Summary: Karobari Tajir collects your business and account information to run the platform. We do not sell your data to anyone. Your transaction data, customer records, and Udhaar accounts belong to you. We use AI only to generate insights that help your business.
01 — Who We Are
About Karobari Tajir
Karobari Tajir ("we", "us", "our") is an AI-powered retail operating system designed for small and medium merchants across Pakistan and emerging markets. Our platform provides QR-based billing, digital Udhaar (credit) ledger management, live inventory tracking, and AI-generated Urdu business reports.
Our registered contact address is Lahore, Punjab, Pakistan. For all privacy-related queries, email us at queries@karobaritajir.com.
02 — Information We Collect
What Data We Collect
We collect the following categories of information when you use Karobari Tajir:
Account & Identity Data:
- Your name, shop name, phone number, and email address
- City and business type
- Password (stored as a one-way cryptographic hash — never in plain text)
- Subscription plan and billing status
Business & Transaction Data:
- Sales transactions, bill amounts, items sold, and payment methods used
- Udhaar (credit) records including customer names, amounts, and repayment history
- Inventory levels, product names, purchase prices, and stock movements
- Distributor and supplier contact information you choose to store
Device & Usage Data:
- IP address, browser type, device type, and operating system
- Pages visited, features used, and time spent on the platform
- Error logs and crash reports for debugging purposes
Communication Data:
- Messages you send us through the contact form or email
- WhatsApp messages if you use our support channel
03 — How We Use Your Information
Purpose of Data Processing
We use the data we collect strictly to provide, improve, and support the Karobari Tajir platform. Specifically:
- To operate your account — create and manage your merchant profile, authenticate logins, and restore your data across devices
- To process transactions — generate QR codes, confirm payments, and log sales automatically
- To generate AI reports — our AI engine (powered by Google Gemini) analyses your business data to generate daily Urdu reports on WhatsApp
- To manage inventory — track stock levels, trigger low-stock alerts, and notify distributors
- To improve the platform — understand which features are used most, fix bugs, and build new features based on merchant needs
- To communicate with you — send transactional WhatsApp messages, billing reminders, and platform updates
- To comply with legal obligations — maintain records as required by applicable Pakistani law
We do not: sell your data to advertisers, share your customer list with third parties, use your business data for any purpose other than running your account and improving the platform.
04 — Data Storage & Security
How We Protect Your Data
All data is stored on secure servers with the following protections:
- All data transmitted between your device and our servers is encrypted using TLS 1.3
- Passwords are hashed using industry-standard bcrypt — we never store plain-text passwords
- JWT tokens are used for authentication and expire automatically
- Database access is restricted to authorised personnel only
- We perform regular security audits and vulnerability assessments
Your business data (transactions, Udhaar records, inventory) is backed up daily. In the event of a data breach that affects your personal information, we will notify you within 72 hours.
05 — Sharing of Information
When We Share Data
We share data only in the following limited circumstances:
- Service Providers: We use trusted third-party services to operate the platform — including cloud hosting, payment gateway APIs (JazzCash, EasyPaisa, Raast), SMS/WhatsApp APIs, and AI services (Google Gemini). These providers access only the minimum data needed to perform their function and are contractually bound to protect it.
- Legal Requirements: We may disclose data if required by Pakistani law, court order, or government authority.
- Business Transfer: If Karobari Tajir is acquired or merged with another entity, your data may be transferred as part of that transaction. We will notify you before this occurs.
We do not sell, rent, or trade your personal or business data with any third party for marketing or commercial purposes.
06 — Payment Data
How We Handle Payment Information
Karobari Tajir facilitates payments through JazzCash, EasyPaisa, Raast, and SadaPay. We do not store your customers' payment credentials or bank account details on our servers.
When a QR payment is made, the transaction is confirmed through the respective payment gateway's API. We log the transaction amount, method, and timestamp — but not the payer's full financial details.
For your own subscription billing, we store your plan selection and billing status. Payment processing for subscriptions is handled by our payment partner and is subject to their privacy policy.
07 — AI & Automated Processing
How We Use AI on Your Data
Karobari Tajir uses Google Gemini AI to generate your daily Urdu business reports. This involves sending aggregated summaries of your sales, inventory, and Udhaar data to the AI model for analysis.
We do not send raw customer names or personal contact information to the AI model. The AI output is a business report delivered to your WhatsApp — it does not make automated decisions that affect your legal rights.
You can disable AI reports at any time from your account settings.
08 — Your Rights
Your Data Rights
As a Karobari Tajir user, you have the following rights regarding your data:
- Access: Request a copy of all personal data we hold about you
- Correction: Update or correct inaccurate information in your account
- Deletion: Request deletion of your account and all associated data. We will process this within 30 days.
- Portability: Request an export of your business data (transactions, Udhaar, inventory) in CSV format
- Objection: Opt out of non-essential communications at any time
To exercise any of these rights, email queries@karobaritajir.com with your request. We will respond within 7 business days.
09 — Cookies & Tracking
Cookies and Local Storage
Our website and web application use the following:
- Essential cookies: To maintain your login session (JWT token stored in localStorage)
- Analytics: Basic anonymous usage analytics to understand platform performance
We do not use third-party advertising cookies. You can clear your browser's local storage at any time to log out and remove all locally stored session data.
10 — Children's Privacy
Age Restrictions
Karobari Tajir is a business platform intended for merchants aged 18 and above. We do not knowingly collect personal information from individuals under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.
11 — Changes to This Policy
Policy Updates
We may update this Privacy Policy as our platform evolves. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification to your registered email or WhatsApp
- Display a banner on the platform for 14 days after the change
Continued use of Karobari Tajir after a policy update constitutes acceptance of the revised terms.
12 — Contact Us
Privacy Queries
For any questions about this Privacy Policy or how your data is handled, contact us at: