INVOIRY Platform Privacy Policy
This Privacy Policy sets forth how INVOIRY ("we", "our", or "the Platform") collects, isolates, encrypts, and processes store-level operational records, customer credit ledgers (Khata), electronic hardware identifiers (IMEI/Serial), and transaction logs across our multi-tenant cloud retail terminal.
Policy Sections
1. Enterprise Architecture & Architectural Isolation
INVOIRY operates as a multi-tenant business software service designed specifically for modern electronics stores, retail device dealers, repair terminals, and wholesale distributors. In our multi-tenant model, each registered business ("Tenant") is allocated an isolated database boundary governed by unique foreign keys, automated tenant scope middleware, and cryptographic session isolation.
2. Categories of Information Processed
To execute retail billing, thermal receipt printing, tax computations, and customer ledger management, INVOIRY processes the following data categories:
Store Business Profile
Store legal trade name, branch location, state, state code, GSTIN / Tax Identification number, counter contact numbers, custom invoice prefixes, and thermal receipt header remarks.
Hardware Identifiers (IMEI/Serial)
Electronic device specifications, brand, model, storage, color, hardware condition (New, Used, Refurbished), Primary IMEI 1, Secondary IMEI 2 (Dual-SIM), and manufacturer serial numbers.
Customer & Credit Ledger (Khata)
Customer full name, phone number, physical delivery address, state code, national identity proof references (Aadhaar / Voter ID), outstanding ledger credit balances, and counter payment settlements.
Financial Billing & Tax Records
Invoice dates, line items, MRP subtotal, applied cash discounts, CGST, SGST, IGST tax breakdown, payment method (Cash, UPI, Card, Bank, Credit), and receipt audit trails.
3. Barcode Scanner & Camera Stream Privacy
When using the box barcode / IMEI camera scanning feature on mobile or desktop terminals, INVOIRY requests browser camera permissions via the standard HTML5 `getUserMedia` API.
- Local Frame Processing: Optical recognition (1D Barcode, Code 128, EAN, QR Code) is executed strictly in memory inside the local web browser.
- Zero Video Transmission: Video feeds, snapshots, camera streams, and audio are never recorded, uploaded, or transmitted to INVOIRY servers or third parties.
- Instant Camera Teardown: As soon as a valid barcode is decoded or the scanner modal is closed, the hardware camera stream is explicitly stopped and released.
4. Tax Records & Immutable Financial Ledgers
In compliance with commercial accounting statutes and Goods and Services Tax (GST) regulations, generated invoices, sales ledgers, and credit notes are treated as historical legal audit documents. Once generated, invoices maintain consecutive numbering and cannot be silently erased. In accordance with tax retention mandates, billing and transaction records are preserved for the statutory minimum period required by retail laws (typically 6 to 8 years).
5. Encryption, Access Controls & Session Protection
Stored using modern salted cryptographic hashing algorithms (Argon2id/Bcrypt). Plaintext passwords are never logged.
Single-click `/lock` screen enables cashiers to step away from physical counters without terminating active sessions.
Sensitive operations (user creation, permission changes, stock deletions) are recorded in the central Super Admin Audit Log.
6. Store Owner Rights & Support Contact
As a registered store administrator, you maintain full control over your staff roles, permissions, dynamic form visibility, and customer ledger data. For queries regarding your data residency, export requests, or tenant administration:
INVOIRY Cloud Security & Privacy Operations
Email: privacy@invoiry.com • Support: support@invoiry.com
Platform Master Console: Platform Administration