Privacy Policy
Last updated: July 2026
XpertSummit (“we”) operates XpertPOS for Pakistani businesses. This policy explains what we collect, why, and your choices.
Information we collect
Account and profile data (name, email, business name), operational data you enter (products, customers, vouchers, POS sales), support messages, and technical logs (IP, device, audit events). Sensitive fields such as CNIC or bank details are encrypted at rest where collected.
How we use data
To provide the service, authenticate users, enforce tenant isolation, generate reports, send transactional email, improve reliability, and comply with law. We do not sell your business ledger data.
Isolation & security
Tenant data is isolated using PostgreSQL row-level security and application controls. Production deployments use encrypted transport, secrets management, and append-only audit trails derived from our event stream.
Cookies & analytics
The marketing site may use essential cookies and privacy-respecting analytics. The authenticated app uses session and security cookies required for login and MFA.
Third parties
We use infrastructure providers (hosting, email delivery, captcha verification) under data-processing terms. Payment references (JazzCash, EasyPaisa, Raast) are stored as you configure them — we do not store raw card numbers.
Retention & rights
We retain data while your account is active and as needed for backups, audit, and legal obligations. You may request export or deletion subject to verification and lawful retention requirements. Contact us via the Contact page.