1. Introduction
ByaparOS ("we", "our", or "us") operates the ByaparOS business management cloud platform. We are committed to protecting the privacy, commercial confidentiality, and integrity of the business records entrust to us by Nepali enterprises, including garment workshops, retail shops, wholesale distributors, and educational suppliers.
This Privacy Policy explains how we collect, process, store, and safeguard data when you visit our website (byaparos.com), use our cloud ERP modules, or submit inquiry forms.
2. Multi-Tenant Data Isolation & Ownership
Your Data Remains Exclusively Yours
All sales records, customer phone numbers, supplier rates, Karigar wage ledgers, and stock levels entered into your ByaparOS organization belong entirely to your business. We never sell, rent, or cross-monetize tenant data.
ByaparOS is architected with strict multi-tenant database row-level scoping. Each database query is partitioned by your organization identifier, ensuring that no business can ever view, query, or access another tenant's confidential operational records.
3. Information We Collect
We collect information in the following categories:
- Account & Organization Details: Business name, Permanent Account Number (PAN/VAT), registered address, branch locations, and proprietor contact details.
- Operational Business Records: Product catalogues, barcode numbers, customer Khata records, delivery recipient phone numbers, and Karigar piece-work rosters.
- Demo & Trial Inquiries: Contact name, mobile number, business type, and requirements submitted via our public demo forms.
- Device & Logging Telemetry: Anonymized IP addresses, browser types, session timestamps, and error logs used exclusively for performance monitoring and intrusion prevention.
4. Data Protection & Security Measures
We implement industry-standard administrative, physical, and technical safeguards:
- Encryption in Transit: All HTTP communications are strictly enforced through TLS 1.3 encryption with HSTS headers.
- Automated Backups: Point-in-time encrypted database snapshots are maintained in redundant cloud storage to protect against accidental data loss.
- Role-Based Access Controls (RBAC): Within your organization, staff access is constrained by defined roles (Owner, Manager, Cashier, Auditor) preventing unauthorized internal data viewing.
5. Nepal Tax & Regulatory Compliance
For businesses utilizing our VAT Invoicing and Annex reporting modules: tax invoices, credit notes, and purchase registers are retained in compliance with the Nepal Value Added Tax Act 2052 and Inland Revenue Department (IRD) directives. Once final IRD CBMS certification is issued, electronic invoice hashes may be transmitted to the government portal in accordance with statutory requirements.
6. Cookies & Local Storage
We use cookies and browser localStorage strictly for necessary operational functionality:
- Session cookies for secure user authentication and CSRF token protection.
- Local storage preferences for Dark Mode, language toggle (English/Nepali), and sidebar collapse state.
- Cloudflare Turnstile cookies to prevent automated bot submissions on public forms.
7. Contact Information
If you have questions, data deletion requests, or security inquiries regarding this policy, please reach out to our team: