What we keep about you, and what we never keep.

• Your shop's records (clients, bills, payments, cash and stock) stay on your shop's computer. Our cloud never stores readable business data.
• Our cloud keeps your Raseed account and your sign-ins: who you are, and which browsers and phones are signed in.
• If a shop gives you the phone app, our cloud keeps that you work there: the shop, your role and who gave it. Never what the shop keeps about you, or its clients and money.
• When you work for a shop on Raseed Business, your list, what you record (photos of expense slips too) and, if the shop turns it on, where your phone is go only to the shop's own computer, sealed so that we can't read them.
• Our cloud never gets a PIN, or the passwords and passcodes people use on your shop's computer.
• You can delete your account yourself, in Raseed Business or in the portal.
• We don't sell what we keep, and we don't use it for advertising.

• Your name and mobile number.
• Your email, only if you give one.
• Your password, only as a scrambled hash. Nobody at Softapplic can read it.
• Your user number (such as U-001) and when you made the account.
• Whether you own a shop on Raseed, and which one.
• The shops you work at, if a shop gave you the phone app.

In a web browser (the portal)

• Which browser it is, the internet (IP) address it came from, and when it was last used.
• Its sign-in token, only as a scrambled hash. The portal keeps you signed in with one cookie that only our cloud can read.

On a phone (Raseed Business)

• The phone's model, its Android version and the app's version.
• A public key for that phone. Its secret half is made on the phone and never leaves it, so only that phone can use it.
• How the phone guards that secret half, when the phone proves it with a certificate from Google: in a separate security chip, in a protected part of its processor, or in its ordinary storage. We only note it.
• When it was last online with Raseed, and the internet (IP) address it last came from.
• Its sign-in tokens, only as scrambled hashes.
• A pass our cloud signs each time the sign-in starts or renews, good for 7 days, so a shop's computer can check who you are while its internet is down: your name, your user number, the last 4 digits of your mobile number and your phone's key. It stays on your phone; we don't keep a copy.

• The details you fill in about the shop and its branches: name, description, business type, logo, brand colours, address and map location, phone, email, website, NTN and STRN, receipt lines, staff size, your answers about the business, and how you heard about Raseed.
• Its activated computers: name, Windows and app version, time zone, when last seen, a public key that proves it's your computer, and what was done to it and by whom.
• Its plan, subscription and licences, and its payments to Softapplic for Raseed itself.
• Its phone access: which of your staff may use the phone app for your shop, their role there, and who gave access, from which computer and when (each link holds what "If you work at a shop" lists). Your own phones count among your plan's phones too, and our cloud keeps which phones hold its places.
• The notices in the portal's bell about what happened to the shop, such as a computer activated, a payment recorded, a person who joined on their phone or left, or a phone that signed in to your own account (its model and the time).
• A record of what Softapplic's staff did to the shop's account: each action (such as a payment recorded, a computer approved, removed or locked, or a person's phone access removed), who did it, when and, where they gave one, why. Only Softapplic's staff read it.

• The shop and the branch, and the id the shop's computer gave you there (it means nothing outside that computer).
• Your role there, only as a label, such as Recovery agent or a name the owner typed. What you may do is decided on the shop's computer, never by us.
• Whether your access is on, paused or ended, and why, and, if it was removed in the portal, who removed it.
• Who gave it, from which computer and when, when the shop's computer let you in, whether you joined with the typed code, with the QR code, or on the shop's Wi-Fi while its internet was down (and then when our cloud heard of it), and which wording of the shop's notice the giver agreed to.
• Which of your phones hold one of the shop's phone places: each phone signed in to your account takes one place in each shop it opens.

• Your list: the clients of your areas, with what they owe, their addresses and mobile numbers, which the shop's computer sends your phone.
• What you record: collections, visits, promises, cancelled receipts, petrol claims, cash you sent to the shop's account and your handovers.
• If you own the shop, a copy of what your screens show: its day, its agents, cash, flags, bills, stock, support tickets and calendar, and every client with their mobile numbers, address, CNIC and what they owe. And what you do on your phone: payments you take, expenses with a photo of the slip, new clients, purchases, tickets, events, and changes to lines, bills and agents, which the shop's computer then does as if you had done them there.
• If the shop turns it on, where your phone is (see "If a shop sees where its phones are").

• On the shop's Wi-Fi: your phone talks straight to the shop's computer. Nothing passes through our cloud.
• Over a direct link on the internet: our cloud introduces your phone to the shop's computer. For a minute it keeps which of your phone's sign-ins asked to reach which shop's computer, when, and the network (IP) addresses the two gave, then forgets them. When the two can't connect directly, our relay server carries their encrypted bytes and notes the two addresses and how many bytes passed, for 30 days; it can't read them.
• Through our sealed mailbox: your phone leaves sealed envelopes for the shop's computer, and the computer leaves sealed answers for your phone. We keep each envelope until it is picked up, 30 days at most, with its address label: which phone sign-in and which shop's computer, which way, when, and which of four sizes. We can't open them.

