Privacy Policy — VeriStock Pro Cloud & CA Portal

Effective Date: August 2, 2026 | Version 2.4 | Applicable to Android App & CA Web Portal

1. Introduction

VeriStock Pro ("we", "our", or "us") provides retail management software, mobile applications, and web audit portals designed for retailers, business owners, and Chartered Accountants. This Privacy Policy governs the collection, use, encryption, and protection of data processed via the VeriStock Pro Android App and the CA Web Portal.

2. Data Collection & Synchronization

To enable multi-user store management, real-time staff access control, and web-based financial auditing, VeriStock Pro collects and synchronizes the following data types:

Account Metadata: User name, email address, phone number, business profile, and staff role assignments.
Transactional Financial Records: Encrypted records of sales invoices, purchase bills, operating expenses, repair job cards, and tax components (CGST, SGST, IGST).
Device Identifiers: Secure device identifiers used strictly for multi-device sync conflict resolution and audit trail logging.

3. Cloud Infrastructure & Security Controls

All cloud synchronization is backed by Google Cloud & Firebase Infrastructure (Project: veristock-ad58d) under strict security protocols:

Encryption in Transit: Mandatory TLS 1.3 / HTTPS encryption for all data transmitted between Android devices, Web Portals, and Cloud Databases.
Encryption at Rest: Local Android databases use 256-bit AES SQLCipher encryption (`android-database-sqlcipher`). Cloud Firestore documents are protected by Google Cloud zero-trust server-side encryption.
Role-Based Security Rules (RBAC): Multi-tenant isolation enforced at the database level. Staff members, Managers, and CAs can only read or write collections corresponding to their verified Business and Shop permissions.

4. Staff Invitations & Email Communication

When an Owner or Manager invites a staff member or CA auditor, VeriStock Pro dispatches transactional email invitations via 2nd Generation Firebase Cloud Functions (`sendStaffInviteEmail`). Email addresses are processed solely for authentication and access provisioning.

5. Data Retention & Account Deletion

Users retain full ownership of their data. Business owners can request complete deletion of cloud records and Firebase account profiles through the in-app settings screen or via our web portal. Upon receipt of a verified deletion request, all associated cloud data and user profiles are permanently purged within 7 business days.

6. Third-Party Sharing Disclaimers

VeriStock Pro does NOT sell, rent, monetise, or share financial or customer data with third-party advertisers or data brokers. Data is processed exclusively to deliver retail POS, inventory sync, and audit functionality.

7. Contact & Data Protection Officer

For privacy inquiries, security audits, or data deletion requests, contact our privacy compliance team at privacy@veristockpro.com.