Privacy policy

This policy explains what personal data Finetabz handles, why, who else receives it, how long we keep it and what you can ask us to do. It covers this website, the Finetabz web, Windows and Android apps, the supplier app, and the pages Finetabz shows your customers (online ordering, delivery tracking and receipt feedback).

1. Who we are

Finetabz is a product of [to be added], a business registered in Bangladesh (trade licence no. [to be added]), of [to be added]. In these pages “Finetabz”, “we” and “us” mean that business.

Contact: support@finetabz.com · WhatsApp [to be added]

2. Two different roles

Your account. For the details of the business that signs up and the people who sign in, Finetabz decides how the data is used. We are responsible for it.

What your business records. For the records a business keeps in Finetabz about its own customers, guests, staff, suppliers and riders, the business decides what to record and why. Finetabz stores and processes those records for the business, only to provide the service, and on its instructions. If you are a customer of a shop that uses Finetabz, please contact that shop first; we will help it answer you.

3. What we collect

When a business signs up and signs in

• Business type, business name and outlet names.
• The owner’s name and mobile number. The mobile number is also the sign-in name.
• A one-time code sent by SMS to check the number. We keep only a scrambled (hashed) copy, and it stops working after 5 minutes.
• The PIN each person chooses. We store it only as a one-way hash (Argon2id). We cannot read anyone’s PIN.
• If you add them later: business address, BIN, receipt wording and an email address.
• Security records: sign-in successes and failures with the time, and a label for each device (for example “Mobile browser”).

What a business records while using Finetabz

• Sales and stock: items, prices, stock, expenses, purchase orders, quotations and challans.
• Customers: name, phone, address, notes, amounts owed and repaid, instalment plans, loyalty points, gift vouchers (with the recipient’s name and phone), and whether the customer agreed to SMS reminders.
• Reservations and hotel guests: name, phone, number of adults, dates of stay and notes.
• Deliveries: delivery address, phone and notes, and the rider’s name and phone.
• Staff: names, roles, rosters, clock-in and clock-out times, leave, tips, advances, and pay details (salary, hourly rate, commission) if the owner enters them. If the owner switches it on, a photo is taken when a person clocks in. If a fingerprint machine is connected, only the clock times are imported — never fingerprints.
• Suppliers: name, phone, address, chats between shops and suppliers, and price lists.

From people who are not signed in

• Online ordering: a customer who orders from a shop’s online menu gives a name, mobile number, delivery address, notes and, if paying by bKash, the transaction ID. The shop receives these and the customer is added to that shop’s customer list. The details are also saved in the customer’s own browser so the next order is quicker.
• Riders: while a delivery is out and the rider has the rider page open, the phone’s location is sent about every 30 seconds. Only the latest position is kept, and the customer sees it on the tracking link while it is fresh.
• Receipt feedback: a rating and an optional comment, without a name.
• This website: no forms, no cookies and no analytics. Our hosting provider keeps standard server logs (IP address, browser, page and time) for security.

What we do not collect

Finetabz has no fields for national ID, passport, date of birth, health or prescription details, or fingerprints. Please do not type such details into notes.

4. Why we use it

• To provide the service you signed up for: record sales, print receipts, keep stock, sync your devices, show reports and back up your data.
• To keep accounts secure: check phone numbers, stop repeated wrong PINs, and record sign-ins.
• To send messages that were switched on: SMS payment reminders go only to customers the shop has marked as having agreed, and can be stopped at any time by removing that agreement. Push notifications go only to devices where someone turned them on.
• Billing and support: to tell you when your trial or paid month ends, and to help you when you ask. Our support staff open a business’s account only when its owner asks, and every support session is logged.
• To fix problems: error reports (see section 5) help us find bugs.
• Legal duties: when Bangladeshi law requires us to keep or disclose information.

We do not sell personal data, we do not show advertising, and we do not use your business’s records to train AI models.

5. Who else receives it

We use these service providers to run Finetabz. Each receives only what it needs for its job.

Some features hand you over to another service you choose to use: WhatsApp buttons open WhatsApp with a message ready to send; voice ordering in Chrome uses the browser’s speech recognition, which Google provides; maps links open Google Maps. Their own privacy policies apply.

We may also disclose information when Bangladeshi law requires it, or to protect people from harm. If Finetabz is ever sold or merged, the records would pass to the new owner under this policy.

6. Data stored outside Bangladesh

Finetabz data is stored on a server in India, with backup copies in Lithuania, and AI features are processed in the United States. We choose providers that protect data with encryption and security controls, and every connection between your device and Finetabz is encrypted (HTTPS). Finetabz does not collect national ID, passport, tax-ID or biometric data, which Bangladeshi law restricts from leaving the country.

7. How long we keep it

• While your account is open, we keep your records so you can use them.
• If your business stops using Finetabz, we keep its data for 90 days so you can come back or take a copy, then delete it — unless you ask us to delete it sooner, or the law requires us to keep something longer (for example our own billing records).
• One-time sign-up codes stop working after 5 minutes.
• A rider’s location is replaced by each new one; older positions are not kept.

8. How we protect it

• PINs are stored only as one-way hashes, and repeated wrong PINs lock the sign-in for a while.
• Each business is kept apart from every other business in the database.
• Inside a business, each person signs in with their own PIN and sees only what their role allows.
• So that the till works offline, a copy of your menu, recent records and staff sign-in checks is kept on each signed-in device. Keep your devices locked, and sign out on a device you no longer use.

No system is perfectly secure. If a breach puts people at risk, we will tell the affected businesses and the authorities as Bangladeshi law requires.

9. Your choices and rights

• See and correct: most of your data can be seen and corrected in the app.
• Take a copy: reports and VAT registers can be downloaded as Excel files on any device, and the Windows app saves a full backup on the computer. For a full copy of your business’s data, ask us and we will send it within 30 days.
• Delete: ask us to delete your account and business data. We will confirm the request from the owner’s phone number and complete it within 30 days.
• Withdraw consent: where we rely on your agreement (for example SMS reminders or push notifications), you can withdraw it at any time; this does not undo what was done before.
• Ask questions or complain: write to us at the address in section 1. We reply within 30 days. You can also complain to the data protection authority in Bangladesh.

Customers of a shop can exercise these rights through the shop. The shop can correct or remove a customer’s details in the app, and we will help it.

10. Children

Finetabz is a tool for businesses and is not meant for anyone under 18 to sign up. Businesses should not record children’s personal details without a parent’s or guardian’s agreement.

11. Changes to this policy

When we change this policy we update the date at the top. For important changes we will also tell account owners in the app before the change takes effect.