Your data is yours.
Always.
We process your data to run your business — nothing more. Here's exactly what we collect, where we store it, who can access it, and how you get it back.
Our commitments to you
You own your data
Every transaction, customer record, and report belongs to you — not us. We are a processor, never a controller of your business data. Export everything, any time.
Isolated per merchant
Your data is stored in a logically isolated environment. No other merchant can access your records. Multi-tenant isolation is enforced at the database and API layer.
Data residency
Pakistan merchants: data stored in AWS ap-south-1 (Mumbai). UAE & Saudi: data stored in AWS me-south-1 (Bahrain). Your data never leaves your region without consent.
Right to deletion
Request full deletion of your account and all associated data at any time. We complete verified deletion within 30 days. Regulatory records are retained only as legally required.
Full data portability
Export your entire dataset — products, customers, transactions, and reports — in CSV, Excel, or JSON at any time. No lock-in, no extraction fees.
No data selling
We do not sell, share, or monetize your business data. We don't use your transaction data to train AI models or benchmark competitors without explicit consent.
What we store and why
A plain-English map of every category of data we hold, who can see it, and how long we keep it.
| Data category | Examples | Who can access | Retention |
|---|---|---|---|
| Business data | Products, prices, inventory, purchase orders, suppliers | You only | Until deletion requested |
| Transaction records | Sales, returns, payments, receipts | You + regulators (FBR/ZATCA) | 7 years (legal requirement) |
| Customer data | Names, phone numbers, khata balances | You only | Until deletion requested |
| Account data | Email, business name, billing info | Tajir Point (service delivery) | Account lifetime + 90 days |
| Usage analytics | Feature interactions, screen views | Tajir Point (anonymised) | 24 months |
Data stays in your region.
We don't move your data across borders without your explicit consent. All infrastructure is hosted on AWS, whose region-specific data centres are certified to ISO 27001.
Exercise your rights
Full legal detail is in our Privacy Policy. For security-related questions, see our Data Security page.