Privacy Policy

This Privacy Policy explains how Tillix ("Tillix", "we", "us", or "our") collects, uses, and protects information when you use the Tillix point-of-sale and retail management platform at tillix.co and its related mobile/desktop apps (together, the "Service"). By using the Service, you agree to the practices described here.

1. Two kinds of data, two roles

Tillix is built for shops, and shops enter data about their own business, staff, customers, and suppliers. It's important to understand the two different roles this creates:

• Your account & subscription data — your own name, email, shop name, and billing status. For this data, Tillix is the data controller: we decide how it's used, as described in this policy.
• Business data you enter — your products, customers, suppliers, staff, sales, purchases, and ledgers. This is entered by you and belongs to your business. For this data, your shop is the data controller and Tillix acts only as a data processor, storing and processing it on your instructions so the Service works. If your customers or suppliers are individuals, you are responsible for having a lawful basis to hold their information (e.g. their consent, or a legitimate business relationship) — the same as if you kept this in a paper ledger.

2. What we collect

• Account information: name, email address, and password. Your password is hashed by our authentication provider (Supabase Auth) — Tillix never stores or sees it in plain text.
• Shop/business information: shop name, business type, address, phone number, and currency/locale preferences.
• Business records you enter: product catalog, customer and supplier records (name, phone, address, balances), staff accounts, sales, purchases, returns, expenses, and payment records.
• Offline data: to keep billing working without internet, the Service keeps a local copy of your recent business data on your device (in your browser's local storage) and syncs it once you're back online.
• Usage & device data: pages visited, general browser/device information, and approximate location (via IP), collected through Google Analytics.
• Support communications: if you message Tillix's WhatsApp number for help, we receive that message and your WhatsApp number so we can identify your shop and respond. See Section 4 for how an AI assistant is involved in this.
• Purchase bill images: if you use the AI bill-scanning feature, the photo/PDF of a supplier invoice you upload is sent to Google's Gemini API to extract the data — the image itself is not permanently stored by Tillix beyond what's needed to process that one scan.

3. How we use this data

• To operate the Service — billing, inventory, ledgers, reports, and everything else the app does.
• To keep your shop's data isolated from every other shop on Tillix (enforced at the database level, not just in the app).
• To provide customer support, including via WhatsApp.
• To send you service-related emails (e.g. signup confirmation, password reset).
• To understand how the Service is used, so we can improve it (via aggregated analytics).
• To detect and prevent abuse, fraud, or violations of our Terms of Use.

We do not sell your data or your customers' data to anyone.

4. AI features

Tillix uses third-party AI models for two features, and only sends them what each feature needs:

• Purchase bill scanner — sends a photo/PDF of a supplier bill to Google's Gemini API to extract line items, so you don't have to type them in manually.
• WhatsApp support/sales assistant — uses Anthropic's Claude to answer questions sent to Tillix's own WhatsApp number. If the message comes from a phone number registered to a shop on Tillix, the assistant may look up that shop's own sales/purchase/ledger records (read-only) to help diagnose a support question — it never changes your data on its own; any real fix still goes through Tillix's team.

5. Who we share data with

We use the following service providers ("subprocessors") to run Tillix. Each only receives what it needs to perform its function:

• Supabase — database, authentication, and file storage.
• Vercel — hosting for the Tillix web app.
• Google — Analytics (usage data) and the Gemini API (purchase-bill scanning).
• Anthropic — Claude, for the WhatsApp support assistant.
• Meta / WhatsApp Business Platform — for sending and receiving WhatsApp messages with Tillix's support number.

We do not share your business data with other Tillix shops, or with any third party for their own marketing purposes.

6. Data security

• Every shop's data is isolated using database-level row-level security — one shop's account can never query another shop's data, even if the app had a bug.
• All traffic between your browser/device and our servers is encrypted (HTTPS/TLS).
• Passwords are hashed, never stored or logged in plain text.

No system is 100% secure, but we design and review Tillix with this as a priority.

7. Data retention

We keep your account and business data for as long as your account is active. If you close your account, we'll delete your data within a reasonable period, except where we're required to keep certain records for legal or accounting reasons.

8. Your rights

You can ask us to access, correct, export, or delete your account data at any time by emailing info@tillix.co. If a request is about data your shop entered about one of its own customers, please handle that directly in the app (Customers/Suppliers screens) — your shop controls that data.

9. Cookies & analytics

We use Google Analytics to understand how the Service is used. You can opt out of Google Analytics tracking using a browser extension like Google's own "Analytics Opt-out Browser Add-on", or by using your browser's "Do Not Track"/tracking-protection settings.

10. Children's privacy

Tillix is a business tool and is not directed at, or intended for use by, children. We don't knowingly collect personal information from children.

11. International data transfers

Tillix serves shops in Pakistan, the UAE, Saudi Arabia, the USA, the UK, the EU, Australia, New Zealand, and elsewhere. Your data may be processed on servers located outside your own country by the subprocessors listed in Section 5.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

13. Contact us

Questions about this policy or your data? Email info@tillix.co or message us on WhatsApp at +92 309 6431377.