Privacy Policy

This policy explains what information Future Stack collects when you use Future Stack POS, why, who else handles it, and the choices you have. We keep it short and specific to what the Service actually does.

1. Who is responsible

For your account details, Future Stack decides how they are used. For the business data you enter about your own customers, suppliers and staff, your business decides; we process it on your behalf, only to run the Service for you.

2. What we collect

• Account details: business name and type, contact details, and the names and email addresses of the owner and staff.
• Business data you enter: products, prices, stock, sales, payments, customers and suppliers (including names and phone numbers), expenses and reports.
• Security and usage records: sign-ins, the IP address and device used, and an activity log of important changes, so you can see who did what.
• Subscription records: your package and the payments you make to us.

We do not collect card numbers; payments to us are made outside the Service by Easypaisa, JazzCash or bank transfer.

3. Why we use it

• To provide the Service: sign you in, store and show your data, print receipts and reports.
• To keep it secure: detect misuse, limit repeated wrong passwords, and keep an activity log.
• To send emails you need: password resets, email confirmation, trial and payment reminders, and receipts.
• To support you when you ask for help.

We do not sell your data, show advertising, or use your business data for any purpose other than running the Service for you.

4. Who else handles it

• Hosting and database: DigitalOcean (servers in Singapore).
• Encrypted backups: Backblaze (stored encrypted; they cannot read the contents).
• Email delivery: Resend, only for the emails listed above.

We may disclose information if Pakistani law requires it, and only as much as required.

5. How long we keep it

• Your data is kept while your account exists. Read-only accounts keep their data so you can renew or export it.
• If you ask us to close your account, we delete your business data within 30 days, except records we must keep by law. Encrypted backups expire on their own schedule (up to 12 months for monthly copies).

6. Security

Every business's data is kept separate from every other business. Connections use HTTPS, passwords are stored only as secure hashes, staff access follows the permissions the owner sets, and backups are encrypted before they leave our server.

7. Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

8. Your choices

• The owner can see, correct and export the business's data in the app, and remove staff access at any time.
• You can ask us for a copy of your account details, or ask us to correct or delete them, by contacting us below.

9. Changes and contact

We will update this page when what we do changes, and tell owners about important changes. Questions or requests: the contact details on our website.