Privacy Policy

TajirPoint is a product of Anssol (SMC-Private) Limited, Islamabad, Pakistan (“we”, “us”). This policy covers:

• Merchants — businesses that sign up for TajirPoint, and their owners and staff who use it;
• Riders — delivery riders who use the rider app;
• Customers of merchants — people who buy from a shop that uses TajirPoint, including through its order page or shop website;
• Visitors and leads — people who visit tajirpoint.com, book a demo or contact us.

When the merchant is in charge. When a merchant enters data about its own customers, suppliers and staff into TajirPoint (for example names, phone numbers, addresses, orders and khata (credit) balances), the merchant is the controller of that data. We act as its processor: we store and process the data on the merchant’s behalf and on its instructions, to provide the service. The merchant’s own privacy notice applies to that data.

When we are in charge. Anssol (SMC-Private) Limited is the controller of merchant account data (who signed up, logins, billing), rider accounts, website visitor data, and the details people send us when they book a demo or contact us.

Account data

Name, email address, phone number, business name and type, city and country, and the logins and roles of staff users you create.

Billing data

Card payments for subscriptions are handled by Lemon Squeezy. We see your plan, the amount, the payment status and similar billing details — not your full card number. If you pay by invoice, we keep the invoice and payment records.

Business data you enter

Products, stock, prices, sales, purchases, expenses, customers, suppliers, ledgers, orders, deliveries and the other records you keep in TajirPoint. We process this on your behalf (see section 2).

Device and usage data

IP address, browser and device type, operating system and app version, app logs and error reports, and how features are used. We use this to run, secure and fix the service.

Location data

Only in the rider/delivery app while a rider is on shift, and on order pages when a customer chooses to share their location for delivery. See section 6.

Communications

Support emails, WhatsApp messages and other messages you send us, and our replies.

Website and lead data

When you book a demo or contact us: your name, phone/WhatsApp number, email, business details, preferred time and message. We also record how you found us — campaign parameters (utm_source, utm_medium, utm_campaign, utm_content), the Facebook click ID (fbclid), the landing page and the referring site. See section 5.

We use personal data to:

• create and run your account and provide the features you use;
• sync your data between devices and keep offline sales safe until they sync;
• process subscription payments, send invoices and manage renewals;
• send service messages — for example receipts, plan reminders and notices about your account;
• answer questions, give support and help move your data from your old system;
• keep TajirPoint secure, prevent fraud and abuse, and fix errors;
• understand how TajirPoint is used so we can improve it;
• follow up on demo requests and send product news or offers — you can unsubscribe at any time using the link in the email or by contacting us;
• comply with the law, including tax and accounting rules.

On tajirpoint.com we may use Google Analytics and Google Tag Manager to understand how the site is used, and the Meta Pixel to measure our Facebook and Instagram ads. During a visit we remember the campaign parameters you arrived with, so that if you book a demo we know which ad or link brought you. Details, and how to opt out, are in our Cookie Policy.

• Riders: the rider app collects the device’s location while the rider is on shift, so the merchant can assign and track deliveries. It is not collected when the rider is off shift.
• Customers ordering online: an order page may ask for your location to help with delivery. Sharing it is your choice.

Maps and location features use Google Maps Platform.

Some features use third-party AI model providers — for example AI phone ordering, the WhatsApp ordering assistant and AI image generation. These features are optional and are off unless a merchant switches them on. When they are on, the content needed for the feature (such as a customer’s call audio or messages, the menu or product details, or an image prompt) is sent to the provider to produce the result. Providers may include OpenAI, Google, OpenRouter and, for voice, ElevenLabs.

We use trusted service providers to run TajirPoint. They may process personal data for us, only to provide their service:

• Cloud hosting and infrastructure — our servers run on rented cloud servers; our websites are served via Vercel and Cloudflare.
• Email delivery — the email service of Zoho.
• Subscription payments — Lemon Squeezy.
• Payment gateways a merchant connects — for example Stripe or PayPal, chosen by the merchant to take payments from its own customers.
• Website analytics and advertising — Google Analytics, Google Tag Manager and Meta Pixel.
• Maps and location — Google Maps Platform.
• SMS, voice and WhatsApp messaging — for example Twilio, and WhatsApp/Meta for WhatsApp messages.
• Push notifications in the mobile apps — Google Firebase Cloud Messaging.
• Error monitoring — to detect and fix crashes and bugs.
• AI model providers — only for the optional AI features in section 7.

This list can change. An up-to-date list is available on request at hello@tajirpoint.com.

We share personal data only:

• with the service providers described above;
• with third parties a merchant chooses to connect (for example a payment gateway, courier, delivery platform or online store) — on the merchant’s instructions;
• between a merchant and the people it serves — for example a customer’s order details go to the shop, and delivery details go to the assigned rider;
• when the law requires it, for example in response to a valid request from a court or authority, or to protect the rights and safety of our users or TajirPoint;
• with your consent, or at your direction.

We and our providers may process data in countries other than yours — including Pakistan and countries where our providers operate, such as the EU, the United States and the United Kingdom. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

• Account and business data: while the account is open, and for a reasonable period afterwards. After an account is closed we delete or anonymise personal data — our target is within 90 days — except what we must keep by law.
• Demo and contact requests: up to 24 months, unless the person becomes a customer.
• Logs: typically up to 90 days.
• Billing records: as long as tax and accounting law requires.
• Backups are overwritten on their normal cycle.

To delete an account, see how to delete your account.

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), hashed passwords, per-user logins with role-based permissions, access to production systems limited to authorised personnel, regular backups and activity logs for key business actions. No system is 100% secure, so we cannot guarantee absolute security. Where the law requires, we will notify affected merchants of a personal data breach without undue delay. More on our Security page.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• ask us to delete it;
• receive a copy in a portable format (export);
• object to, or ask us to restrict, certain processing;
• withdraw consent at any time — for example unsubscribe from marketing emails using the link in the email;
• complain to the data-protection authority in your country.

To exercise a right, email hello@tajirpoint.com. We may need to confirm your identity. We reply within 30 days. Merchants can also export their data at any time from the app.

If you are in the European Union or the United Kingdom, the GDPR or UK GDPR applies. We rely on these legal bases:

• Contract — to provide TajirPoint to merchants and riders;
• Legitimate interests — to secure and improve the service, prevent fraud, and follow up on demo requests and business enquiries;
• Consent — for non-essential cookies and, where required, marketing messages;
• Legal obligation — for example to keep tax and accounting records.

Merchants who need a Data Processing Agreement for their customers’ data can request one at hello@tajirpoint.com.

Anssol (SMC-Private) Limited is based in Pakistan. We handle personal data consistently with the Prevention of Electronic Crimes Act 2016 (PECA) and any other data-protection law that applies to us.

The shop you bought from controls your data in TajirPoint and is the right place to send requests about it. If you contact us instead, we will pass your request to that merchant and help them respond.

TajirPoint is a service for businesses and is not directed at children under 16. Our website is not intended for children under 13. We do not knowingly collect children’s personal data; if you think we have, contact us and we will delete it. Merchants must not use TajirPoint to collect children’s data unlawfully.

We use cookies and similar storage on our website, web app and order pages. See our Cookie Policy for the details and your choices.

We may update this policy from time to time. The date at the top shows when it last changed. If we make material changes, we will tell merchants by email or in the app.

Anssol (SMC-Private) Limited, Islamabad, Pakistan
Email: hello@tajirpoint.com
WhatsApp: +92 344 6800893