• Your phone records where it is, all the time, and shows a notice the whole time it does.
• You are told before you join a shop that does this, and shown its notice before anything starts if you already work there. You can refuse location on your phone; your work goes on, and the shop sees that it is off.
• Only the shop open on your phone gets your positions: while another shop is open, the first shop gets none.
• Your positions go only to that shop's main computer, sealed on the way, by the same roads as your work. The shop keeps them 90 days, then its computer deletes them.
• The shop's owner, its partners, its managers and its recovery supervisor see them on a map on that computer, drawn there from Raseed's own map files, made from OpenStreetMap: no map service learns anything, and nothing the map shows goes over the internet. The shop's owner also sees today's on Raseed Business: the shop's computer sends each person's latest positions of today to the owner's phone, sealed, and the phone draws them on a city map it downloaded once from Raseed's own map files.
• It stops when the shop turns it off, when your access is paused or ends, when the shop stops your phone, and when you sign out.

• Raseed Business keeps your account's details (name, mobile number and email) and your list of shops (each shop's name and branch, your role, and whether your access is on, paused or ended, and why) in a locked database that only your PIN opens.
• For each shop that let your phone in, a locked file of its own: your list of that shop's clients, which hides after 7 days without reaching the shop's computer (the shop may set 1 to 30), what you recorded, kept 60 days after the shop's computer has it, and, if the shop gave you one, the name and address of your pocket printer.
• If you own the shop, that file also holds a copy of the shop's clients (names, mobile numbers, addresses, CNICs and what they owe) and the rest your screens show, renewed at each sync. It goes when the file goes: when you sign out, when your access ends or when the shop stops your phone. A photo you take of an expense's slip waits in the app's own storage until the shop's computer has it, then your phone deletes it; your calendar's reminders are rung by your phone itself.
• If you own the shop, the camera reads barcodes, QR codes and a CNIC's number on your phone itself, with Google's ML Kit: no picture is kept or sent. ML Kit sends Google diagnostics about its use (your phone's model and Android version, the app's version, how long a reading took, errors and an identifier for the app on your phone), never the picture or what it read.
• Beside each file, sealed copies of what you recorded, for that shop's computer and its Owner's phones, with the next receipt number, how to find the shop's computer, and the mailbox's sealed answers and keys. They stay through a sign-out, a forgotten PIN or a removed access, until the shop's computer confirms it has each one, so no collection is lost.
• If the shop sees where its phones are, your positions wait sealed with them; your phone can't read them back, and drops any older than 90 days.
• Your PIN never leaves the phone. The phone doesn't keep the PIN itself: it uses it to unlock that database.
• The phone's secret key never leaves the phone.
• Signing out removes your account's details, your list of shops and every shop's file; only the sealed copies not yet handed to a shop stay, and go to that shop's computer the next time the phone is on its Wi-Fi. Deleting your account erases them too, after telling you how many will be lost. Uninstalling the app removes everything.

• Any PIN: your phone's PIN, or the Computer PIN of your shop's computer.
• The passwords and passcodes people use on your shop's computer.
• A person's CNIC, home address, emergency contact, pay, cash limit or areas.
• The mobile number a shop keeps for a person.
• Your shop's clients, bills, payments, cash, stock or messages.
• Where anyone's phone is.

• Your account: until you delete it.
• When you delete your account, its name, mobile number and email are erased at once, its sign-ins are deleted at once, and its links to shops end. An empty row with none of these stays, so old records still point somewhere.
• A sign-in that has ended (you signed out, or a phone went 6 months without coming online): one year, then it is deleted.
• A link to a shop: while it lives. A link that has ended stays, marked ended, for one year, then it is deleted.
• A phone's place among a shop's phones: freed when that phone's sign-in ends, or when your access to the shop ends.
• A direct link's introduction: one minute. Our relay server's note of the two network addresses and how many bytes passed: 30 days.
• An envelope in our sealed mailbox: until it is picked up, 30 days at most; when a sign-in ends, the envelopes waiting for it are deleted with it.
• Where a phone was: never in our cloud. A shop that sees where its phones are keeps positions on its own computer for 90 days.
• The record of what Softapplic's staff did to a shop's account: as long as we keep the shop.
• The notices in the portal's bell: as long as the shop is kept.
• A shop you close stays in our cloud, marked closed: its details, branches, computers, plan, payments to Softapplic and the notices in the portal's bell. For now it is kept with no end date. Deleting your account afterwards doesn't remove the shop: it only takes your name off it, if the shop was named after you.

• You see your account's details (name, mobile number and email), your shops and your phones in Raseed Business and in the portal.
• Each shop you work at sees your name, mobile number and user number, your phones' models and when they were last online, what you record for it and, if it turns that on, where your phone is. Its owner sees your name and phones in the portal too, and the portal's bell tells the owner when you join or leave.
• Softapplic's staff, to run Raseed: to look after your shop's plan, payments and phone access, and to help you during a support call. Only during a support call may they look at the list of shops a person works at. What they do to a shop's account is recorded, and only Softapplic's staff read that record.
• We don't sell what we keep, and we don't share it with other companies for their own use or for advertising.

• In Raseed Business: Account, then Delete my account.
• In the portal: Account, then Delete my account.
• Forgot your password? Ask for a call-back: we call your registered number and delete the account once you confirm.
• Deleting your account ends your access at every shop at once. Each shop's owner is told, in the portal's bell, that a person with the phone app deleted their account, without your name. On the phone you delete from, anything you recorded that hasn't reached a shop's computer is lost: the phone tells you how many first.

• It has no sign-in and sets no cookies. If you choose the light or dark theme, your browser remembers the choice; it never reaches us.
• Request a demo sends nothing from the page: it writes a message for WhatsApp or email, and you send it yourself.
• It runs no advertising or tracking scripts.