Draft updated September 13, 2026. Pending final approval.
Who operates this website
Hisavio is the trading brand used on hisavio.com. Legal operator: Muhammad Suffian. Business location: Faisalabad, Punjab, Pakistan.
For privacy questions, email hello@hisavio.com or use the verified WhatsApp channel on our Support page.
What this website does
This website explains Hisavio POS, presents standard plans, prepares WhatsApp enquiries, publishes selected announcements and distributes Hisavio Share. It does not provide a browser POS, customer account, online payment form or access to your POS shop database.
Information handled when you browse
Our hosting provider, Vercel, and the infrastructure serving public data may process technical request information such as IP addresses, timestamps, requested paths, response status and browser information to deliver and protect the service. Choosing no optional analytics does not mean infrastructure processes no technical data.
The website does not include optional visitor analytics, advertising trackers or a marketing contact database in this release. We do not intentionally record typed support messages, image filenames or URL query contents in application analytics or logs.
Public plans and news
The website requests public product information from Supabase services. These requests do not require your POS account, device identity or shop records. Public services use rate limits to protect availability. Application rate-limit identifiers use a secret-salted hash rather than storing raw IP addresses in their rate-limit records. Infrastructure providers may separately process network request information.
Contacting Hisavio
Platform, topic and plan selections prepare a message in your browser. They are not silently submitted to Hisavio. When you choose Open WhatsApp or a purchase enquiry, the selected message is passed to WhatsApp. Sending the message then uses WhatsApp’s services and privacy practices.
The email link opens your email application. If you send an email, Hisavio receives your email address, message and any attachments through email services. Social links open Instagram, Facebook, X or YouTube, whose own privacy practices apply when you visit or contact us there.
Messages you choose to send may be used to answer your enquiry, arrange your purchase, provide support or keep necessary business records. Do not send passwords, recovery codes, CNICs, device tokens, customer ledgers or backup files through this website.
Hisavio POS and your business data
Hisavio POS primarily stores operational business records locally on your device. Selected online licensing, support, news and update services have their own operational requirements. Google Drive backups, where configured and entitled, use the Google account you connect. This website does not read or upload your local POS records or backups.
You remain responsible for how your business collects and uses customer information, who can access your devices, and how you protect and test backups.
Hisavio Share downloads and image transfers
Downloading Hisavio Share does not require personal details, an account, payment or protected POS credentials. The website serves the APK and its release metadata; it does not inspect your phone gallery.
The Share workflow sends selected images locally to an active compatible POS receiver. It does not upload those images to a Hisavio cloud service or delete the originals. Permission requests and transfer behaviour are explained on the Hisavio Share page.
Service providers and external links
Vercel hosts the website. Supabase serves selected public backend information. WhatsApp handles conversations you choose to initiate. News media may be delivered from approved external HTTPS hosts. These providers may process information in countries other than your own under their respective service arrangements.
External services have their own policies. Visiting an external link or playing externally hosted media may result in a request to that provider.
Retention and requests
We aim to retain technical and enquiry information only as necessary for service delivery, abuse prevention, support, recordkeeping and applicable obligations. Provider log retention depends on the active hosting configuration; no fixed retention period is promised here. The launch checklist requires the operator to record and review the actual provider retention settings.
You may contact Hisavio about information you supplied, corrections or deletion requests. Requests will be assessed according to the circumstances and applicable obligations. Do not send sensitive identity documents through the website.
Policy updates
The final policy will identify its effective date. Material changes will be reflected on this page. This draft does not represent a certification of compliance with any particular privacy regime.