1. Who we are

LiteRegister is operated by Chapter Two Trading FZE, a company registered in Ajman Free Zone, United Arab Emirates ("we", "us", "our"). This policy explains how we collect, use, store, share, and protect personal information when LiteRegister is used.

2. What information we collect

Information from business owners and staff

Mobile phone number used to log in and verify identity by SMS.
Optional email address used as a backup login method.
Full name, job designation, and staff ID, if entered.
Business name, business details, and account settings.
Sales, expense, service, staff, and related records entered into the app.
Subscription, token or credit purchase, and billing information handled through our designated payment provider.

Information about your customers

Customer name and mobile number, only if a business chooses to enter them when recording a sale.
Related service, sale, or payment information entered by the business.

Support and communications information

Messages, account enquiries, screenshots, bug reports, and other information you provide when contacting LiteRegister for support or communicating with us.

Technical, security, and audit information

Device type and general location inferred from an IP address where needed to operate the app, such as setting a default country code. We do not request or use GPS or precise location permissions.
Login activity, security events, account activity, access records, and audit logs used to operate and protect the service.

3. Business responsibility for customer data

A business may enter personal information about customers who do not have their own LiteRegister account. The business is responsible for deciding what customer information to collect and for ensuring it has an appropriate legal basis, authority, or consent to collect and use that information and enter it into LiteRegister.

Where applicable, the business acts as the controller of its customer data and LiteRegister processes that data to provide the service on the business's behalf. Customers should normally direct requests about data entered by a business to that business. We will support the business as reasonably required by applicable law.

4. How we use information

Let users log in and securely access their business's data.
Operate LiteRegister's core features, including sales, staff earnings, expenses, and supported payment features.
Send one-time login codes by SMS and, where selected, backup login emails.
Manage subscriptions, token or credit purchases, and billing.
Communicate about accounts, trials, renewals or top-ups, service notices, and support.
Provide support, troubleshoot issues, administer accounts, prevent fraud, protect security, and comply with legal obligations.
Maintain, analyze, and improve the app and its reliability.

We do not sell your data or your customers' data to third parties.

5. Authorized LiteRegister support access

Authorized LiteRegister personnel may access business data when reasonably necessary for support, security, troubleshooting, legal compliance, or account administration. Access is limited through role-based controls and support or administrative actions are recorded in audit logs, including the person accessing the account, the business affected, the action taken, and the time of the action.

6. Who we share information with

We share only the information reasonably needed for the purposes described in this policy.

Service providers

Supabase — database and authentication hosting for account, business, and sales data.
Twilio — delivery of one-time login codes to a user's phone number.
Our designated payment provider — subscription billing, token or credit purchases, and related payment processing.
Supported merchant payment processors — where a business enables customer payments through its own connected merchant account. LiteRegister does not store customers' full card details or hold merchant funds.

Other permitted disclosures

To comply with law, a court order, or a valid request from a competent authority.
To investigate or prevent fraud, misuse, security incidents, or harm to LiteRegister, its users, or others.
To professional advisers such as lawyers, accountants, auditors, or insurers who are subject to appropriate duties of confidentiality.
In connection with a proposed or completed merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate safeguards.
With your direction or consent, or as otherwise permitted by applicable law.

7. Where information is stored and processed

Your data is stored on Supabase infrastructure, hosted in Seoul, South Korea (AWS region ap-northeast-2).

We and our service providers may store or process personal information in countries outside the UAE. Where applicable data-protection law requires safeguards for cross-border transfers, we will use appropriate contractual, organizational, or other lawful safeguards.

8. How long we keep information

We retain account and business data while an account is active and as needed to provide LiteRegister, comply with law, resolve disputes, and protect the service.

After cancellation or termination, we provide a 60-day recovery period during which the account may be restored or an export may be requested. After that period, account and business data will be deleted or anonymized from active systems within 30 days, unless a longer period is required by law, needed to resolve a dispute, or agreed with the business.

Residual copies may remain in secure backups until those backups expire under our normal backup retention cycle. Backup copies are not used for ordinary business purposes and will be deleted or overwritten through that cycle.

You may request deletion at any time. We may retain limited information where required or permitted by applicable law, including security, audit, billing, and legal records.

9. Your rights

Subject to applicable data-protection law, including UAE law where applicable, you may have rights to:

Access personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of information.
Receive a copy of information in a portable format.
Object to or request restriction of certain processing, or withdraw consent where processing is based on consent.

To exercise a right, contact us using Section 11. We may need to verify your identity. Some rights are subject to legal exceptions. If your information was entered by a business, we may refer the request to that business or coordinate with it.

10. Data security

We use reasonable technical and organizational measures to protect personal information. These include access controls intended to limit business data to authorized members of that business and authorized LiteRegister personnel with a legitimate need, encrypted connections between the app and service providers, security monitoring, and audit logging.

No system can be guaranteed completely secure. You are responsible for protecting your login details and for promptly removing access that staff no longer require.

11. Contact us

If you have questions about this policy or your personal information, contact:

info@literegister.com

Chapter Two Trading FZE, Ajman Free Zone, United Arab Emirates

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or another appropriate channel, and will update the "Last updated" date.