Security at TajirPoint
Your sales, stock and customer records are the heart of your business. This page explains, plainly, what we do to protect them — and what we don’t claim. We take reasonable technical and organisational measures, but no system is 100% secure.
Encrypted connections
Traffic between your devices, our apps and our servers travels over HTTPS/TLS.
Hashed passwords
Passwords are stored as one-way hashes, never in plain text.
Per-user logins and roles
Every staff member gets their own login. Role-based permissions decide what each person can see and do.
Activity logs
Key business actions are recorded in activity and audit logs, so you can see who did what.
Regular backups
We back up data regularly so it can be recovered if something goes wrong.
Limited production access
Access to production systems is limited to authorised personnel who need it.
Keeps selling offline
The point of sale can keep recording sales during an internet outage and syncs them when the connection returns.
We don't store card numbers
Card payments are handled by Lemon Squeezy for subscriptions, or by the payment gateway a merchant connects.
1. How payments are handled
TajirPoint does not store full card numbers. Online card payments for TajirPoint subscriptions are processed by Lemon Squeezy, which acts as the merchant of record. When a merchant connects a payment gateway (for example Stripe or PayPal) to take payments from its own customers, the card details are handled by that gateway.
2. Your data: export and deletion
- You can export your data at any time from the export tools in the app — including when your account is read-only — or ask us at hello@tajirpoint.com.
- To close your account and have your data deleted, see how to delete your account.
- How we collect, use and share personal data is explained in our Privacy Policy.
3. What you can do
- Give each staff member their own login — never share passwords.
- Give people only the role and permissions they need, and remove leavers promptly.
- Use a strong, unique password for your owner account.
- Let offline sales sync before clearing browser data or resetting a device.
- Tell us straight away at hello@tajirpoint.com if you think someone has accessed your account.
4. Reporting a vulnerability
If you find a security vulnerability in TajirPoint, please email hello@tajirpoint.com with the subject “Security” and enough detail for us to reproduce it. We will acknowledge your report and work with you to fix it.
Please act in good faith: do not access, change or delete other people’s data, do not disrupt the service, and give us a reasonable chance to fix the issue before sharing it publicly. We do not currently run a paid bug bounty.
5. If something goes wrong
If a security incident affects merchants’ personal data, we will investigate, take steps to contain it, and notify affected merchants without undue delay where the law requires. You can reach us any time at hello@tajirpoint.com or on WhatsApp at +92 344 6800893.