Legal

Privacy Policy

Last updated: 21 April 2026

Contents

  1. 1. Overview
  2. 2. Information We Collect
  3. 3. How We Use Your Information
  4. 4. Third-Party Services
  5. 5. Data Retention
  6. 6. Data Security
  7. 7. Your Rights
  8. 8. Cookies
  9. 9. Governing Law
  10. 10. Contact Us

1.Overview

Qodepilot Software Engineering Studio ("Qodepilot", "we", "our", or "us") operates the truePOS software-as-a-service product at truepos.in. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully. By accessing or using truePOS you agree to the practices described here.

2.Information We Collect

  • •Account & Identity: Full name, business name, email address, mobile number, and GST Identification Number (GSTIN) collected during registration.
  • •Billing & Payment: Subscription plan, billing cycle, and invoice records. Card or UPI details are handled directly by Razorpay; we never store or process raw payment credentials on our servers.
  • •Usage Data: Pages visited, features used, session duration, and browser/device type, collected via server logs and analytics.
  • •Communications: Support tickets, emails, and chat messages you send to us.

3.How We Use Your Information

  • •Create and manage your truePOS account.
  • •Process subscription payments and issue GST-compliant invoices.
  • •Send transactional emails (login credentials, invoices, renewal reminders).
  • •Provide customer support and respond to inquiries.
  • •Improve and develop product features.
  • •Comply with legal obligations under Indian law (including GST Act and IT Act).

4.Third-Party Services

  • •Razorpay: Payment processing. Governed by Razorpay's Privacy Policy (razorpay.com/privacy).
  • •SendGrid / Twilio: Transactional email and SMS delivery.
  • •Microsoft Azure: Cloud infrastructure (servers, databases) hosted in India regions.
  • •Seq / Serilog: Internal application logging for error monitoring (no customer PII is logged).

5.Data Retention

We retain your personal data for as long as your account is active. After account termination, we retain financial records (invoices, payment history) for 7 years to comply with GST and income-tax regulations. Non-financial data is deleted within 90 days of account closure upon written request.

6.Data Security

All data is transmitted over TLS 1.2+. Databases are encrypted at rest using AES-256. Access to production systems is restricted to authorised personnel under role-based access control. We perform regular security audits and vulnerability assessments.

7.Your Rights

  • •Access: Request a copy of the personal data we hold about you.
  • •Correction: Request correction of inaccurate or incomplete data.
  • •Deletion: Request erasure of your personal data, subject to legal retention requirements.
  • •Portability: Request your data in a machine-readable format (CSV/JSON).

To exercise any of these rights, email [email protected] from your registered email address.

8.Cookies

We use essential cookies for session management and authentication, and analytics cookies (first-party) to understand usage patterns. We do not use third-party advertising cookies. You can disable cookies in your browser, but this may affect product functionality.

9.Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra.

10.Contact Us

For privacy-related queries, please contact: Privacy Officer — Qodepilot Software Engineering Studio Email: [email protected] Address: Mumbai, Maharashtra, India

Questions? Email [email protected]