Privacy Policy

Last updated: 10th September 2026

1.0 Overview & Scope

1.1 Operating Entity: POS Pharmacy Software ("POS Pharmacy", "we", "us", or "our") is developed, maintained, and operated by PAHINV. This policy outlines our data handling practices for dispensaries, pharmacies, and healthcare practices.

1.2 Applicability: This privacy policy applies to all editions of POS Pharmacy, including the standalone desktop Offline Setup and the multi-branch Online Cloud Setup.

2.0 Data Ownership & Confidentiality

2.1 Exclusive Customer Ownership: All commercial and patient records including drug inventories, batch numbers, supplier purchase costs, patient names, prescription images, and transaction histories remain the sole, exclusive property of the subscribing pharmacy.

2.2 Zero Data Monetization: We do not sell, rent, monetize, broker, or disclose your business records, stock figures, or dispensing metrics to drug distributors, manufacturers, advertising networks, or third-party brokers under any circumstance.

2.3 Access Restrictions: Support personnel may only inspect diagnostic logs or databases with explicit prior authorization from the pharmacy license holder for technical troubleshooting.

3.0 Information We Collect & Process

3.1 Account Information: To issue licenses and generate customer profiles, we collect the pharmacy business name, owner/manager name, email address, phone number, and physical store address.

3.2 License Verification Telemetry: Standalone desktop instances transmit machine hardware identifiers and license key tokens solely to verify activation validity and prevent software piracy.

3.3 Support Communications: Transcripts of emails, WhatsApp messages, error logs, and submitted screenshots sent during technical inquiries are retained for customer service records.

4.0 Offline vs Cloud Architecture

4.1 Offline Setup Boundary: For offline installations, 100% of operational data is stored on the local storage drive of the counter workstation. No transaction records, patient files, or sales figures are transmitted over the internet.

4.2 Online Cloud Setup Boundary: For cloud deployments, data transmitted between client devices (counter POS, tablet, mobile) and the cloud portal is secured with TLS 1.3 encryption. Each pharmacy tenant is logically isolated in dedicated database partitions.

5.0 Automated Cloud Backups & Retention

5.1 Backup Schedule: Cloud databases undergo automated daily backup snapshots at 5:00 AM (IST). All backup archives are encrypted with AES-256 before storage.

5.2 Rolling 7-Day Retention: Backup snapshots are retained on a rolling 7-day schedule. Snapshots older than 7 calendar days are permanently overwritten and purged automatically.

5.3 Local Export Rights: Pharmacy administrators may generate and download complete SQL or CSV exports of their data directly from the system settings at any time without fees.

6.0 Security Standards

6.1 Access Controls: POS Pharmacy enforces role-based access control (RBAC), distinguishing cashier permissions from administrator functions such as purchase price visibility and sales deletion.

6.2 Credential Protection: User passwords are encrypted using cryptographic hashing algorithms (argon2/bcrypt) with unique salts. Cleartext credentials are never stored or logged.

7.0 Contact & Inquiries

7.1 Privacy Desk: Inquiries regarding data protection, access requests, or compliance questions should be directed to:

POS Pharmacy by PAHINV
Email: info@pospharmacy.com

7.2 Policy Updates: Material changes to this policy will be communicated via the system announcement dashboard and updated on this page with a revised effective date.