Privacy Policy

1. Introduction & Overview

ByDukaan ("we", "our", or "us"), operating at https://bydukaan.com/, provides POS systems, retail and restaurant software, billing solutions, and bespoke business automation for businesses in Pakistan and abroad. We take your privacy and the security of your business data seriously. This Privacy Policy outlines our practices regarding data collection, usage, processing, and disclosure in compliance with applicable laws, including the Prevention of Electronic Crimes Act (PECA) and international data protection standards.

2. Information We Collect

When you register, place an order, download software, or communicate with us, we collect:

• Account & Contact Data: Name, business name, email address, phone/WhatsApp number, billing address, and account login credentials (hashed).
• Order & Transaction Records: Purchased products, license keys issued, invoice references, and payment status.
• License & Activation Telemetry: Hardware fingerprints (e.g. machine ID, MAC address hash, Windows OS version) sent by our software clients exclusively to validate license authenticity and enforce authorized terminal limits.
• Technical & Log Data: IP address, browser type, device information, access timestamps, and referrers for fraud prevention and rate limiting.

3. Payment Processing & Cardholder Security

All financial transactions are handled securely through our authorized Payment Gateway Providers (licensed and integrated with State Bank of Pakistan regulated rails including 1LINK, JazzCash, EasyPaisa, and Visa/Mastercard). Your payment interaction takes place either via encrypted redirect or secure server-to-server HMAC-SHA256 authenticated API requests directly to the payment infrastructure.

4. How We Use Your Information

• To issue cryptographic software licenses and deliver secure digital downloads.
• To generate tax-compliant digital invoices and sales records.
• To authenticate support tickets and provide remote AnyDesk installation assistance.
• To alert you regarding critical security patches, feature upgrades, or license renewals.
• To detect and prevent fraudulent license piracy, chargebacks, and automated abuse.

5. Data Sharing & Third Parties

We never sell, rent, or trade your personal or business information to third-party advertisers. We only disclose information to:

• Payment Processors: Authorized payment gateways and underlying banking channels for transaction verification and settlement.
• Email & SMS Services: Strictly for delivering order confirmations, license keys, and password reset tokens.
• Legal Authorities: Only when strictly required by a court order or authorized Pakistani law enforcement bodies under PECA.

6. Cookies and Tracking

We use strictly essential HTTP cookies to maintain your shopping cart state, session security, and CSRF token verification. We do not use third-party invasive behavioral tracking cookies.

7. Data Retention & Your Rights

You retain the right to inspect, correct, or request the deletion of your account information. Financial invoices and license allocation records are retained for a minimum of 5 years to comply with statutory accounting and corporate tax regulations in Pakistan.