Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for an account, subscribe to our services, or contact us, we may collect the following personal information:

• Full name, email address, and phone number
• Business name, address, and registration details
• Billing and payment information, if a payment flow is enabled (handled under the applicable provider's terms)
• Team member details you provide for account management
• Customer data you import or manage within the platform (e.g., customer names, contact details, order histories)
• Profile pictures and branding assets you upload

1.2 Usage Data

We automatically collect certain information when you access or use our platform, including:

• Device information (device type, operating system, browser type and version)
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation patterns
• Features used, actions taken, and error logs
• Referral source and search queries that led you to our platform
• Session duration and frequency of visits

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect and store information about your interactions with our platform. For a detailed explanation, please refer to our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Valtriox Portal, process transactions, send order confirmations, and deliver customer support.
• Account Management: To create and manage your account, authenticate your identity, and manage team member access and permissions.
• Communication: To send you service-related notifications, updates, security alerts, and respond to your inquiries.
• Analytics and Improvement: To analyze usage patterns, diagnose technical issues, and improve our platform's features, performance, and user experience.
• Marketing: With your consent, to send promotional materials, newsletters, and information about new features or services that may interest you. You may opt out at any time.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities, and to protect the security of our platform and users.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Data Sharing and Third Parties

We do not sell your personal information. We may share your information with third parties only in the following circumstances:

• Service Providers: Providers used for hosting, media, email delivery, monitoring, analytics, or payments may process data under their applicable terms, privacy notices, and contractual obligations.
• Configured Connectors: If you choose to connect a supported third-party service, relevant data may be shared with that service under its own terms and privacy policy.
• Business Transfers: In connection with any merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of such transaction, subject to continued protection under this policy.
• Legal Requirements: We may disclose your information if required by law, court order, governmental regulation, or subpoena, or if we believe such disclosure is necessary to protect our rights, safety, or property, or that of our users or the public.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

4. Data Security and Storage

The beta applies technical controls that are present in the application and hosting configuration. Current controls include:

• HTTPS/TLS connections when supported application endpoints are used
• Password hashing and authenticated session controls
• Role-based and organization-scoped application access controls
• Rate limiting, audit logging, and ongoing security testing
• Hosting-provider controls described by the applicable providers

Application data is hosted using Supabase infrastructure. The public beta does not claim an independent security certification, a completed third-party audit, or a production-complete backup and disaster-recovery program. No method of transmission or electronic storage is completely secure.

5. Your Rights

Under applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016 (PECA) and general principles of data protection, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to legal obligations, security needs, provider constraints, and legitimate retention requirements. We will confirm the applicable scope and timeline when handling the request.
• Right to Restrict Processing: You may request that we limit how we use your personal information in certain circumstances.
• Right to Data Portability: You may request to receive your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at ashir@valtriox.com. We aim to respond as reasonably practicable after any needed identity or authority checks. Timing depends on the request, provider constraints, and any deadline required by applicable law; this policy does not promise a fixed 30-day response time.

6. Cookies and Tracking

The Portal currently uses first-party authentication cookies and browser local storage. A deployment may also load Google Analytics or Meta Pixel when its corresponding public configuration ID is present.

• Authentication Cookies: The current vt-* cookies carry signed-in user, role, and organization values plus an integrity signature.
• Browser Local Storage: Current valtriox-* keys may store preferences, brand setup values, session UI state, timezone state, and certain browser-local feature content.
• Configured Analytics: Google Analytics loads after the page becomes interactive when its deployment ID is configured and may collect usage and device information under Google's terms.
• Configured Measurement: Meta Pixel loads and records page-view or lead events when its deployment ID is configured, including a non-JavaScript page-view fallback.

The site does not currently provide an in-product cookie banner or category control, and configured analytics/measurement scripts do not wait for a prior consent choice. You can block or clear these technologies through browser or provider controls; blocking authentication cookies may prevent login. For detailed information, see our Cookie Policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

• Active Account Data: Retained while the account is active and afterward only as reasonably needed for security, support, disputes, or legal obligations.
• Transactional Records: Billing and payment records, where applicable, are retained according to legal and provider requirements.
• Support Communications: Retained as reasonably needed to handle the request, maintain records, and resolve disputes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Account deletion requests are handled under the retention categories above and applicable provider constraints. We will explain any data that must be retained or cannot immediately be removed.

8. Children's Privacy

Valtriox Portal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as promptly as possible. If you believe that a child under 18 has provided us with personal information, please contact us at ashir@valtriox.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Pakistan. These countries may have data protection laws that differ from those in Pakistan. By using our platform, you consent to such transfers. We use available contractual and technical safeguards for the services used, while recognizing that protections and legal requirements vary by processing location.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our platform with a revised "Last Updated" date
• Use available email or in-app channels for significant changes where practicable

Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: