Privacy Policy

RetailerOS, operated by Khosha Systems, takes the privacy of your business and customer data seriously. This policy explains what we collect, why, how we use it, and your rights. If anything here is unclear, write to us — we're happy to walk through it.

1. Who we are

"RetailerOS" refers to the software-as-a-service platform operated by Khosha Systems Pvt. Ltd. ("Khosha", "we", "us", "our"), a company registered in India. When you use RetailerOS — whether the website, the application, or any related service — Khosha Systems is the data controller of personal information you provide.

2. Information we collect

We collect only what we need to run your account, deliver the service, and improve the product:

• Account information — name, mobile number, email, store name, GSTIN (if provided), business address.
• Login data — your store code and personal PIN (stored securely), the one-time passwords (OTPs) we send on WhatsApp when an owner signs in that way, the device you are signed in on, and records of when you sign in.
• Business data you enter — inventory, customer records, invoices, IMEI numbers, schemes, repairs, ledger entries. This is your data; we are custodians.
• Billing data — payment instrument tokens (handled by our payment processor), billing address, invoice history. We do not store full card numbers.
• Usage data — feature usage, login times, device/browser type, IP address, error logs. Used to improve performance and diagnose issues.
• Website visits — how you use retaileros.in (pages viewed, time on page, how far you scroll, where you came from). See section 7.
• Communications — messages you send us on WhatsApp or email, details you enter in forms on this website, and feedback.

3. How we use your information

• To provide and maintain the service.
• To send transactional notifications (receipts, system alerts, important policy updates).
• To process billing and payments.
• To comply with legal obligations (e.g., GST records).
• To improve the product and this website, using usage data that is aggregated wherever possible.
• To measure how well our marketing works (see section 7).
• To respond to support requests.

We do not sell your business data, and we do not use it to train our own AI models. We do not sell your personal information or your customers' data to third parties. Ever.

4. Sharing and disclosure

We share data only in these situations:

• Service providers we depend on: hosting (Hostinger), messaging (WhatsApp Business API, operated by Meta), payment gateway, email, and website analytics (Google). Each receives only what it needs to do its job.
• Distributor introductions — when you ask for an introduction through our distributor directory and tick the consent box, we share the details you gave (your name, shop, mobile, district, GSTIN if given, and what you need) only with the distributor(s) we introduce you to, for that introduction. RetailerOS may be paid by the distributor for introductions. You can withdraw by messaging us, and we will ask the distributor to delete your details.
• Distributor applications — if you apply to become a distributor and tick the consent box, we keep your answers and any profile you attach, and share them only with the brands you picked and the companies appointing distributors for them, so they can consider you. RetailerOS may be paid by them. Your application is never published. You can withdraw it at any time by writing to legal@khoshasystems.com.
• Open marketplace requests — if you post a request to buy or sell stock and tick the consent box, we keep the request and share it with businesses that want to buy or sell the same stock, without your mobile number until you agree to be connected. Requests are not published. RetailerOS may earn a fee on a completed deal, agreed with you before the deal. You can withdraw a request at any time by writing to legal@khoshasystems.com.
• Distributor listings — the directory does not publish distributors' names or contact details. It shows only the brands and areas a distributor supplies, a reference number and how we found or checked it. We share a firm's name and contact with a retailer only when we introduce them. You can ask us to correct or remove a listing at any time.
• Legal requirements — when compelled by Indian law, court order, or government authority. We will notify you unless legally prohibited.
• Business transfers — if Khosha Systems is acquired or merged, your data may transfer to the new entity, who must continue to honour this policy.

5. Data retention

We keep account data for as long as your account is active. After you close your account:

• We keep your data for a limited period so the account can be recovered if you change your mind. Export anything you need before you close it.
• Records we are required to keep by law (for example, tax records) are kept for the period the law requires.
• You can ask us to delete your personal data at any time by writing to privacy@khoshasystems.com, subject to the legal requirements above.

6. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (subject to retention requirements above).
• Export your business data.
• Withdraw consent for non-essential processing.

Write to privacy@khoshasystems.com to exercise any of these rights. We aim to respond within 30 days.

7. Cookies and tracking

In the app — we use the cookies and browser storage needed to keep you logged in.

On this website (retaileros.in) we use:

• Google Analytics 4 — cookies named _ga and _ga_* that tell us how many people visit, which pages they read and where they came from. Google processes this data for us.
• Browser storage on your device — small entries that remember choices you make (for example, that you closed a pop-up) and count engagement: time on the page, how far you scroll, whether you have visited before and where you first came from. This is sent to Google Analytics in the same way.
• YouTube — when you play the product video, YouTube (Google) may set its own cookies.

We may use advertising pixels from Google and Meta to measure our marketing. When we do, this page will list them.

How to opt out — block or delete cookies in your browser settings, clear this site's data, or install Google's Google Analytics opt-out browser add-on. The website works without them.

We do not sell behavioural data.

8. Security measures

See our Security page for details. In short: all connections are encrypted with HTTPS, sign-in uses your store code and a personal PIN, staff access is set by role and by store, and data is backed up regularly.

9. Children

RetailerOS is a B2B service for retail businesses. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we'll delete it immediately.

10. International data transfers

Customer data is hosted in India (Hostinger). Some service providers we use, such as Google (website analytics) and Meta (WhatsApp), may process limited data outside India, as permitted under Indian law.

11. Changes to this policy

We may update this policy as the product evolves or laws change. We will post changes on this page and update the date at the top; for material changes we will also notify account owners.

12. Contact us

For privacy questions, data requests, or complaints:

If you're not satisfied with our response, you have the right to complain to the Data Protection Board of India.