Privacy Policy

What we collect

From you (the merchant), when you sign up and use Counter:

• Name, email, phone number and business name, given at signup.
• Business data you enter: products, prices, stock levels, staff till PINs (stored as a one-way hash, never in plain text), stores/branches.
• Transaction data your till records: orders, line items, payment method, and any customer name/phone you add to a bill.

Your customers' data

If you record a customer's name and phone number on a bill — required by GST rules on bills over ₹50,000, optional otherwise — that data is stored under your account. You're the data controller for your customers' information; we process it on your behalf as a processor. Don't give us more customer data than you need to run your business.

Shoppers on online stores

When someone orders from a shop's online store, we collect their name, mobile number, optional email and delivery address to create the order, and share them with that shop so it can deliver. Payment details are entered on Razorpay's checkout and never reach Counter or the shop. The shop is the data controller for its customers; Counter processes their data on the shop's behalf. A shopper's cart and delivery details may be remembered in their own browser (local storage) to save re-typing on their next visit.

Analytics and cookies

We use cookies only to keep you signed in. Our public pages may use Google Analytics and the Meta Pixel to measure which ads and pages bring shops to Counter; these set their own cookies. We remember how you first found Counter (for example, which ad) in your browser's local storage and attach it to your account if you sign up.

How we use it

To run the service: authenticate you, keep your stock and sales figures accurate, generate invoices and credit notes, and show you your own dashboard. We don't sell your data or your customers' data to third parties, and we don't use it to train external AI models.

Where it's stored

Data is stored in a managed PostgreSQL database (Supabase) with row-level isolation between businesses — one merchant's data is never visible to another. [Operator: confirm and state your database's hosting region here once chosen — this affects data-residency claims.]

Third parties

We use Supabase for authentication and database hosting, Vercel for application hosting, Resend to deliver account emails, Sentry for error monitoring, and Razorpay to process subscription payments and online-store payments. We never store card or UPI details ourselves.

Your rights

You can export your products and sales yourself from Settings at any time, and ask us to delete your account's data through the contact form (or Help & support inside your backoffice). Deleting your account removes your business data; we may retain records required by tax law for the legally mandated period.

Grievance officer

As required under India's IT Rules, 2021: [Operator: name and contact details of your designated Grievance Officer go here before launch — required for any India-facing service handling personal data.]

Contact

Privacy questions: the contact form (or Help & support inside your backoffice).