1. Who we are
Zeeshan Iron & Steel Shop Manager is operated by Zeeshan Software House. The software supports iron and steel shops with billing, stock tracking, purchase records, ledgers and related accounting tasks. For privacy enquiries, contact softwareironsteelshop@gmail.com.
2. Information we process
To provide the software, we may process shop details, contact information, authorized user identities, device and session information, invoices, customers, suppliers, inventory, ledger balances, expenses, payments and other records entered by the shop. We also process operational data such as subscription status, security events, errors and backup activity required to run and protect the service.
The shop controls which business information its authorized users enter. Business records belong to the shop, subject to applicable law and contractual obligations.
3. Google account access and backups
Google Drive backup is optional. When a shop owner chooses to connect Google, our application requests the https://www.googleapis.com/auth/drive.appdata scope and basic identity information through openid and email. Identity information helps confirm which Google account the shop connected.
The Drive permission is used only to upload, identify, retrieve, verify, rotate and restore encrypted shop backups in this application's private Google Drive app-data storage. We do not request permission to read ordinary files, photos, email or unrelated folders in your Google Drive.
The application receives authorization tokens through Google's OAuth process. Refresh tokens are stored encrypted on our server to support customer-authorized automatic backups. We do not ask for, receive, or store the customer's Google password.
Google user data obtained through these permissions is used to provide and maintain the backup service, keep the connection secure, and respond to the customer's support requests. It is not used for advertising or sold to third parties. Our use of Google data follows Google's API Services User Data Policy, including its Limited Use requirements.
4. Security and shop separation
Shop records are logically separated by shop identity, and server access is checked against authenticated user and shop permissions. Sensitive connections and requests use HTTPS. Google backup contents are encrypted before upload, and the backup encryption key is kept on the server rather than written into Google Drive backup files or shared with other customers.
Security reduces risk but cannot eliminate it completely. Customers should protect login credentials, authorize devices carefully and notify support if they suspect unauthorized access.
5. Service providers and disclosure
Cloudflare provides application hosting and related infrastructure. Google provides the optional Drive storage service selected by the customer. These providers process information as needed to operate their respective services and under their own terms.
We do not sell customer business records or Google user data. Information may be accessed by authorized service personnel only as reasonably needed for troubleshooting, security, account administration, or to comply with applicable legal requirements.
6. Retention, backups and deletion
Business records are retained as needed to provide the shop service and meet applicable obligations. Where automatic backup is enabled, the software creates periodic encrypted snapshots. The backup rotation is designed to keep the five newest verified backup copies for each shop, removing the oldest after a new backup has been verified. Backup creation can fail because of connection, storage or service limits; a displayed completion status should be checked before relying on a recovery point.
Disconnecting Google stops future app-authorized Drive backup operations. Existing backup files may remain in the connected Google account's app-data storage. If you want help removing retained backups or requesting removal of service data, contact us from an authorized shop account at softwareironsteelshop@gmail.com. We may need to verify authority before acting. Retention and removal can be limited by security, legal or legitimate recovery obligations.
7. Your choices
- Connect or disconnect Google Drive in the application's backup settings.
- Enable or disable automatic backups in the application's backup settings.
- Revoke the application's Google account access through your Google Account's third-party connections settings.
- Contact support to ask about shop information, data correction, access or deletion requests.
Revoking Google access can interrupt future backups and restorations until you reconnect. Offline records that have not synchronized may not be included in the latest cloud backup.
8. Changes and contact
We may update this policy as the software or applicable requirements change. The current version and effective date will be published on this page. For any privacy concerns, email softwareironsteelshop@gmail.com.