Privacy Policy
How Software System (SoftSys) protects, processes, and secures your enterprise data in accordance with Pakistani privacy standards and international encryption protocols.
Effective Date: January 1, 2026 | Last Updated: July 20261. Introduction & Enterprise Scope
Software System Private Limited ("SoftSys", "we", "our", or "us") is a registered software development and technology solutions provider in Pakistan (registered with PSEB and SECP). We are committed to maintaining the confidentiality, integrity, and security of all personal and enterprise data entrusted to us by our corporate clients, system users, and website visitors.
This Privacy Policy applies to all services provided by SoftSys, including our Enterprise Resource Planning (ERP) platform, FBR POS digital invoicing connector, cloud infrastructure, web and mobile applications, and online communication channels.
2. Data We Collect
Depending on how you interact with SoftSys products, we collect the following categories of information:
- Account & Contact Information: Full name, corporate email address, phone/WhatsApp number, NTN/STRN details, company name, and official address.
- ERP Operational Data: Customer ledgers, purchase orders, inventory masters, multi-warehouse stock counts, and employee payroll logs uploaded to your deployed ERP.
- FBR Invoicing Payloads: Cryptographic sales payloads, QR code tokens, transaction totals, and tax breakdowns processed through our Tier-1 FBR POS integration engine.
- System Usage Logs: IP addresses, browser types, session timestamps, device identifiers, and system audit logs for security monitoring.
3. Purpose of Data Processing
SoftSys processes collected data strictly for legitimate business purposes, including:
System Execution
Deploying, operating, and maintaining your ERP databases and application servers.
FBR Regulatory Compliance
Transmitting encrypted sales tax payloads to Federal Board of Revenue servers as legally mandated.
Technical Support
Diagnosing server errors, resolving database bugs, and performing automated daily backups.
Client Communications
Sending system status notifications, invoice alerts, and WhatsApp business updates.
4. Data Encryption & Storage Security
We implement enterprise-grade security controls across all database layers:
- Encryption at Rest & Transit: All databases, ledgers, and API transmissions use AES-256 encryption and TLS 1.3 cryptographic protocols.
- Isolated Private Cloud: Client ERP systems operate within isolated Virtual Private Clouds (VPC) with strict firewall rules and role-based access control.
- Offsite Encrypted Backups: Automated daily backups stored across redundant Pakistani and global cloud data centers with disaster recovery SLAs.
5. Pakistani Cyber Laws & Regulatory Standards
SoftSys complies fully with the statutory requirements set forth by the Government of Pakistan, including:
- Prevention of Electronic Crimes Act (PECA 2016): Ensuring data privacy and preventing unauthorized access to computerized systems.
- FBR Tier-1 Invoicing Rules: Adhering to cryptographic data integrity guidelines mandated by the Federal Board of Revenue.
- PSEB Code of Conduct: Upholding Pakistan Software Export Board standards for IT service delivery.
6. Third-Party Integrations
When enabled by your company, SoftSys interfaces with specific third-party APIs:
- FBR / Provincial Revenue Authorities (PRA, SRB): Encrypted tax payload submission.
- WhatsApp Business API: Automated daily sales summaries and stock alerts.
- Payment Gateways: Bank payment feeds and digital checkout connectors.
7. Contact Our Privacy Office
If you have questions about this Privacy Policy or wish to request data export or audit logs, please contact our Legal & Privacy Department: