Privacy Policy

1. Introduction

PakFinax is a web-based ERP and digital invoicing platform for businesses in Pakistan. This Privacy Policy explains how we collect, use, and handle information when you use our website and services, including workflows that may support tax compliance activity.

2. Information We Collect

• Account information, such as name, email, username, and access role.
• Company profile data, including business identifiers and contact details.
• Operational ERP data, including customers, products, invoices, and related records.
• Basic technical and usage information used for reliability and service improvement.
• Audit and security logs, including role updates and important account activities.

3. How We Use Information

• To provide and operate PakFinax services.
• To authenticate users and authorize access based on permissions.
• To maintain company-level data segregation and governance controls.
• To support invoice generation, reporting, and operational workflows.
• To support compliance workflows and recordkeeping needs.
• To monitor security, reduce misuse risk, and support audit review.
• To provide customer and technical support.

4. Tax and Regulatory Submissions

When a user chooses digital invoicing submission workflows, relevant invoice data may be transmitted to government tax systems, including FBR/PRAL-aligned channels. The user and company remain responsible for the accuracy and legality of submitted data. PakFinax facilitates workflow execution and is not legal or tax advice.

5. Data Sharing

• With trusted service providers supporting operations on a need-to-know basis.
• With government or tax authority systems when users initiate relevant workflows or where required by law.
• With legal or regulatory authorities where disclosure is legally required.

6. Data Retention

We retain data for as long as needed to support operations, compliance, security, and audit obligations. Deletion requests may be subject to legal and regulatory retention requirements.

7. Security

PakFinax applies layered security controls, including role-based access management, company-level data isolation, audit trails, least-privilege principles, and encryption in transit. No system can guarantee absolute security, but we continuously improve our controls and monitoring posture.

8. Your Rights and Choices

• You can access and update your account information.
• Company administrators can manage users and access rights within their authorization scope.
• You may request data export or deletion, subject to legal obligations.
• You may manage browser-level cookie preferences.

9. Cookies

PakFinax uses session cookies required for authentication and secure application functionality. We may use additional cookies for analytics and service improvement where applicable.

10. International Transfers

Data may be processed in locations where our service providers operate. Where applicable, we apply contractual and operational safeguards to protect data in line with this policy.

11. Children's Privacy

PakFinax is designed for business and professional use and is not intended for children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with the revised "Last updated" date.

13. Contact

For privacy questions or requests, contact us at info@pakfinax.com.