Privacy Policy for OS Pharmacy

1. Introduction and Our Data Mission

OS Pharmacy ("the App," "the Service," "we," "us," or "our") is a Pharmacy Management System developed and operated by ZAAG Systems Limited. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web portal (os-pharmacy.com), our mobile application, and related services.

Our mission is to make the pharmacy management experience safer and more efficient. We adhere to these core principles:

• You Own Your Data: The Pharmacy Owner retains full ownership of all business and patient data entered into the system.
• Transparency: We only collect information necessary to provide and improve the service.
• Confidentiality: We treat patient and business data as strictly confidential and do not sell it to third parties.

2. Information We Collect

To provide our pharmacy management services, we collect several types of information:

A. Account, Registration, and Sensitive Business Information

When you register your pharmacy with us, we collect:

• Business & Contact Data: Pharmacy name, address, owner's name, phone number, and email address.
• Credentials: Username and encrypted passwords for authentication.
• Sensitive Information (For Legal Verification): Government-issued identification, which may include Trade License number, VAT/BIN registration, or National ID (NID) of the owner, used strictly for legal verification and account security.

B. Business & Operational Data

As you use the system to manage your shop, you input specific data which we process and store:

• Inventory Data: Medicine lists, stock levels, purchase prices, and vendor details.
• Sales Data: Transaction history, invoices generated, and revenue reports.
• Customer Data: Names, phone numbers, and prescription details of your customers that you voluntarily enter into the system for your records.

C. Platform Usage and Device Permissions

• Internet/Network Activity: Device, browser, network connection, IP address, and information about how you use the app or web portal.
• Camera: Used strictly for scanning medicine barcodes and reading prescriptions within the mobile app.
• Storage (Read/Write): Required to store database files locally for our "Offline Mode" features and to save reports/invoices on your device.

3. Legal Basis and How We Use Your Information

We process your data based on one of the following legal grounds: a Contractual Obligation (to deliver the service you subscribed to) or Legitimate Interests (to operate and improve the service).

We use the collected information for the following purposes:

Based on Contractual Obligation:

• Service Provision: To operate the pharmacy management system, calculate stock, generate invoices, and sync data across your devices.
• Support: To assist you with technical issues or account recovery.

Based on Legitimate Interests:

• Platform Improvement: To analyze usage trends (e.g., popular features) to improve the software's performance, stability, and user experience.
• Risk & Fraud Prevention: To monitor system activity and protect the platform and our users against fraud and security threats.
• Internal Reporting: To provide internal analytics on service usage.
• Communication & Marketing: To send important notices regarding system updates, downtime, subscription renewals, or to market new features and services directly relevant to your business.

Based on Consent:

We may process data based on your specific consent for features that fall outside our primary service offering. You have the right to withdraw this consent at any time.

4. Data Confidentiality & Patient Privacy

• Data Ownership: You (the Pharmacy Owner) retain ownership of all business and patient data.
• Confidentiality: We treat all patient data entered by you as strictly confidential. We do not sell, trade, or rent patient data to third parties.
• Access: Our technical staff may only access your database for maintenance or support purposes upon your specific request or strictly for debugging system-critical errors.

5. Third-Party Services and Data Disclosure

• Service Providers: Trusted third parties for essential services like Cloud Hosting (e.g., AWS, Google Cloud), Data Analysis, and Email/SMS Gateways (to facilitate OTP or invoicing features).
• Legal Compliance: We will disclose your information when required by law, regulation, or governmental request (e.g., Bangladesh Police, courts).
• Advertising & Marketing Partners: To serve advertisements for OS Pharmacy's own services to potential business users.

6. Data Security

• Encryption: Data transmission between your device and our servers is encrypted using SSL/TLS protocols.
• Access Control: Strict access controls are in place to prevent unauthorized personnel from accessing your business data.
• Local Security: For offline data stored on your device, we rely on the device's operating system security; we recommend keeping your device password-protected.

7. Data Retention

We retain your account and business data for as long as you maintain an active subscription or account with us. If you choose to terminate your service, you may request the deletion of your account and associated data. We may retain certain transaction records as required by financial laws.

8. Your Rights

Depending on your usage, you may have the following rights regarding your data:

• Right to Know: To request information about what data we collect, use, and share about you.
• Right to Access & Correction: You can view and edit your inventory and profile data directly through the app settings.
• Right to Data Portability: You may request an export of your inventory and sales data.
• Right to Deletion: You may request the deletion of your account by contacting our support team.

Note: To ensure your security, privacy, and the integrity of our data, we may verify your identity and may, in such cases, request your National ID (NID), passport, or driving license.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our software or legal requirements. We will notify you of any significant changes through the app or via email.