Privacy Policy

This policy explains what personal data Prodiasto Technologies collects through Dilsho, why, who sees it, how it is protected and how long it is kept. It applies to this website, the Dilsho POS, the shop portal, the Dilsho app and the online storefronts.

1. Introduction

1. This privacy policy ("Privacy Policy") applies to the collection and processing of personal data ("Personal Data") by Prodiasto Technologies, a sole proprietorship, the maker of Dilsho, at www.prodiasto.com, in connection with the Service: this website, the Dilsho POS, the shop portal, the Dilsho app and the online storefronts. This Privacy Policy will help you understand how we collect and use your Personal Data and what we do with it.
2. By visiting our website, opening a shop or customer account, paying for a plan or placing an order with a shop, you agree to us handling your Personal Data in accordance with this Privacy Policy.
3. A shop's customers' data (their names, phones, addresses and orders) and a shop's business records (its sales, stock, ledger and staff) belong to that shop. The shop decides what it collects, and we process it only to run the Service for that shop.

2. Personal data that we collect

1. Personal Data includes any information about an individual from which that person can be identified. It does not include Personal Data where the identity has been removed (anonymous data, e.g. your IP Address).
2. Information you may provide us through the Service includes:
   1. Contact data, such as your first and last name, email address and phone number; for a shop, its business name, the owner's name, the business address and location pin, and the registration numbers (NTN, CNIC, GST, licence) the shop types for its invoices and its listing; for a customer, the delivery address and location pin.
   2. Profile data, such as the phone number or email and the password that you set to establish an account with us, or the identifier Google gives us when you sign in with Google (your Google password never reaches us), and the PINs a shop sets for its tills and staff.
   3. Communications that we exchange with you, including when you contact us with questions or feedback, through the website, email, phone, and the support messages sent from the app or the shop portal.
   4. Transactional data, such as information relating to or needed to complete your subscription payments (the plan, the amount, the period and the Safepay reference; no card or wallet details reach us) and, for a customer, the orders placed with shops, including order numbers and order history.

3. How we use your Personal Data

We use your Personal Data for the following:

1. Provide you with the required services and/or products that you subscribe to or order through the Service.
2. Respond to your questions or requests.
3. Improve our operations.
4. Prevent, detect and manage risk against fraud and illegal activities.
5. Comply with our financial regulatory and other legal obligations, including the tax features a shop turns on (such as FBR digital invoicing and income tax reports).
6. Send service updates, billing reminders and receipts. We send no advertising.
7. Improve content and the layout of the Service.
8. Resolve disputes that may arise.

4. Who do we share your Personal Data with?

To enable us to provide our services to you, we may share your information with trusted third parties, such third parties include financial institutions and payment processors, as well as any third parties that you have directly authorized to receive your Personal Data.

We share Personal Data with third party business partners when this is necessary to provide our products and/or services. The third parties to whom we disclose Personal Data for this purpose are:

• Safepay, the payment processor for subscriptions: receives what a payment needs (the amount, the invoice reference and the contact details Safepay asks for); the bank and payment method providers behind it (such as card networks) see the card or wallet details that never reach us.
• The shop a customer orders from: receives the order with the customer's name, phone, delivery address and location pin. The shop delivers with its own staff; there is no courier service provider.
• Google: Firebase for sign-in with Google and for push notifications to the app, and Google Cloud, where the Service is hosted.
• An email provider, for transactional email such as verification links, password resets and receipts, when one is configured.

We use no advertising partner and no third-party analytics. We disclose data to authorities only where the law requires it.

5. How we protect your Personal Data

1. We make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of Personal Data. We implement access control measures (physical and virtual), security protocols, policies and standards to ensure that our security infrastructures are in compliance with reasonable industry standards. We ensure the maintenance of organizational, technical and administrative measures designed to protect Personal Data within our organization against unauthorized access, destruction, loss, alteration or misuse. Passwords are stored only as one-way hashes, traffic is encrypted with HTTPS, access is role-based and enforced on the server, and sensitive actions are audit-logged.
2. We have also put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

6. How long do we store your information?

1. We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for. This includes for example the purposes of satisfying any legal, regulatory, accounting, reporting requirements, to carry out legal work, for the establishment or defence of legal claims.
2. We will retain your information for as long as your account is active or as needed to provide you with our services, comply with our legal and statutory obligations or verify your information with a financial institution. When a shop's request to delete its account is approved, the shop's data and its logins are deleted; only a record that the account was closed and the shop's de-identified subscription invoices are kept, for 6 years, for tax. A customer can ask the shop they ordered from, or us, to delete their account; anonymised order records may be retained for accounting.

Version 2026-11-03 - effective November 3, 2026.