Privacy Policy

1. Who we are

This Privacy Policy explains how TOPSOL ("we," "us," or "our") handles information in connection with the Restockly: POS & Inventory application ("Restockly POS" or the "App") and this website. The data controller is:

TOPSOL
2nd Floor, Sitara Techno Park, Lower Canal Rd E, near Jhal Khanuana, Block B People's Colony No 1, Faisalabad 38000, Pakistan
privacy@restocklypos.com

2. Scope

This policy applies to the App however you obtained it — downloaded directly from restocklypos.com for Windows or macOS, or installed from the Mac App Store — and to your use of this website, including buying a licence here. It describes our practices and the way the App is designed to operate. It does not govern third-party websites or services you may use separately (for example Paddle's, Apple's or Google's services when you choose to use them), except where we explain our role below.

3. Summary

• Core POS data stays on your own computer (or on your own local network when you use multi-computer mode). We do not operate a cloud copy of your full business database on our servers.
• We do not sell your personal information. The App does not include third-party advertising or behavioral analytics SDKs for marketing purposes.
• This website uses analytics cookies only if you allow them. Measurement and advertising cookies on restocklypos.com stay switched off until you choose, and you can change your choice at any time. This is about the website — the App itself is unchanged by it. See section 9.
• Some features are optional and online (for example, optional Google Drive upload for reports). Payments are processed by Paddle on this website, or by Apple for App Store purchases; we never receive your payment card details.

4. Information stored locally in the App

The App stores operational data on your own computer in application data areas (including a local database) so it can run offline. Depending on how you use the App, this may include, for example:

• Business profile and settings (such as business name, currency, and preferences)
• Product catalog, inventory quantities, sales records, orders, returns, production entries, and cash flow entries
• Customer details you choose to enter (such as name, phone number, or address)
• Optional item images and file paths you associate with records
• A cryptographic hash of an optional PIN if you enable PIN protection (not the PIN itself in readable form)
• Backup files when you create backups through the App

Multi-computer / local network mode: If you configure the App to connect multiple computers on your local network, operational data may be transmitted between your devices on your LAN. That traffic does not pass through our systems.

5. Optional Google Drive

If you choose to connect Google Drive, the App uses Google's OAuth flow and may upload files you generate (such as reports) to your Google account. We do not receive the contents of your Google Drive for our own use beyond what is technically required for that integration to function.
Google's collection and use of information is governed by Google's policies. See: Google Privacy Policy.

6. Mobile Share (optional internet feature)

Mobile Share lets you read your shop's numbers on your own phone. It is off by default, and you choose its reach each time:

• Shop Wi-Fi only (LAN) — the phone talks straight to your Mac. Nothing leaves your network and this section does not apply.
• Over the internet — traffic passes through our relay so you can check the shop from anywhere.

How the relay works. Your Mac makes an outbound encrypted connection to relay.restocklypos.com and holds it open; your phone loads share.restocklypos.com. We never connect in to your Mac, and no port is opened on your network. Requests from your phone are forwarded down that connection, answered by your own Mac from its local database, and the answer is passed back.

We do not store your business data. The relay is a pass-through. Sales, products, customers, cash, credit and stock figures move through it in memory and are not written to disk, logged as content, or retained by us. The only thing the relay keeps is an anonymous shop identifier used to pair your phone with your Mac, and a timestamp for re-checking your subscription.

What we do receive. To run the connection and confirm you are entitled to the feature, our relay receives: an anonymous identifier derived from your installation, a device identifier, your app version, and your subscription credential (your App Store transaction identifier or licence key). Like any internet service, our infrastructure provider also processes standard connection metadata such as IP address and preferred language. We use these only to operate the relay and verify an active subscription — re-checked periodically while the connection is open — and not to build a profile of you or your customers.

What your phone can see. Only the sections you tick when you create the link: sales summary, sales trend, recent sales, top products, top customers, cash, customer credit balances and stock. Access is read-only — nothing can be edited, added or deleted through a shared link. You can change which sections are shared at any time without changing the link.

Your access key. The link contains a secret key held in the part of the URL that browsers do not send to servers, so our relay never receives it and cannot read your data. Treat the link like a password: anyone who has it can view the sections you shared. Turning sharing off takes the link offline; deleting the link revokes it permanently, and a new one gets a different address.

Sub-processors. Mobile Share uses Cloudflare (relay hosting), Apple (subscription verification for Mac App Store customers) and Supabase (licence verification for customers who bought elsewhere). These providers operate globally, so relayed traffic may be routed through servers outside your country. See section 13.

Turning it off. Choose shop-Wi-Fi-only reach, stop sharing, or delete the link. With Mobile Share unused, the app makes no connection to our servers for this feature.

7. What we do not do

• We do not require you to create a "Restockly POS" account with us to use core features.
• We do not use the App to run third-party advertising or cross-app tracking for marketing.
• We do not intentionally collect sensitive categories of data beyond what you enter for normal business operations.

8. Buying a licence: payments and licence keys

Payments on this website. Checkout is operated by Paddle.com Market Ltd, which acts as the merchant of record and processes your payment. You enter your payment details into Paddle's checkout, not into our systems — we never see or store your card number. Paddle handles the transaction, tax and receipt, and its handling of your information is governed by Paddle's Privacy Policy.

What we store when you buy. To issue and support your licence, our licensing service records your email address, the Paddle customer and transaction identifiers, which products you bought, your country code (for pricing and tax), and, once you activate, an irreversible hash of a device identifier plus any device name you type. The device hash is computed inside the App, so your raw machine identifier never reaches us. We use this only to issue your key, enforce the one-device limit, let you move your licence to another computer, and honour refunds and cancellations. It is not used for advertising or profiling, and it is not sold.

Licence key emails. We send your licence key to the email address you entered at checkout, and can resend it on request. These are transactional emails about a purchase you made — they are not marketing, and there is no mailing list to unsubscribe from. Our email delivery provider processes your address solely to deliver that message on our behalf.

Mac App Store purchases. If you install the App from the Mac App Store instead, Apple processes that payment as the platform provider and may give us limited entitlement information needed to deliver what you bought. See Apple's Privacy Policy and the Mac App Store terms.

9. This website: cookies, analytics and your choices

This section is about restocklypos.com only. It does not change how the App behaves: the App does not contain advertising or behavioral analytics SDKs, and nothing described here is added to it.

What we use

We load Google Tag Manager, which is a container that manages the measurement tags below. Google Tag Manager itself does not gather analytics about you; it decides which of the following may run, based on the choice you make.

• Google Analytics 4 — aggregate website usage: which pages are visited, roughly where visitors come from (country and referring site), and which links and buttons are used. Runs only with your analytics consent.
• Microsoft Clarity — a usability tool that records how pages are interacted with, so we can see where a page is confusing. Runs only with your analytics consent. At the time of writing this is configured but not yet switched on.
• Google Ads measurement — tells us which advertisement led to a download or a purchase. Runs only with your advertising consent.

These are provided by Google and Microsoft, who act as their own controllers for the data their tools collect. Their handling is governed by their policies: Google Privacy Policy and Microsoft Privacy Statement.

Cookies and browser storage

Some storage is needed for the site to work at all, and it is always active. It is not measurement and is not shared with anyone:

• your light/dark theme and your storefront country, so the site looks and prices the way you left it;
• the transaction reference of a purchase you have just made, so the page after checkout can show you your licence key;
• your cookie choice itself, so we do not ask again on every page.

Everything else — the analytics and advertising cookies set by the tools above — is placed only after you allow it, and is removed from future page loads if you withdraw permission.

Where visitors come from

If you reach this site from an advertisement or a campaign link, the URL may carry campaign information (for example utm_source, or a Google click identifier). With your analytics consent we store the campaign details in your browser so we can tell which campaigns bring people who go on to download or buy. The click identifier is stored only with your advertising consent. If you have not made a choice yet, none of it is written to your device.

We do not collect arbitrary information from the address bar. Your email address, your licence key and your Paddle transaction details are never placed in this campaign record.

Your choice, and changing it

On your first visit, analytics and advertising cookies are off. The banner lets you accept all, reject everything that is not essential, or choose the two categories separately. Because advertising measurement is reported through the same analytics tools, advertising can only be switched on when analytics is on.

Your choice is stored on the device you made it on, so you may be asked again on a different browser or after clearing your browsing data. To change it at any time, use Cookie preferences in the footer of any page. You can also block or delete cookies in your browser settings, and use Google's Analytics opt-out browser add-on.

Withdrawing consent stops further collection; it does not by itself erase measurements already gathered. To ask about data already collected, contact privacy@restocklypos.com and see section 12.

10. Security

We design the App so your primary business records remain under your control on your devices. No method of storage or transmission is perfectly secure. You should protect your Mac with a strong password, keep macOS updated, restrict access to your business computers, and use backups appropriate for your risk.

11. Retention

• On your devices: Data remains until you delete it in the App, remove the App (subject to files left on disk), or overwrite it using backup/restore features.
• In-app purchases: Records of purchases and subscriptions are primarily held by Apple under your Apple ID. We may rely on Apple's systems to confirm what you have purchased.
• Support emails: If you email us, we retain correspondence only as long as needed to respond and handle follow-up, unless a longer period is required by law.

12. Your choices & requests

Depending on applicable law, you may have rights to access, correct, delete, or restrict certain personal information, or to object to certain processing. Because most business data you enter is stored locally on your own computer, you can often fulfill requests directly by editing or deleting data in the App or by deleting local backups.
For requests relating to information we hold as a controller (for example, your purchase record or support correspondence), contact privacy@restocklypos.com. We may need to verify your request before responding. For questions about a payment, receipt or charge, Paddle is the merchant of record and can be contacted directly at paddle.net; for purchases tied to your Apple ID, Apple's support channels may also be relevant.

13. International processing

We are based in Pakistan. Information may be processed in other countries by the providers we rely on: Paddle for payments, Cloudflare for hosting this website and our licensing service, our email provider for licence-key delivery, and — if you switch them on — Google Drive for backups or Apple for App Store purchases. Those providers may transfer and store data as described in their respective privacy notices.

14. Children

The App is intended for businesses and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will change when we do. Material changes may also be communicated through the App, this website, or the Mac App Store listing where appropriate. Continued use of the App after an update means you acknowledge the revised policy.

16. Contact

TOPSOL
2nd Floor, Sitara Techno Park, Lower Canal Rd E, near Jhal Khanuana, Block B People's Colony No 1, Faisalabad 38000, Pakistan
Email: privacy@restocklypos.com