Privacy Policy

1.What we collect

Account information. When you register we store your name and email address. If you set a password we store only a bcrypt hash of it, never the password itself. If you sign in with Google we receive your name, email address and profile picture URL from Google, and store a record linking your Seltrax account to your Google account. We never receive your Google password.

Device information for notifications. If you allow notifications, the app registers a push token (an Expo push token) along with the platform name ("android" or "ios") so we can send you alerts about new orders. It is tied to your account so we can stop sending when you sign out or delete your account.

Content you create. Products, collections, prices, stock levels, blog posts, discount codes, supplier and purchase records, store settings, and any images you upload. Images are stored in object storage and served from a public URL, so treat anything you upload as publicly reachable by anyone with the link.

Photo library access. The app asks for permission to read your photo library only when you choose to add a product image, and only reads the images you pick. It does not scan your library, and it does not use the camera or the microphone.

Technical data. Our servers keep ordinary request logs — IP address, time, path, user agent — for security and debugging.

We do not collect your location, contacts, calendar, messages, or audio.

2.What we use it for

• To sign you in and keep your session valid
• To show your stores, orders, products and analytics
• To send push notifications about orders in your stores
• To send transactional email: verifying your address, resetting your password
• To operate, secure and debug the service, and to prevent abuse
• To meet legal and tax obligations

We do not sell your personal information, and we do not use it for advertising or share it with advertising networks.

3.Legal basis

Where the law of Pakistan applies, we process your data to perform our contract with you (running your store), on the basis of your consent (push notifications and photo access, each of which you can withdraw in your device settings), and for our legitimate interests in keeping the service secure.

4.Who else sees it

We use these providers, and only for the purposes listed:

We may also disclose information where the law requires it, or to protect the rights and safety of our users.

All traffic between the app and our API travels over HTTPS.

5.How long we keep it

We keep your account data for as long as your account exists. Request logs are kept for a short operational period. When you delete your account we follow section 7. We may retain billing and invoice records for as long as tax law requires, even after deletion.

6.Data about your customers

When you use Seltrax to run a store, the orders, customer names, addresses and contact details in that store are your data. You decide what is collected and why; we hold and process it on your instructions in order to provide the service. You are responsible for having your own privacy policy covering your shoppers, and for answering their requests about their data.

If you delete a store, or your account deletion removes a store, that store's customer and order records are deleted with it.

7.Deleting your account

You can delete your Seltrax account yourself, from the app: Profile → Delete Account. You will be asked to confirm, and to re-enter your password if your account has one.

Requesting deletion signs you out on every device straight away.

When the 30 days elapse we permanently delete:

• your name, email address, password hash and profile picture reference
• your linked Google account record
• your push notification tokens
• your access to every store
• any store where you were the only owner, together with its products, orders, customers, media, settings and history

A store that has another owner or administrator is not deleted. Ownership passes to them and the store keeps running.

Before deleting, the app shows you exactly which stores will be destroyed and which will be handed over, so you can transfer a store first if you want it to survive.

You can also ask us to delete your account by writing to privacy@seltrax.com. We may keep invoices and similar financial records where the law requires it.

8.Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to your data protection authority. Write to privacy@seltrax.com and we will respond within the period the law allows.

9.Security

Passwords are hashed with bcrypt. Sessions use signed tokens that we can revoke, and changing your password or requesting deletion signs out every existing session. Traffic is encrypted in transit with TLS. No system is perfectly secure, but we take reasonable measures appropriate to the risk.

10.Children

Seltrax is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to privacy@seltrax.com and we will delete it.

11.International transfers

Our providers operate internationally, so your data may be processed outside Pakistan. Where required, we rely on appropriate safeguards such as standard contractual clauses.

12.Changes

We will post any changes on this page and update the date at the top. If a change materially affects you, we will tell you in the app or by email.

13.Contact