Privacy Policy

Last updated 28 September 2026

SynxaPoS is the ordering, payment and pickup system that shops use to take orders at the counter and from their customers' phones. It is made by Synxa IT Pvt Ltd ("Synxa", "we"). This policy covers the SynxaPoS Android app (in.synxait.synxapos), the web pages at pos.synxait.in, and each shop's own SynxaPoS address, such as telangana-meat-mart.synxait.in.

1. 1. Who is responsible
2. 2. What we collect
3. 3. App permissions
4. 4. Why we use it
5. 5. Who we share it with
6. 6. How long we keep it
7. 7. How we protect it
8. 8. Your rights
9. 9. Children
10. 10. Changes
11. 11. Contact and grievances

1. Who is responsible

Each shop decides how it uses SynxaPoS and is responsible for the personal data of its own customers and staff. Synxa runs the software and processes that data on the shop's behalf. Synxa is responsible for the app itself and for the data we hold about the shops we serve. For a question about an order, you can ask the shop or us; for anything about this policy, contact us (section 11).

2. What we collect

If you order from a shop

• Your name for the order, so the shop can call you when it is ready.
• Your phone or WhatsApp number, if you give it. It is optional unless the shop asks you to confirm it; then we send a one-time code by WhatsApp or SMS. We keep only a scrambled (hashed) form of the code, and it expires after five minutes.
• Your orders: items and quantities, notes you add (such as cutting instructions), pickup or eat-in, prices, GST and charges, the time, and the order's progress.
• Payment records: when you pay online, Razorpay tells us the payment's status and amount. Its notifications can also include the phone number, email address and UPI ID or bank used to pay, and we keep them as the record of the payment. We never receive full card numbers, CVVs or UPI PINs.
• A session on your device that lets you see your orders and come back to them. If you confirm your phone number, your cart is also saved so you can carry on from another device.

If you work at a shop

• Your full name, mobile number and role (owner, manager or counter), entered by the shop owner, and whether your access is on or off.
• Your PIN, stored only in hashed form.
• The shop devices you sign in on (a name and an ID the shop creates), and which staff member took or changed each order.
• Photos you upload for menu items. These are published on the shop's menu.

About shops

The business details a shop enters: its names, GSTIN, FSSAI and trade licence numbers, address, contact phone and email, logo and photos, menu and prices, and tax and fee settings.

Technical data

• Our servers log requests (IP address, time, the action requested, and any error) to keep the service secure and working.
• The app stores on your own device: your session, your cart, recent searches and display preferences. On a shop's device it also remembers the last staff phone number and device ID used to sign in, never the PIN.

We do not collect your location, contacts, advertising ID, or any analytics or crash-tracking data, and the app contains no advertising or analytics code.

3. App permissions

• Camera: used only on the staff hand-over screen, to scan a customer's collection code. Nothing the camera sees is saved or uploaded.
• Photos: used only when staff choose a picture for a menu item.
• Internet: to reach our servers.

4. Why we use it

• To take, prepare, charge for and hand over orders, and to show you your order's progress and collection code.
• To confirm phone numbers, when a shop requires it.
• To let staff sign in securely, and to record who did what, so a shop can settle a dispute.
• To produce bills with GST and charges, and the shop's own sales reports.
• To keep the service secure, prevent misuse and fix problems.
• To meet legal duties, such as keeping tax and accounting records.

We do not use personal data for advertising, and we do not sell it.

5. Who we share it with

These providers act on our instructions. Nobody else receives your data.

6. How long we keep it

• One-time codes: deleted automatically when they expire.
• Saved carts: deleted automatically 30 days after they last changed.
• Orders and payment records: kept while the shop uses SynxaPoS, and for as long as Indian tax and accounting law requires the shop to keep its sales records. If you ask us to delete your data, your name and phone number are removed from your orders; the amounts and items stay in the shop's accounts without identifying you.
• Staff accounts: until the shop removes you or you ask us to delete your data.
• Server logs: kept for a limited time for security and troubleshooting, then deleted.

7. How we protect it

• All traffic to and from SynxaPoS is encrypted (HTTPS).
• PINs and one-time codes are stored only as hashes.
• Every record belongs to one shop, and staff screens show only their own shop's data.
• Staff can sign in only on devices their shop has added, and owners can revoke a device or switch off a person's access at any time.

No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of the personal data we hold about you and how it is used; to correct or update it; to delete it; and to address a grievance. You can also nominate someone to act for you. Contact us (section 11) or the shop, and we will respond within 30 days.

To delete your data, follow the steps on Delete your SynxaPoS data.

9. Children

SynxaPoS is not meant for children under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

When this policy changes we will update this page and the date at the top. We will point out significant changes in the app.

11. Contact and grievances