Privacy policy

Last updated: 2026-11-04

Trellis POS is a point-of-sale and stock service run by StackTrellis ("we") for shops in Pakistan. This policy explains what information we hold, why, where it is kept and what control you have. It applies to the website, the web app and the Trellis POS Android app.

1. Who is who

The shop (the business that signs up) decides what it records about its own customers, suppliers and staff. For that information the shop is responsible, and we only keep and process it to run the service for the shop. For the information we collect about the shop itself (owner name, phone, subscription and payments) we are responsible.

2. What we store

• Account details: shop name and shop code, business type, city, owner name, mobile number, optional email, and a securely hashed password (we cannot read your password).
• Shop records you enter: products, prices, stock, purchases, sales, returns, customers and their udhaar (credit) balances, suppliers and payables, cash drawer shifts, expenses, repair jobs, installment plans, staff accounts and settings.
• Activity log: who did what and when inside the shop (for example a sale, a void or a price change), with the device and IP address, so the shop owner can check their staff's work.
• Subscription and payments: your plan, invoices, and payment proofs you upload (JazzCash, EasyPaisa or bank transfer screenshots and transaction IDs).
• Technical data: login sessions, device names and app versions for devices you sign in on, and error logs needed to fix problems.

We do not sell any of this information, and we do not use your shop's records for advertising.

3. Each shop's data stays in its own database

Every shop gets its own separate database. One shop's records are never stored together with another shop's, and the app checks on every request that a login belongs to the shop being opened. Staff of one shop cannot see another shop's data. Files you upload (logos, product photos, payment proofs, backups) are kept in a private folder for your shop and are only shown to people logged in to that shop.

4. Why we use it

• To run the service: show your stock and sales, print receipts, keep your khata, send reminders you ask for.
• To verify your phone number at signup with a one-time code, and to send account messages (welcome, renewal reminders, important notices) by SMS or WhatsApp.
• To bill your subscription and confirm your payments.
• To keep the service secure, find and fix errors, and check every night that each shop's stock and money figures still add up.

5. Messages to your customers

If you use udhaar or installment reminders, we send SMS or WhatsApp messages to your customers' numbers on your behalf. You are responsible for having your customers' permission to message them.

6. Who else sees it

Only the service providers needed to run Trellis POS: our server host, our SMS/WhatsApp provider (only the number and message text), and backup storage. They may only use the data to provide their service to us. We will disclose information if Pakistani law requires it.

Our support staff can open your shop only when you switch on "allow support access" in your settings, or when we record a written reason (for example to fix a fault you reported). Every support session is logged in your shop's activity log.

7. How long we keep it

Your shop's records are kept while your account exists. We never delete or lock away your data because a payment is late: an unpaid shop becomes read-only, so you can still view, print, export and back up. If you close your account, we give you a full export and then delete your shop's database after a retention period we tell you about in advance. Unfinished signups are deleted after a day; one-time codes are erased once sent.

8. Your control

• Download a full backup of your shop or export your data to Excel at any time from the app.
• Correct your account details in Settings, or ask us to.
• Ask us to close your account and delete your data.

9. Security

Connections are encrypted (HTTPS). Passwords and one-time codes are stored only as hashes. Login and code attempts are rate-limited. Backups are made every night and encrypted. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.

10. Changes and contact

If we change this policy we will update the date above and, for important changes, tell you in the app. Questions: support@stacktrellis.com.