1. Overview
DawaSphere provides cloud-based pharmacy management software for pharmacies, pharmacy owners, and authorized staff in Pakistan. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data, pharmacy business data, and service usage information when you use our website, onboarding flows, subscription services, and application.
2. Information We Collect
- Account information: owner name, pharmacy name, email address, phone number, role, login activity, and branch assignment.
- Pharmacy profile information: license or registration details, address, city, province, branch records, staff users, and subscription plan details.
- Operational records: inventory, medicines, batches, expiry dates, purchase records, suppliers, customers, sales invoices, payments, receipts, ledgers, and reports entered by your authorized users.
- Technical information: IP address, device/browser details, authentication tokens, audit logs, error logs, and feature usage events needed to secure and operate the platform.
- Payment and billing information: invoice status, subscription plan, billing cycle, transaction references, and payment gateway responses. We do not intentionally store complete card numbers or banking passwords.
3. How We Use Data
We process data to provide the SaaS service, authenticate users, enforce role-based access control, maintain branch and pharmacy isolation, generate reports, send service notifications, process subscriptions, prevent fraud or abuse, troubleshoot support requests, and comply with applicable Pakistani laws and regulatory obligations.
4. Pharmacy Customer and Patient-Like Data
Pharmacies may enter customer names, phone numbers, credit balances, sale histories, and medicine-related purchase information. DawaSphere acts as a service provider for this data. The pharmacy is responsible for ensuring it has a lawful basis to enter and use this information and for honoring requests from its own customers where legally required.
6. Security
We use access controls, authentication, tenant isolation, branch-level context, encrypted transport, backups, and operational monitoring to protect data. No system is perfectly secure, so pharmacies must also protect user credentials, assign appropriate roles, and promptly remove access for former staff.
7. Data Retention
We retain account and operational data for as long as your subscription remains active, as required for accounting, audit, dispute resolution, legal compliance, backup restoration, or legitimate business operations. After termination, deletion or export requests may be subject to verification, technical limitations, and legally required retention periods.
8. Your Choices and Rights
Account owners may update pharmacy profile data, manage staff access, request support, ask for account export/deletion, and opt out of non-essential marketing communications. Service-critical emails such as security, billing, and operational notices may still be sent.
9. Hosting and International Processing
DawaSphere may use cloud infrastructure and vendors located in Pakistan or other jurisdictions. Where data is processed internationally, we use contractual and technical safeguards appropriate for a SaaS service.
10. Contact
For privacy questions, contact DawaSphere support at support@dawasphere.com. Please include your pharmacy name and account email so we can verify the request.