Privacy Policy

This Privacy Policy explains how Dhando POS (“we”, “us”) collects, uses, stores and shares personal data when you visit dhandopos.in, use the app at app.dhandopos.in, or contact us. We follow the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

By creating an account or using the service, you agree to this policy and our Terms & Conditions.

1. Who we are

Dhando POS is a mobile billing and point-of-sale product for Indian shops. For personal data of account holders and website visitors, we act as the Data Fiduciary under the DPDP Act.

For names, phone numbers, GSTINs and sale records that you enter about your customers and suppliers, you are the Data Fiduciary. We process that data only to run the product for you.

Contact: contact@dhandopos.in · +91 94033 55883

2. Data we collect

We do not need your customers’ Aadhaar, PAN or bank passwords. Please do not store those in notes fields.

3. How we use it

• Provide GST billing, stock, udhaar, printing, reports and related features.
• Sync data across your devices when you are online, and keep a local copy on your phone for offline billing.
• Authenticate users, apply roles, and protect accounts.
• Bill subscriptions, send invoices and payment reminders for your Dhando plan (not your shop’s customers, unless you ask us to).
• Diagnose faults, prevent abuse, and improve the product.
• Answer support requests.
• Follow up on a lead form you submit (WhatsApp, call or email about Dhando POS).
• Meet tax, accounting and legal duties that apply to us.
• With consent, send product updates. You can opt out of marketing; service messages about billing or security may still go out.

We do not sell personal data. We do not use your shop’s sale ledger to advertise third-party products to your customers.

4. Your shop’s customers and suppliers

When you type a customer name, take a credit sale, or WhatsApp an invoice, that is your business record. You must have a lawful reason to keep that data (for example, to complete a sale or track udhaar).

You are responsible for what you enter, how long you keep it, and for honouring any request a customer makes of you. We will help you export or delete records that live in your Dhando account when you ask, subject to the Terms and any legal retention need.

5. Who we share data with

• Hosting and infrastructure — cloud servers used to run the app and backups.
• Payment gateways — to collect subscription fees.
• WhatsApp / messaging — only when you tap to send an invoice or chat with support. Message content then follows that app’s rules.
• AI processing — invoice images you submit for purchase import are sent to our AI provider solely to read line items. Do not upload documents you are not allowed to process.
• Analytics — Google Analytics on the marketing site (see Cookies).
• Ads measurement — Meta Pixel on dhandopos.in, so we can measure Facebook/Instagram ads and improve them. Hashed phone/name may be sent when you submit the lead form (advanced matching).
• Lead inbox — name, WhatsApp number, shop type and campaign parameters from the website form are stored in a Google Sheet used by sales. Google’s terms apply to that copy.
• Law — if a court, tax authority or other lawful request requires it.
• Business transfer — if we merge or sell the product, data moves with it under this policy or a successor notice.

Staff see customer data only as needed for support or operations, under confidentiality.

6. Storage, offline use and security

The app is offline-first. Bills and catalogues can sit on your device until the network returns, then they sync to our servers. Anyone with the unlocked phone can see that local copy — use a device lock.

We use HTTPS, hashed passwords, access controls and backups. No method is perfect. Tell us at once at contact@dhandopos.in if you think an account is misused.

Data is hosted for service delivery to users in India. If a vendor stores data outside India, we use contractual and technical safeguards consistent with applicable law.

Retention

• Account and shop data: while the account is active, and for a limited period after closure so we can complete billing, resolve disputes, or meet tax/legal holds (typically up to 8 years where Indian tax records require it).
• Support emails: as long as needed to finish the request, then routine archive.
• Website analytics: per the analytics tool’s settings, in aggregated form where possible.
• Marketing leads: while we are following up, then routine archive (or earlier if you ask us to erase).
• Invoice scans: to finish the import and for a short period to debug failures, then deleted from processing queues.

7. Your rights (DPDP Act)

If you are an individual whose data we hold as Data Fiduciary, you may:

• Access a summary of personal data we hold about you.
• Correct inaccurate data.
• Request erasure, unless we must keep it for law, billing, or security.
• Withdraw consent for optional processing (for example marketing).
• Nominate someone to exercise rights in case of death or incapacity, where the law allows.
• Grievance redressal (section 9 below).

Write to contact@dhandopos.in with the subject “Privacy request”. We may need to verify it is you. We aim to acknowledge within 24 hours and respond within the time the DPDP rules require.

Shop owners can correct or delete their own catalogue, contacts and invoices from the app at any time.

8. Cookies and similar tech

The marketing site shows a cookie banner on first visit. Until you tap Accept, we do not load Google Analytics. Meta Pixel (ads measurement) loads on dhandopos.in so Facebook/Instagram ads can be measured.

• Necessary — we store your choice (dhando_cookie_consent) in localStorage so the banner does not repeat. First-touch campaign parameters (dhando_visit) stay on your device so a lead form can include which ad brought you; they are sent to us only if you submit the form.
• Analytics — only after Accept. Google Analytics (property G-4DNQ0DJ4NZ) with IP anonymisation, to see which pages are useful.
• Ads — Meta Pixel (ID 1044409858649069). Page views are measured on visit. A Lead conversion fires when you submit the lead form; StartTrial when you tap Start free trial; Contact when you open WhatsApp. Meta hashes match keys such as phone.

Tap Only necessary to refuse analytics. You can clear site data in the browser to see the banner again.

The app uses local storage and IndexedDB on your device for login session, settings and offline bills. Clearing site data on the phone signs you out and can remove unsynced offline bills — sync while online before wiping the browser.

9. Children

Dhando POS is a business tool. It is not directed at children under 18. We do not knowingly create accounts for minors. If you believe we have a minor’s data, email us and we will delete it.

10. Changes

We may update this policy. The “Last updated” date will change. Material changes will be flagged in the app or by email where we have an address. Continued use after the update means you accept the new policy, to the extent the law allows.

11. Grievance officer