iOS, how we use it, and the choices you have. If you have a question, write to support@zexpos.com.
Who is responsible for what
ZexPOS is used by businesses ("customers") to run their shops. We are responsible for the information about the businesses and people who hold ZexPOS accounts. The records a business keeps in ZexPOS about its own customers, suppliers and staff (for example a customer's name and phone number on a sale) belong to that business: we store and process them on its behalf and only to provide the service. If you are a customer of a shop that uses ZexPOS, contact that shop about your information.
Information we collect
Account information
- Business details you give us when you sign up or in settings: business name, address, phone, email, logo, tax numbers and currency.
- For each user: name, username, email address, phone (optional), role and assigned branches, and a password, which we store only as a secure hash.
Business data you enter
Products, prices, stock, sales, receipts, returns, purchases, expenses, accounting entries, and the customer and supplier records your business adds. We use this data only to provide ZexPOS to your business.
Subscription payments
When you pay for a plan, the payment is made through a payment provider (such as SSLCommerz, bKash or Stripe) or by a manual method such as a bank transfer. We receive the result of the payment: amount, currency, date, status and the provider's transaction reference. We never receive or store full card numbers or mobile wallet PINs. The payment provider handles them under its own privacy policy.
Security and usage records
- Sign-in records: the time, IP address and browser or device of each sign-in, failed attempt and sign-out, to protect accounts and investigate misuse.
- An activity log of changes made in an account (for example who edited a product or a sale), which the business can see.
- Ordinary server logs (IP address, requested page, time), used to keep the service running and secure.
The POS apps
The apps keep the following on the device itself:
- your sign-in token, the selected branch and app settings, including receipt printer settings;
- a copy of your product catalogue, customers, taxes and payment methods, so the app works offline;
- sales made while offline, until they are uploaded to your account.
Signing out removes the catalogue copy and sign-in token. Sales that have not been uploaded yet stay on the device so they are not lost, and are uploaded the next time that cashier signs in. To check for updates, the app sends its platform and version number to our server.
The apps ask for these permissions, and use them only as described:
- Camera (Android and iOS): to scan barcodes. Images are processed on the device and are not stored or sent anywhere.
- Bluetooth / Nearby devices: to find and print to Bluetooth receipt printers.
- Location (Android 11 and older only): Android requires it for Bluetooth scanning. The app does not read or store your location.
- Local network: to find and print to network receipt printers.
- USB: to print to USB receipt printers.
- Install apps (Android): to install updates you choose to download.
The apps contain no advertising, and no analytics or tracking tools.
Cookies
The website and web app use only the cookies they need to work: a session cookie that keeps you signed in, a security token that protects forms, and a cookie that remembers your company code on that browser for up to a year so you don't have to type it each time. We don't use advertising or analytics cookies. Our pages load the Plus Jakarta Sans font from Google Fonts, so your browser connects to Google's servers, which receive your IP address.
How we use information
- To provide, maintain and improve ZexPOS, including syncing sales from the POS apps.
- To manage your subscription, take payments and send receipts.
- To send service emails, such as trial and subscription reminders, invoices your business sends to its customers, and low-stock alerts you turn on.
- To keep accounts and the service secure and to prevent fraud and abuse.
- To answer your support requests.
- To meet legal, tax and accounting obligations.
We do not sell your information, and we do not use your business data for advertising.
Who we share it with
We share information only with:
- service providers who help us run ZexPOS: our hosting provider, our email provider, and payment providers for subscription payments, each only for that purpose;
- authorities, when the law requires it, or when needed to protect the rights and safety of our users or of ZexPOS;
- a buyer or successor, if ZexPOS is sold or merged, under this policy.
Inside an account, the business decides which staff can see which branches and screens.
How we protect it
Information is sent over encrypted connections (HTTPS). Passwords are stored as hashes, and payment gateway keys are encrypted. Each business's data is kept separate from every other business's. App sign-in tokens expire, and a deactivated user is signed out at once. No system is perfectly secure, but we work to protect your information and will tell affected customers about a breach as the law requires.
How long we keep it
We keep account and business data while the account is active. When a business asks us to close its account, we delete its data, except records we must keep by law (such as subscription payment records) and copies in backups, which are overwritten over time. Sign-in records and server logs are kept only as long as needed for security.
Your choices and rights
You can see and correct most of your information yourself in ZexPOS, and export many records from the reports. To ask for a copy of your information, its correction or deletion, or to object to how we use it, email support@zexpos.com from the address on the account. Depending on where you live, you may also have the right to complain to your data protection authority.
Children
ZexPOS is a business tool and is not meant for children. We do not knowingly collect information from anyone under 16.
Changes to this policy
If we change this policy, we will update the date at the top of this page, and tell account owners by email or in the app before important changes take effect.
Contact
ZexPOS · support@zexpos.com · zexpos.com