1. Who We Are
ZekiSales is a cloud-based Point of Sale and ERP platform operated by ZekiTech (Private) Limited, incorporated in Sri Lanka (Registration No. PV 12345). Our registered address is 42 Galle Road, Colombo 03, Western Province, Sri Lanka.
When this policy says "ZekiSales", "we", "us", or "our", it refers to ZekiTech (Private) Limited.
2. Data We Collect
Account data: Name, email address, phone number, business name, and billing address provided when you register.
Business data: We do not collect or access your customer details, sales transactions, sales amounts, inventory reports, financial records, supplier information, or product costs. To help you get started faster, we only collect product name, category name, and units — so we can offer predefined products tailored to your shop category and provide a smoother setup experience.
Usage data: Browser type, IP address, pages visited, time spent, and feature interactions — collected automatically via logs and analytics tools.
Payment data: We do not store card numbers. Payments are processed by a PCI-DSS certified payment gateway. We only store a transaction reference and last four digits for your records.
3. How We Use Your Data
We use your data to: provide and improve the ZekiSales platform; process your subscription payments; send transactional emails (receipts, password resets, system alerts); respond to support requests; and comply with legal obligations under Sri Lankan law.
We do not sell your data to third parties. We do not use your business data to train AI models by default (user can opt-in to enable AI features) or benchmark against other customers.
4. Data Sharing
We share data only with: (a) sub-processors who help operate our platform (cloud hosting, email delivery) under strict data processing;
A current list of sub-processors is available on request by emailing [email protected].
5. Data Retention
We retain your account and business data for as long as your subscription is active, plus 90 days after cancellation to allow data export. Anonymised, aggregated usage statistics may be retained indefinitely.
6. Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We perform daily backups with off-site replication. Access to production systems is limited to authorised personnel and protected by multi-factor authentication.
7. Your Rights
You have the right to access, correct, or delete your personal data. To make a request, email [email protected]. We respond within 14 business days. You may also export all your business data at any time from your account settings.
8. Cookies
We use cookies to maintain your login session and measure platform performance. See our Cookie Policy for full details.
9. Changes to This Policy
We will notify you by email at least 14 days before any material change to this policy. Continued use of ZekiSales after the effective date constitutes acceptance.
10. Contact
For privacy questions or requests: [email protected] or by post to ZekiTech (Private) Limited, 42 Galle Road, Colombo 03, Sri Lanka.