Privacy Policy & Terms of Service

Welcome to InstaMunim ("we," "our," "us"). We provide an AI-powered Smart POS & Billing Solution designed for micro-retailers, restaurants, cafes, kirana stores, and small businesses (the "Service"). This Privacy Policy explains how we collect, use, safeguard, and disclose your business and personal information when you access our Web application or Android mobile application.

1. Information We Collect

We collect information provided voluntarily by merchant owners during account setup and routine daily POS billing usage:

• Account & Owner Details: Mobile phone number, business name, store logo, address, and login security credentials.
• Business & Tax Details: GSTIN number, custom item prices, category settings, and UPI ID for payment QR code generation.
• Transaction & Customer Ledger Data: Customer contact numbers, customer names, billing item lists, prices, payment types (Cash, Online, Swiggy, Zomato, Udhaar), and expense ledgers.

2. Device Permissions

Our Android mobile app and Web application request specific browser and device permissions strictly to operate core application features:

• Camera Access: Used exclusively for real-time barcode scanning of retail items and QR code parsing for instant checkout. Camera video feeds are processed locally in memory on your device and are never recorded, saved, or uploaded to external servers.
• Local Storage: Used to temporarily store offline cart sessions, UI preference tokens, and login states for fast application loading.

3. Data Security & Encryption Standards

We implement industry-standard technical and organizational security measures to prevent unauthorized access, data loss, or disclosure:

• Encryption in Transit: All data transmissions between your app and cloud servers are encrypted using 256-bit SSL/TLS (HTTPS).
• Encryption at Rest: Account databases and sales ledgers hosted on cloud enterprise infrastructure (Supabase PostgreSQL) are encrypted at rest using AES-256 encryption.
• Row-Level Security (RLS): Strict database policy isolation ensures that each merchant's data is only accessible via their authenticated store credentials.

4. Third-Party Services & Ad Networks

We do not sell, rent, or trade merchant business records or customer transaction data to third-party data brokers. We integrate with select trusted infrastructure and monetization SDKs:

• Supabase Cloud Infrastructure: Database and authentication service to securely store, back up, and sync store data across devices.
• Google AdMob / Advertising Partners: Free tiers of our mobile application may display non-intrusive advertisements served by Google AdMob. Ad providers may collect anonymous device advertising identifiers (GAID) and IP addresses to serve personalized or contextual ads in compliance with Google Play Policies.

5. Data Retention & Instant Account Deletion

You maintain 100% control over your store data. Data is retained as long as your account remains active.

• In-App Self Account Deletion: You can permanently delete your store account and erase all transaction data at any time inside the app by going to Settings > Account Security > Delete Account.
• Immediate Hard Purge: Executing an account deletion permanently purges all store profiles, sales receipts, customer ledgers, inventory lists, and mobile credentials from our servers. This action is irreversible.
• Web Account Deletion Link: Users can also request account deletion on our website or by contacting support at Instamunim@gmail.com.

6. Limitation of Liability & Disclaimer of Warranties

InstaMunim is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied.

• InstaMunim shall not be held liable for indirect, incidental, special, or consequential damages resulting from data loss, network outages, device hardware failures, or user-initiated data resets.
• Merchants are encouraged to regularly export monthly sales reports and customer ledgers as PDF/Excel backups for offline record retention.

7. Children's Privacy

Our Service is intended exclusively for commercial business owners and individuals aged 18 years and older. We do not knowingly collect personal information from children under 13.

8. Contact Us

If you have any questions, security inquiries, or data protection requests regarding this policy, please contact us: