Privacy Policy — Fastora Business

Last updated: September 27, 2026 · Official URL: eylora.store/privacy

Fastora Business is a business-management app (point of sale, invoicing, inventory, customer records) built for shop owners and their staff. The app allows a shop owner to start a one-day free trial and create a store and its initial administrator account directly in the app. Shop owners can also create and manage staff accounts. This policy describes exactly what the app actually collects — nothing more, nothing assumed.

1. Who controls the data?

• Account and store data: shop name, owner name, phone number, username, password, store code, session data, and plan/trial information such as trial status and expiration date. Controlled by the app's owner/operator, who runs the backend server that receives it.
• Shop customer data (third parties): name, phone number, address, location, and notes entered by shop staff about the shop's own customers. This data is owned and controlled by the shop owner as the Data Controller; we act only as a technical Data Processor storing it to run the system on their behalf. Any correction or deletion request for a customer's data must go through the shop owner.

2. Data the app actually collects

3. Data the app does NOT collect

• No ads and no advertising network.
• No payment or card data processed in-app.
• No stored calls or voice recordings.
• No saved camera/gallery photos, except one the user explicitly attaches to a support request.

4. Sharing data with third parties

We do not sell your data or share it for marketing. Data is shared only with:

• Google Firebase: used only to send push notifications (Firebase Cloud Messaging) — not for any analytics or usage-data collection.
• WhatsApp messaging via our own server — only if the shop owner enables WhatsApp notifications to their own customers.

No data is shared with any other party beyond what is listed above.

5. How we protect your data

• All app–server communication uses encrypted HTTPS.
• Every request is authorized by a JWT token; data cannot be accessed without it.
• Passwords are never stored on-device and are verified only by the server.
• Access to a shop's data is scoped to that shop's own Store Code.

6. Data retention and deletion

• Staff/user at a shop: contact the shop owner who issued your login — they manage and can deactivate accounts.
• Shop owner: if you created your store and account directly in the app, you may request deletion of your account and all associated data (including stored customer records) through the account and data deletion request page or via mwsawafta@gmail.com. Deletion is carried out within a reasonable time after verifying your identity as the account owner.
• Data stored only locally on your device (e.g. the saved printer) is removed automatically on logout or app uninstall.

7. Children's privacy

This app is intended for business (B2B) use by adult shop owners and staff. It is not directed at children, and we do not knowingly collect data from children under the legal age.

8. Changes to this policy

This policy may be updated when new features that collect additional data are added. Updates will be published on this page with a revised "Last updated" date above.