Privacy Policy

Axiora Smart POS

Last Updated: July 22, 2026

1.0 Introduction

This Privacy Policy explains what information we collect when you and your business use the Axiora Smart POS web application, how we use and protect it, and what rights you have over it. This policy applies exclusively to the Axiora Smart POS system operated within Sri Lanka. By using the system, you agree to the collection and use of information as described here.

2.0 Who We Are

3.0 Information We Collect

To provide a functional point-of-sale service, we collect data on behalf of your business, as well as data regarding your use of the system:

  • Account Information: Your business name, administrator names, contact emails, and phone numbers.
  • Business Data: Inventory lists, product pricing, supplier details, and financial expense records entered into the system.
  • Transaction Data: Sales records, customer receipts, and generated invoices.
  • Customer CRM Data: Information you choose to collect about your patrons, such as their names, phone numbers, and email addresses for loyalty tracking.
  • Technical Information: IP address, browser type, device type, and login timestamps collected automatically to ensure system security and functionality.

4.0 Payment Processing and Financial Data

  • We use PayHere (a Central Bank-approved and PCI-DSS compliant payment gateway) to process all subscription payments securely.
  • Axiora Labs does not collect, process, or store your credit card, debit card, or banking credentials on our servers.
  • All sensitive financial data is submitted directly to and managed by PayHere in accordance with their independent privacy and security policies.

5.0 How We Use Your Information

We use the collected information solely to provide and improve the Axiora Smart POS service. Specifically, we use it to:

  • Operate and maintain your digital shop environment and synchronize your offline data to the cloud.
  • Provide customer support and respond to direct inquiries.
  • Secure the system and prevent unauthorized access or abuse.

We do not sell, rent, or share your business data, transaction history, or customer CRM data to third parties for their own marketing purposes.

6.0 How We Share Information

We may share technical or operational information strictly with:

  • Service providers who help us host the system and maintain database infrastructure, under strict confidentiality obligations.
  • Legal authorities, only where explicitly required by Sri Lankan law or to protect our rights.

7.0 Data Security

We use reasonable technical and organizational safeguards to protect your business and transaction data. While we implement robust security measures to protect your synchronized cloud data, no method of transmission is completely secure, and we cannot guarantee absolute security. You are responsible for securing the physical devices used to access the POS system in your stores.

8.0 Data Retention

We retain your account and operational data for as long as you maintain an active subscription or account with Axiora Smart POS. If you choose to close your account, we will delete or anonymize your business data in accordance with our standard deletion cycles, unless retention is required for legal or tax compliance.

9.0 Your Privacy Rights (Sri Lanka)

As a service operating exclusively in Sri Lanka, we align our data practices with local frameworks:

  • Sri Lanka's Personal Data Protection Act, No. 9 of 2022: This act establishes rights for data subjects including access, correction, and erasure of personal data. We aim to honor these rights. You, or your registered customers, are welcome to raise a data request at any time via contact@axioralabs.com.
  • Note to Merchants: As the primary collector of your patrons' data (CRM), you act as the Data Controller for your customers. Axiora Labs acts as the Data Processor. You are responsible for ensuring you have the right to collect your customers' details.

10.0 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our software practices or for legal reasons. We will update the "Last Updated" date when we do, and notify account administrators of significant changes.

11.0 Contact Us

Questions about these terms or our privacy practices? Reach us at: