Back to Home|
RamizSoftFOne Privacy
Privacy & Data Protection

Privacy Policy

Your trust and business privacy are paramount. Learn how RamizSoft and FOne safeguard merchant data, financial records, and end-customer information.

Last Updated: October 31, 2026·DPDP Act 2023 Compliant·256-Bit Financial Encryption

1. Introduction & Scope

RamizSoft (“RamizSoft”, “Company”, “We”, or “Us”) is committed to upholding the highest standards of data security, privacy, and confidentiality. This Privacy Policy describes how we collect, store, process, and protect information when you utilize RamizSoft Web services, the FOne (Finance in One) suite, mobile applications, point-of-sale systems, and associated cloud APIs.

This policy complies with the Digital Personal Data Protection Act, 2023 (India) and internationally recognized data privacy principles.

2. Information We Collect

We collect information strictly necessary to provide reliable point-of-sale and financial ERP software:

Merchant Account Details

Business trade name, owner name, business structure, email address, mobile phone number, and GSTIN.

Authentication Credentials

Cryptographically hashed passwords and one-way bcrypt hashed 4-digit staff PINs. We never store plain-text credentials.

Business & Transaction Records

Products, stock ledgers, tax invoices, purchase bills, expenses, and customer contacts inputted by your team.

Device & Session Identifiers

Device fingerprint, browser user-agent, and device friendly name used solely to enforce authorized multi-device till concurrency.

3. How We Use Your Information

RamizSoft processes your data solely for operational and service delivery purposes:

  • Facilitating instant checkout, receipt rendering, and tax calculation at your register tills.
  • Synchronizing inventory, invoices, and accounting entries across your authorized web browsers and mobile apps.
  • Transmitting automated transactional digital receipts (via WhatsApp or SMS) directly to your retail customers upon your instruction.
  • Enforcing license concurrency limits and protecting your organization from unauthorized credential sharing.
  • Diagnosing sync conflicts and providing dedicated merchant customer support.

4. Zero Data Selling Guarantee

Strict Non-Monetization Pledge:

RamizSoft does NOT sell, rent, license, or monetize your transaction data, pricing lists, or your customer lists to advertising networks, data brokers, competitors, or marketing companies. Your business data belongs 100% to your organization.

5. Encryption & Security Architecture

We deploy defense-in-depth architectural safeguards to protect your business records:

  • In-Transit Encryption: All web and API traffic is encrypted via TLS 1.3 / HTTPS with HSTS enforcements.
  • Credential Security: Passwords and 4-digit quick PINs are protected with salted bcrypt key derivation functions.
  • Tenant Isolation: Database records are strictly partitioned by organization ID (orgId), preventing any cross-tenant data leakage.
  • Session Management: Device fingerprinting protects against session hijacking and unauthorized register impersonation.

6. Third-Party Integrations & Service Disclosures

We disclose information only to vetted infrastructure service providers necessary to operate the service:

  • Cloud Hosting & Database Providers: Secure enterprise servers for data persistence and encrypted automated backups.
  • Transactional Communications Gateways: Official WhatsApp Business API / SMS gateways used strictly to deliver digital invoice receipts requested by merchants.
  • Payment Processors: Secure payment aggregators (e.g., Cashfree / Razorpay) for processing subscription renewals. RamizSoft never stores full credit or debit card numbers on its servers.
  • Legal Compliance: Where strictly compelled by enforceable court order or statutory legal process under Indian law.

7. Offline Storage & Local Caching

To ensure uninterrupted billing during broadband or cellular network drops, FOne caches product catalogs, draft invoices, and recent transaction IDs locally in your device’s encrypted local storage. This cached data remains strictly on your local hardware until synced to your organization cloud.

8. Data Retention & Permanent Deletion

Your transaction ledgers and customer lists are retained for the duration of your active subscription. You may download complete copies of your data (in Excel, CSV, and JSON formats) at any time.

Upon written request or organization termination, we provide a 30-day grace period to prevent accidental loss, after which all databases, staff PIN records, and uploaded assets are permanently deleted from active production servers.

9. Your Statutory Rights

Under applicable data privacy laws, you possess the right to:

  • Access & Portability: Request and export all personal and commercial data stored within your organization.
  • Correction & Rectification: Update inaccurate company metadata, tax identification, or employee details.
  • Revocation of Consent: Withdraw consent for optional communications or optional integrations.
  • Erasure: Request permanent account closure and erasure of personal data.

10. Data Protection Officer & Privacy Contact

For privacy inquiries, rights enforcement, or statutory notifications, contact our Data Protection Office:

RamizSoft — Privacy & Compliance Office

Email: privacy@ramizsoft.com

General Compliance: legal@ramizsoft.com

Address: Tamil Nadu, India