Privacy Policy

Information We Collect

• Registration data: name, email address, phone number, business name
• Transaction data: sales records, payments, inventory movements
• Customer data: names, loyalty points, purchase history (entered by you)
• Device data: device type, OS version, IP address
• Usage data: features used, session frequency and duration

How We Use Your Information

• Provide and maintain the POS service
• Send invoices and receipts via email
• Deliver promotional Push Notifications to your customers' app
• Process and respond to support tickets
• Generate anonymized analytics to improve the product
• Notify you of new features and important updates

Data Sharing

Khmer Digital does not sell or share your personal data with third parties for commercial purposes. We share data only with cloud infrastructure providers (AWS) who are bound by strict non-disclosure agreements. No personal or business data is ever disclosed to advertisers or data brokers.

Data Security

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest in the database
• Optional two-factor authentication (2FA) for all accounts
• Full audit logs for every access and action
• Penetration testing conducted three times per year
• Internal team access restricted by role-based permissions

Data Retention

Transaction records are retained for 7 years to meet accounting and regulatory compliance requirements. If you close your account, all other personal data (excluding legally required audit logs) will be permanently deleted within 30 days of your request.

Cookies & Tracking

• Essential cookies: session login tokens and security identifiers
• Analytics cookies: Google Analytics (anonymized IP) — you may opt out at any time
• Khmer Digital does not use third-party tracking pixels or browser fingerprinting
• Mobile app: device ID is used solely for delivering push notifications

Your Rights

• Right of access: request a full export of all your data at any time
• Right to rectification: update your profile or business information directly in the dashboard
• Right to erasure: request deletion of your account and associated data
• Right to opt out: unsubscribe from marketing emails at any time
• Response time: all privacy requests are handled within 48 hours at privacy@khmerdigital.com

Children's Privacy

Khmer Digital PRO is a business platform intended for adults. Persons under 18 may not use this service without the consent of a parent or legal guardian. We do not knowingly collect personal data from minors.

Policy Updates

We may update this Privacy Policy from time to time. Users will be notified by email at least 30 days before any material changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.