Privacy Policy

Information We Collect

• Registration data: name, email address, phone number, business name
• Transaction data: sales records, payment amounts, payment methods, inventory movements
• Financial data: daily revenue summaries, payment history, refund records
• Customer data: names, loyalty points, purchase history (entered by you)
• Device data: device type, OS version, IP address, device identifier
• Usage data: features used, session frequency and duration
• Crash and diagnostic data: error logs and performance metrics from the mobile app

How We Use Your Information

• Provide and maintain the POS service
• Send invoices and receipts via email
• Deliver promotional Push Notifications to your customers' app
• Process and respond to support tickets
• Generate anonymized analytics to improve the product
• Notify you of new features and important updates

Payment & Financial Data

• We record payment type (cash, card, QR code) and transaction amounts as part of your sales records
• We do not store raw card numbers, CVVs, PINs, or full banking credentials at any time
• Card and digital payments are processed exclusively by third-party payment terminals and processors — we receive only the transaction result and amount
• All payment and financial records are encrypted at rest (AES-256) and in transit (SSL/TLS)
• Access to financial data is restricted to authorized personnel via role-based permissions and full audit logging

Data Sharing

Khmer Digital does not sell or share your personal data with third parties for commercial purposes. We share data only with the third-party service providers listed in this policy who are bound by strict data processing agreements. No personal, financial, or business data is ever disclosed to advertisers or data brokers.

Third-Party Services

• Amazon Web Services (AWS): cloud hosting, database storage, and backups — data stored in encrypted AWS infrastructure
• Google Analytics: anonymized usage analytics on the web dashboard — IP addresses are anonymized before processing
• Google Firebase: push notification delivery to the mobile app — only device tokens are shared, no personal data
• Firebase Crashlytics: crash reporting and diagnostic data from the mobile app — used solely to identify and fix bugs

Data Security

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest in the database
• Optional two-factor authentication (2FA) for all accounts
• Full audit logs for every access and action
• Penetration testing conducted three times per year
• Internal team access restricted by role-based permissions

Data Retention

Transaction and financial records are retained for 7 years to meet accounting and regulatory compliance requirements. If you close your account, all other personal data (excluding legally required audit logs) will be permanently deleted within 30 days of your request.

Cookies & Tracking

• Essential cookies: session login tokens and security identifiers
• Analytics cookies: Google Analytics (anonymized IP) — you may opt out at any time
• Khmer Digital does not use third-party tracking pixels or browser fingerprinting
• Mobile app: device ID is used solely for delivering push notifications and crash reporting

Your Rights

• Right of access: request a full export of all your data at any time
• Right to rectification: update your profile or business information directly in the dashboard
• Right to erasure: request deletion of your account and associated data
• Right to opt out: unsubscribe from marketing emails by clicking the unsubscribe link in any email we send
• Response time: all privacy requests are handled within 48 hours at 2goadvisor@gmail.com

Children's Privacy

Khmer Digital PRO is a business platform intended for adults. Persons under 18 may not use this service without the consent of a parent or legal guardian. We do not knowingly collect personal data from minors.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Cambodia. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of Phnom Penh, Cambodia. Our registered business address is: Phnom Penh, Kingdom of Cambodia. For all privacy inquiries, contact us at 2goadvisor@gmail.com.

Policy Updates

We may update this Privacy Policy from time to time. Users will be notified by email at least 30 days before any material changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.