Privacy Policy
Our commitment to corporate data protection, offline-first system security, and customer privacy across all software applications and our official WhatsApp AI Sales & Support Agent.
Last Updated: October 7, 2026
At Chishty Smart Solutions, we prioritize the protection and security of your corporate transaction databases, inventory catalogs, employee records, client accounts, and digital communications. This document outlines how we collect, store, process, and secure your systems data when you license our POS or custom ERP applications, interact with our website (https://www.chishtysmartsolutions.com), or converse with our official WhatsApp AI Sales & Support Agent.
Part I: POS & Custom ERP Software Standards
1Data Storage & Local Caching
When using our offline-first applications, all transaction queues and credit logs (Khata logs) are saved locally on your physical device using secure SQLite database instances. If cloud synchronization is activated, this data replicates securely via encrypted SSL/TLS pathways to our cloud server hosted on certified datacenters.
2Customer Database Security
We do not share, sell, or disclose your customer directories, sales histories, ingredients recipe data, or billing ledgers to any third-party marketing entities. All database access credentials are owned and managed solely by your authorized system supervisors.
3Local Hardware Isolation
Our universal hardware integration drivers (for scales, barcode printers, biometric logs, and card swipers) run completely in your private network container. No sensitive credentials or biometric profiles are transmitted or saved on public registries.
4Compliance Audits
We compile granular chronological audit trails showing precisely which system terminal or employee account processed modifications, discounts, or voids to prevent unauthorized administrative alterations.
Part II: WhatsApp AI Sales & Support Agent & Digital Platforms
5WhatsApp Business Platform / Meta
Chishty Smart Solutions integrates with the official Meta / WhatsApp Business Platform (Cloud API) to communicate with customers, send service updates, and provide responsive technical assistance. Messages sent to or received from our official WhatsApp profile (+92 300 6392025) transit across Meta's telecommunication infrastructure subject to Meta's Business Messaging Terms, privacy policies, and technical protocols.
6WhatsApp Customer Messages and Conversation History
When you interact with our WhatsApp line, we receive and store inbound customer messages, inquiries, questions, and timestamped conversation history. This conversational context is necessary to accurately resolve technical questions, preserve service history across interactions, ensure consistency in customer service, and facilitate follow-up communication.
7Customer Phone Number and WhatsApp Profile Information
We capture your mobile/WhatsApp telephone number and public WhatsApp profile details (such as your display name or verified business tag as transmitted by the WhatsApp API). We use this identification solely to identify your account, personalize responses, and reference past support tickets.
8Business Name/Type, City, Service Interest, Demo & Pricing Requests
Through website forms or WhatsApp chats, you may voluntarily share organizational data including your business name, industry type (e.g., retail mart, restaurant, pharmacy, distribution, manufacturing), physical city or operating region, specific service interest (e.g., POS licensing, custom ERP development, website design, mobile app), and concrete requests for live system demos, tailored pricing quotations, or technical support tickets.
9. AI-Assisted Processing Through Google Gemini
Our WhatsApp agent utilizes Google Gemini AI models hosted server-side to comprehend incoming conversational messages, classify inquiry categories, formulate accurate replies based on our verified product knowledge base, and prepare immediate quotations. Customer messages are passed to Google Gemini APIs securely over encrypted server-to-server connections solely to generate contextual conversational responses. Your personal messages are not sold or utilized by us for unauthorized third-party training.
10Supabase Data Storage
Lead records, conversation transcripts, system blueprint requests, and support metadata are stored in hardened Supabase PostgreSQL cloud databases. Supabase implements database-level encryption at rest, Row Level Security (RLS) policies, SSL connection requirements, and regular point-in-time backups to prevent unauthorized physical or electronic data interception.
11Vercel Hosting and Server Processing
Our web applications, webhook endpoints, and API proxies are hosted and run on Vercel's global edge infrastructure. Incoming WhatsApp webhook events and form payloads are routed through Vercel serverless functions equipped with enterprise DDoS mitigation, automated TLS certificates, and ephemeral computational runtimes.
12Lead and CRM Data
Prospective customer information captured via WhatsApp or web forms is logged into our internal CRM management workflows. This data enables our technical account managers to deliver customized system proposals, follow up on pending demo bookings, prepare software licenses, and track customer satisfaction.
13. Human Handover
While our WhatsApp agent offers 24/7 automated assistance, users may request escalation to a human staff member at any time. Simply message “Human”, “Support Representative”, or “Talk to an Engineer”, and our system will route your conversation thread to our human engineering and customer care team during regular business hours (Monday – Saturday: 09:00 AM – 06:00 PM PKT).
14Data Retention
We retain conversational data, leads, and customer service tickets only as long as necessary to fulfill commercial, technical support, warranty, fraud prevention, and statutory accounting purposes. When records are no longer required or upon a validated customer deletion request, data is securely pruned, deleted, or irreversibly anonymized.
15Data Security
We employ comprehensive technical and organizational security controls, including HTTPS / TLS 1.3 encryption across all network transfers, authenticated administrative console access with multi-factor authentication, strictly restricted environment API keys, least-privilege database permissions, and continuous operational audit logging.
16Data Sharing
We do not disclose your personal details to outside parties except to:
- Authorized employees and contracted software engineers who need access to resolve your inquiries;
- Our vetted cloud service providers (Meta, Google, Supabase, Vercel) bound by confidentiality and service agreements;
- Law enforcement or regulatory authorities when strictly required by enforceable legal process or governing laws.
18WhatsApp Messaging & Customer Service Windows
Our WhatsApp communication adheres strictly to Meta's Business Messaging Policies. When you message us, a standard customer service session window opens during which our automated agent and support personnel may respond. Outbound notifications outside standard windows are limited to pre-approved WhatsApp message templates regarding explicit service transactions or appointment updates for which you have consented.
19User Rights & Data Correction Requests
You retain the right to confirm whether we hold your personal information, obtain a summary of your stored data, rectify outdated or inaccurate profile details, and withdraw consent for follow-up marketing contact. To request a correction, simply reach out to our team with your updated information.
20. Data Deletion Requests
Customers may request complete deletion of their conversation history, CRM profile, and contact details from our active databases at any time.
How to submit a deletion request:
- By Email: Send your request to info@chishtysmartsolutions.com with the subject line “Data Deletion Request” along with your registered phone number.
- Via WhatsApp: Send a message to +92 300 6392025 stating “Please delete my account data”.
Upon identity verification, your eligible records will be deleted from our active databases and CRM systems within standard operational timeframes (typically within 10–30 business days), barring records required for tax or mandatory statutory retention.
21International Processing
Chishty Smart Solutions is headquartered in Pakistan, and our technical infrastructure utilizes cloud data centers operated by Meta, Google Cloud, Supabase, and Vercel across North America, Europe, and Asia. By contacting us or utilizing our digital platforms, you acknowledge that your information may be transferred to and processed in jurisdictions that may have different data privacy regulations than your home territory.
22Children's Privacy
Our enterprise POS solutions, ERP packages, and automated systems are strictly designed for businesses and adult commercial operators. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we become aware that a minor has submitted personal information, we will delete that information expeditiously.
23Policy Updates
We may update this Privacy Policy periodically to reflect enhancements in our software platforms, AI features, WhatsApp messaging workflows, or modifications in regulatory standards. The revised document will be published with an updated “Last Updated” date at the top of this page.
24Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our software data practices, please contact our team:
General Bus Stand, Multan, Pakistan