Privacy Policy

Privacy at a glance

• Your business data is yours

  We use the records you keep in AgniPOS only to run the service for you. We never sell personal data or use your records for advertising.

• Permissions only for features

  The camera, microphone, Bluetooth and other permissions each power one feature, such as barcode scanning. You can refuse them or turn them off at any time.

• Encrypted connections

  The app talks to our servers over HTTPS only, and your login token is stored encrypted on your phone.

• Delete any time

  Ask from any browser, without reinstalling the app. We delete your account and data within 30 days.

  How to delete

1Who we are

AgniPOS is a point of sale and business management service made and run by Nyflextec, an information technology company based in West Bengal, India. In this policy, “Nyflextec”, “we”, “us” and “our” mean Nyflextec, and “you” means the person or business using AgniPOS.

This policy covers:

• the AgniPOS app for Android (package com.nyflextec.agnipos) and for other platforms where available;
• the AgniPOS web app and the servers that run AgniPOS for you;
• this website, and our sales and support channels: email, phone and WhatsApp.

For personal data about you and your account, Nyflextec is the data fiduciary (called the data controller in some countries). For information you store about other people, such as your customers or staff, see section 3. Our contact details are in section 18.

2Information we collect

Information you give us

• Account details: your name, mobile number (verified with a one-time password), email address, password (stored only in hashed form) and your role in the business.
• Business profile: business name, type and industry, address, GSTIN or other tax numbers, logo, and invoice settings such as the terms printed on your bills.
• Business records: products, categories, brands, units, prices, stock and warehouse data, sales and purchase invoices, returns, orders, expenses, cash, bank and cheque entries (including bank names, account numbers and IFSC codes you record), journal entries, coupons and reports.
• People you add: names, phone numbers, email and postal addresses, GSTIN, balances and transaction history of your customers, suppliers, employees, salespeople and delivery staff, plus the logins and roles you create for your staff.
• Photos you choose: product pictures and your logo, taken with the camera or picked from your gallery.
• Voice commands and help questions: the text of items you add by voice and of questions you ask the in-app help assistant (section 6).
• Payments: when you buy a plan, Razorpay processes the payment. We receive the transaction ID, amount, date, status and payment method type. We never receive or store your full card number, CVV, UPI PIN or net-banking password.
• Messages to us: what you send through the website contact form (name, phone, email, business type and message) or share with our team by email, phone or WhatsApp, including screenshots and files.

Information collected automatically

• Device and app details: device model, Android version, app version, language, and a device ID the app creates to keep your devices in sync.
• Sync signals: a Firebase Cloud Messaging token, so our server can tell the app when new data is ready to sync. These are silent data messages.
• Crash reports: when the app crashes or hits an error, Firebase Crashlytics records technical details: what failed in the code, device model, Android version, app version, and your internal AgniPOS user and business IDs. We don't add your name, phone number or business records to crash reports.
• Server logs: IP address, time, the feature requested and any errors, recorded by our servers to keep AgniPOS secure and fix problems.
• Website visits: your browser sends your IP address and browser details to us and to the services that deliver this website's fonts, icons and images (section 15).

Information kept on your device

AgniPOS works offline, so the app keeps a copy of your business data in its private storage on your phone or tablet, which other apps can't read. Your login token and app-lock passcode are stored encrypted.

If Android backup is turned on for your Google account, Android may include AgniPOS's offline data in that backup. We exclude your login token, passcode and saved sign-in details from it. If you lock the app with your fingerprint or face, Android checks it and only tells AgniPOS whether it matched. We never receive biometric data.

3Data you keep about other people

Businesses use AgniPOS to record their customers, suppliers and staff. For that information:

• the business decides what to record and why. It must have a lawful reason, give any notice the law requires and answer those people's requests. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), the business is the data fiduciary for that data;
• Nyflextec processes it only for the business, to provide AgniPOS, acting as its data processor;
• we don't use it for our own purposes: we don't contact those people, sell their data or use it for advertising.

If a shop that uses AgniPOS holds your details and you want them corrected or deleted, please ask the shop first. If you can't reach them, contact us and we'll help where we can.

Businesses that run their own server

Some businesses run AgniPOS on their own server or domain. Their business data is then stored on that server and controlled by the business. We access it only when the business asks us to install, update or support it.

4App permissions

AgniPOS asks for a permission when a feature needs it. Saying no only turns off that feature, and you can change your choice at any time in Android Settings › Apps › AgniPOS › Permissions.

AgniPOS doesn't read your contacts, call logs, SMS inbox, calendar or location.

5How we use information

• Run AgniPOS: create and secure your account, power billing, stock, accounts and reports, sync data between your devices, and print or share bills.
• Keep it reliable: back up data, fix crashes and bugs, and monitor performance and security.
• Support you: answer questions, install and set up AgniPOS, and give remote support when you ask for it.
• Handle billing: process plan purchases and renewals, issue invoices and keep accounting records.
• Talk to you: send one-time passwords, security alerts, service and renewal notices, and replies. We send product news and offers only if you agree, and you can opt out at any time.
• Protect everyone: prevent fraud, abuse and unauthorised access, and enforce our Terms.
• Improve AgniPOS: study usage in aggregated or de-identified form to decide what to build next.
• Follow the law: meet tax, accounting and other legal duties, and answer lawful requests from authorities.

We don't sell personal data, and we don't use your business records to advertise to you or your customers.

6Voice entry and the help assistant

Two optional features use Google's Gemini AI service:

• Voice entry at the POS. When you tap the microphone, your phone's speech-recognition service turns what you say into text. AgniPOS sends that text, for example “2 kg tomatoes 50 rupees”, to Gemini to work out the item, quantity and price.
• Help assistant. Questions you type into the in-app help assistant, and the conversation so far, are sent to Gemini to write an answer.

We don't send your customer lists, invoices or other records with these requests. Google processes the text under its Gemini API terms. Please don't type personal details into the help assistant. Both features are optional: you can type items instead, and the rest of AgniPOS works without them.

7Legal basis and consent

We use personal data:

• to provide the service you signed up for, under our Terms & Conditions;
• with your consent, for example for optional permissions and marketing messages;
• for legitimate uses the law allows, such as information you give us for a specific purpose, keeping AgniPOS secure and preventing fraud; and
• to meet legal obligations, such as tax and accounting rules.

Where we rely on consent, you can withdraw it at any time, as easily as you gave it. Withdrawing doesn't affect anything done before, and a feature may stop working without the data it needs.

8Who we share data with

We share personal data only in the cases below. Service providers work on our instructions and must protect the data they handle.

Other sharing

• Your team: people you add to your business see data according to the roles and permissions you give them.
• People you choose: when you share a bill or report by WhatsApp, email or another app, it goes to the person you pick, through that app.
• Professional advisers: our auditors, accountants and lawyers, under confidentiality, when needed.
• Authorities: when the law requires it, such as a court order or a lawful request from a tax or law-enforcement agency.
• A new owner: if Nyflextec merges, is acquired or reorganises, data may pass to the new owner, who must protect it as this policy says. We'll tell you before that happens.

We don't sell or rent personal data, and we don't share it with advertisers or data brokers.

9Data safety summary

The data the AgniPOS app collects, grouped the way Google Play's Data safety section groups it.

• Not collected: location, contacts, call logs, SMS messages, audio recordings, calendar, health data and web browsing history.
• Encrypted in transit: yes. All traffic between the app and our servers uses HTTPS.
• Deletion: you can ask us to delete your data. See Delete Account.

10How we protect data

• HTTPS encryption for all traffic between the app, the website and our servers.
• Login tokens and your app-lock passcode encrypted on your device.
• Optional app lock with a passcode or fingerprint.
• Role-based access, so each staff member sees only what you allow.
• Server access limited to authorised Nyflextec staff, with sensitive actions such as account deletion logged.
• Daily automated backups of our databases.

No system is completely secure. Keep your password and devices safe, and tell us straight away if you think someone has accessed your account. If a personal data breach affects you, we'll tell you and the Data Protection Board of India as the law requires, along with what we're doing about it.

11How long we keep data

12Your rights and choices

Under the DPDP Act and other laws that apply to you, you can:

• access a summary of your personal data and who we've shared it with;
• correct or update it (you can edit most details yourself in the app);
• erase it, or delete your whole account (see Delete Account);
• withdraw consent, for example by turning off a permission or unsubscribing from marketing;
• raise a grievance with our Grievance Officer (section 18) and, if you're not satisfied, complain to the Data Protection Board of India;
• nominate someone to exercise these rights for you if you die or become unable to.

If you're in the European Union, the UK or another region with similar laws, you also have the right to data portability, to object to or restrict some processing, and to complain to your local data protection authority.

How to ask: email support.nyflextec@gmail.com or WhatsApp +91 84484 49566 from your registered number. We'll confirm it's you and reply within 30 days.

13Deleting your account

You can delete your AgniPOS account and its data at any time, without reinstalling the app. The Delete Account page explains how, and what we must keep and for how long.

14Children

AgniPOS is a business tool for people aged 18 or over. It isn't meant for children, and we don't knowingly collect children's personal data. If you think a child has given us personal data, contact us and we'll delete it.

15Cookies and this website

• This website doesn't use advertising or analytics cookies.
• The AgniPOS web app uses essential cookies to keep you signed in and protect your session. Sign-in doesn't work without them.
• This website loads fonts from Google Fonts and Fontshare, icons from unpkg and photos from Unsplash. Those services receive your IP address and browser details so they can deliver the files.
• Links to WhatsApp, Razorpay, Google Play and other services take you to sites with their own privacy policies.

16International transfers

Your data may be stored or processed in India or in other countries, for example by Google for Firebase and Gemini. When data leaves India, we use providers that protect it with appropriate safeguards, and we follow any restrictions the Government of India sets on such transfers.

17Changes to this policy

We'll update this policy as AgniPOS and the law change, and show the new date at the top. If a change materially affects how we use your data, we'll tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it.

18Contact and Grievance Officer

For privacy questions, requests or complaints, contact Nyflextec's Grievance Officer. Please put “Grievance” in the subject line. We acknowledge grievances within 2 working days and resolve them within 30 days.

• Emailsupport.nyflextec@gmail.com
• Phone and WhatsApp+91 84484 49566
• AddressNyflextec, Kalyani Expy Rd, Kanchrapara, Chendua, West Bengal, India