Privacy Policy

1. Information We Collect

We collect information that you voluntarily provide to us when registering, configuring your store, or utilizing features within the App, as well as data generated automatically during your usage.

A. Personal and Business Data

• Account Credentials: Name, email address, mobile phone number, and authentication tokens via Google Firebase Authentication.
• Business Profile Information: Shop/Business name, address, tax/VAT details, store logo, and business contact information.
• Transaction & Financial Records: Product catalogs, stock levels, sales entries, customer/supplier ledgers, purchase records, waybill details, and payment receipts.
• Referral & Payout Data: Bank account details (Bank Name, Account Holder Name, Account Number, Branch) submitted for withdrawing earned referral commissions.

B. Device Permissions Requested by the App

To deliver specific operational features, MrBiz requests access to the following mobile device capabilities:

1. Camera Permission:

   Purpose: To scan barcodes and QR codes for quick inventory/product lookups and point-of-sale checkout, as well as to capture screenshots or images to share with our technical support team for troubleshooting.

2. Storage and Media Access Permission:

   Purpose: To save generated PDF receipts, invoices, sales reports, and waybill stickers directly onto your device storage, and to allow you to upload payment slips, invoices, or custom business logos into the App.

3. Contacts Permission:

   Purpose: To allow you to seamlessly select existing contacts from your phone's address book when creating customer or supplier profiles within MrBiz without manual re-entry.

4. Notification Permission:

   Purpose: To send critical operational alerts, payment due reminders, subscription status updates, and notification of credited referral commissions.

C. Local Storage and Preferences (SharedPreferences)

We utilize local device storage mechanisms, such as SharedPreferences and local database caching, to store user preferences (e.g., language selection, UI themes), session states, and temporary operational data directly on your mobile device. This improves App performance, enables faster loading times, and allows smooth offline functionality.

2. How We Use Your Information

Orexsy uses the collected information strictly for legitimate operational purposes, including:

• Providing, operating, maintaining, and improving the features of the MrBiz App.
• Authenticating user logins and securing user accounts.
• Storing and syncing your sales, inventory, and customer ledgers across your cloud account.
• Processing subscription payments, manual transfer slip verifications, and referral commission payouts.
• Generating automated analytics, sales summaries, AI-driven business insights, PDF invoices, and waybill stickers based on raw data supplied by you.
• Sending transactional notifications, security alerts, and system support communications.
• Preventing fraudulent transactions, unauthorized account access, or referral program abuse.

3. Third-Party Services and Data Sharing

We do not sell, rent, or trade your personal or business data to third-party marketers. However, we integrate with trusted third-party service providers to power key App functions. Information is shared strictly to the extent necessary to execute these services:

1. Google Firebase (Infrastructure & Cloud Storage):

   We utilize Google Firebase for user authentication, cloud database hosting (Firestore), analytics, and cloud file storage. Your data is stored on secure, encrypted Google cloud infrastructure.

2. Payment Gateways (PayHere):

   Online subscription card payments are processed securely via PayHere. We do not store full credit/debit card numbers on our servers; payment credentials are handled directly by PCI-DSS compliant payment processors.

3. Third-Party Courier Services (Domex, Prompt, Koombiyo, etc.):

   When you utilize auto-waybill booking features, necessary dispatch details (recipient name, delivery address, phone number, parcel weight, and COD amount) are transmitted via API to your selected courier service provider.

4. WhatsApp / Meta Services:

   When sending customer receipts or credit payment reminders via WhatsApp, client-side parameters and official messaging APIs are invoked to construct pre-formatted messages.

5. Artificial Intelligence (AI) and Analytics Processing:
   • MrBiz utilizes Artificial Intelligence (AI) algorithms and automated analytical processing engines to evaluate raw sales figures, inventory metrics, and financial records.
   • This AI processing is conducted strictly to generate automated business reports, sales insights, inventory trends, and operational recommendations for your business.
   • We do not sell your business data to train external public AI models. Data processed through AI analytical engines is handled securely and solely for delivering smart insights within your MrBiz account.

4. Data Security

We employ industry-standard administrative, technical, and physical security measures to safeguard your business and personal information. All communications between the MrBiz App and cloud infrastructure (Firebase) are encrypted in transit using Transport Layer Security (TLS/HTTPS). Authentication tokens and sensitive inputs are handled securely.

However, please be aware that no electronic transmission over the internet or cloud storage architecture can be guaranteed to be 100% immune to breaches. While we strive to protect your data, you acknowledge that you provide your information at your own risk.

5. Account and Data Deletion Policy

In compliance with global privacy regulations and Google Play Store policies, Users have full control over their personal data and possess the right to request permanent account deletion.

How to Request Account Deletion:

• In-App Request: You may navigate to Settings > Account > Delete Account within the MrBiz App to initiate an automated deletion request.
• Email Request: Alternatively, you may submit an explicit account deletion request by emailing us from your registered email address to: info@Orexsy.com with the subject line "Account Deletion Request - MrBiz".
• Web Request: You can also fill out the online form on our Account Deletion Page.

What Happens Upon Deletion:

Upon verification and approval of your deletion request:

• Your personal profile, authentication records, store settings, and active subscriptions will be permanently deactivated.
• All associated sales records, customer ledgers, uploaded images, and database entries stored on our cloud servers will be permanently wiped and deleted within thirty (30) days of the request, except where retention is legally required for compliance or financial auditing.

6. Data Retention for Inactive Accounts

If an account remains unpaid, inactive, or unutilized for a continuous period of six (6) consecutive months, Orexsy reserves the right to designate the account as abandoned and purge, archive, or permanently delete all associated database records to manage cloud storage integrity.

7. Children's Privacy

MrBiz is an operational business and point-of-sale tool specifically designed and intended for use by commercial merchants, business owners, and individuals who are at least 18 years of age.

We do not knowingly solicit, market to, or collect personal information from children under the age of 18. If we become aware that an individual under 18 has submitted personal information without verified parental consent, we will take immediate steps to delete such data from our servers.

8. Changes to this Privacy Policy

Orexsy reserves the right to update, modify, or revise this Privacy Policy at any time to reflect software updates, legal requirements, or operational changes.

We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and, where appropriate, displaying an in-app notice or notification. We encourage you to review this Privacy Policy periodically to remain informed about how we are protecting your information.

9. Contact Us

If you have any questions, concerns, comments, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

• App Name: MrBiz
• Company Name: Ceylon Orexsy (pvt) ltd
• Official Email: info@venturelk.com
• Country/Jurisdiction: Sri Lanka