Privacy Policy

This policy explains what Inviraj collects, how it is used, and how it is looked after. It applies to the Inviraj website and the Inviraj application.

What we collect

• Account details. Your email, username, phone number and role.
• Business and FBR profile. Your business name, NTN or STRN, address, province, business activities and sector.
• Invoice data. The buyers, products, taxes and invoices you create, and the responses FBR returns for your filings.
• Technical data. Session and security information needed to keep your account working.

Your FBR credentials

Your FBR tokens are encrypted before they are stored, using a key derived for your account. They are write-only in the product, so they are not displayed back to you after you save them. They are used to send filings you have initiated.

How we use your data

We use your data to run the Service: to let you build invoices, to send filings to FBR and PRAL when you initiate them, to produce your PDFs and reports, and to keep your account working. We do not sell your data and we do not use it for advertising.

Who we share it with

Invoice data you file is sent to FBR and PRAL, which is the purpose of the Service. Apart from that, we share your business data only with the infrastructure providers needed to run it, or where we are required to by law.

Where your data is stored

Your data is stored on secure cloud servers. Access is limited to what is needed to run the Service and to keep it available.

Cookies

The Service uses session cookies to keep you signed in. The security service that protects the site from abuse sets cookies of its own. We do not use advertising or cross-site tracking cookies.

Retention

Your data stays available to you while your account is open. The Service does not currently delete or purge data automatically. If you want data removed, email us and we will tell you what we can remove and what we have to keep.

Security

Each account’s records sit under that account, and the Service is built so that one account’s data is not served to another. FBR credentials are encrypted as described above, and sign-in uses session cookies with a lockout after repeated failed attempts. No system is completely secure, and we do not guarantee that the Service cannot be compromised.

Your choices

To ask what data we hold, to correct it, or to raise a concern, email us and we will respond as soon as we can.

Changes

We may update this policy. Changes will appear here with a new “last updated” date.

Contact

Questions about privacy? Email [email protected].