Privacy policy

1Who is responsible

Clouds Line for Information Technology, Riyadh, operates Basmtak Cashier and is the controller for the data of business accounts and site visitors. For your customers' and employees' data, your business is the controller and we are the processor acting on your instructions.

2What we store

Business account: company name, VAT and CR numbers, owner contact, users and roles. Operations: sales, receipts, payments (scheme, last four digits, references — never the card number), stock, shifts, devices. Customers: what you capture at the till with their consent. Employees: names, roles, PINs (hashed), punches. Site: contact-form messages, the IP address and browser of a request.

3Why

To run the till and the back office, to sign and report e-invoices to ZATCA, to post journals to the accounting system you chose, to send HR punches when you connected Basmtak HR, to bill your subscription, to answer your messages, and to keep the service secure.

4Consent at the till

When a cashier creates a customer, the till records consent for the purposes you enabled (receipts, loyalty, messages). A customer can ask you to export or erase their data; the back office does both.

5Where

On servers in the Kingdom of Saudi Arabia. The till keeps an encrypted local copy so it can sell offline. Our sub-processors (payment provider, e-mail, SMS) are listed in the back office.

6How long

Receipts and e-invoices for the period the tax regulation requires; operational data for the life of the account and a grace period after closure; contact-form messages for 24 months; server logs for 90 days.

7Your rights

Access, correction, export, erasure and objection, as the PDPL provides. Write to us from the contact page; we answer within the statutory period.

8Cookies

The site uses no advertising cookies. It keeps your theme and language preference in your browser and a session cookie for the contact form.

Questions about these terms: write to us from the contact page.