Privacy Policy

1. Introduction

Welcome to SnabbBiz. This Privacy Policy explains how we collect, use, share, and protect information when you use the SnabbBiz mobile application ("the App"), operated by INFODATA Systems Pvt Ltd.

2. Information We Collect

a. Account & Registration Information

• Business and contact details: company name, mobile number, and email address you provide when registering a business account.
• Device identifier: a device-specific ID used to link your device to your business account and enforce device-based login.
• Login credentials: username and password (stored securely; passwords are never stored in plain text).

b. Financial & Transaction Information

• Business accounting data you enter: sales, invoices, inventory, debtors, creditors, and general ledger entries you create within the App, used to generate your reports and financial statements (Profit & Loss, Balance Sheet, Cash Flow).
• Subscription payment information: when you pay your SnabbBiz subscription invoice, payment is processed by our third-party payment processor, PayHere (Sri Lanka). We do not collect, see, or store your full card number, CVV, or banking credentials — these are entered directly into PayHere's own secure payment interface. We receive only confirmation of payment success/failure and a transaction reference from PayHere.
• AI question packs: if you add SnabbBuddy AI question packs, they are added to your SnabbBiz subscription bill and paid the same way as your other SnabbBiz invoices.

c. Device Permissions & Hardware Access

The App requests the following device permissions, used only for the stated purpose and never for advertising or tracking:

• Camera: to scan product barcodes when adding items to inventory or a sale.
• Microphone & speech recognition: only when you tap the microphone button to ask SnabbBuddy a question by voice. Your speech is turned into text by your phone's own speech recognition service (Google on Android, Apple on iPhone), under that provider's privacy terms. SnabbBiz never receives or stores your voice recordings — only the resulting text question is sent, as described in section 2(e).
• Bluetooth: to connect to and print receipts/invoices on supported thermal receipt printers.
• Biometric authentication (Face ID/fingerprint): used to lock access to sensitive screens (e.g. financial reports, data management). Biometric data is processed entirely on your device by your device's operating system — SnabbBiz never receives, transmits, or stores your biometric data.
• SMS (registration verification): during business registration, we send a one-time verification code by SMS to the mobile number you entered, to confirm it is a real, reachable Sri Lankan number. This code is generated and sent by our servers via our SMS provider — it is not sent from your device, and the process is the same on Android and iOS. We do not store the code beyond the short window needed to verify it.
• Push notification token: used to deliver staff notifications (e.g. announcements, alerts) and, for the main user, the optional SnabbBuddy morning summary to your device.

SnabbBiz does not access or collect your device's location.

d. Usage Information

We may collect data about how you interact with the App, including features used and reports accessed, to help us maintain and improve the service.

e. SnabbBuddy AI Assistant

SnabbBuddy is an optional AI assistant in the App. It is only available to users their business's main user has allowed, and nothing is sent until you agree to the notice shown before your first question.

• What is sent: your question, and the business figures needed to answer it (for example sales, purchases, stock, customer and supplier balances, cash and bank, and profit), are sent securely to Anthropic, the provider of the Claude AI model, only to generate the answer.
• What is not sent: your login details, passwords, biometric data and voice recordings are never sent.
• How Anthropic uses it: Anthropic processes this data as our service provider under its commercial terms. It does not use it to train its AI models, and keeps it only for a limited period.
• Your chat history is kept only on your phone until you tap "New chat". Answers with profit figures that needed your fingerprint or face are not kept on the phone.
• What SnabbBiz keeps: a usage record for each question (date, user and cost) for billing — not the text of your questions or answers. If the main user receives the morning summary, the short summary note is stored on our servers so it can be shown in the App.
• Reporting an answer: if you flag an answer, only the reason you choose is recorded — not the question, the answer or any figures.
• AI answers can be wrong. Please check important figures against your reports in the App.

3. How We Use Your Information

• Authentication: to verify your identity and grant access to your business's accounting and sales data.
• Service delivery: to generate your invoices, reports, and financial statements, and to process your subscription billing.
• AI assistant: if you use SnabbBuddy, to answer your questions about your business and to prepare the main user's optional morning summary.
• Communication: to send staff notifications, billing reminders, and important service updates.
• Improvement: to analyze usage patterns and improve the App's functionality and reliability.

4. Data Sharing

We do not sell your information. We share data only in these limited circumstances:

• PayHere (payment processor): to process your subscription payments. PayHere's own privacy policy governs how they handle payment details you enter directly with them.
• Anthropic (AI provider): only if you use SnabbBuddy, your questions and the business figures needed to answer them, as described in section 2(e). Anthropic does not use this data to train its models.
• Service providers: we may use third-party infrastructure (e.g. cloud hosting) to operate the App; these providers do not use your data for their own purposes.
• Legal requirements: if required to do so by law or in response to valid legal process.

We do not share your business or financial data with any other third party for marketing or advertising purposes.

5. Data Security

We use reasonable technical and organizational measures — including encrypted connections and secure authentication — to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention & Account Deletion

When your account is deleted:

• Your business data — sales, invoices, inventory, General Ledger, and all reports and financial statements you created in the App — is permanently deleted. This is your own business's accounting data; SnabbBiz has no independent legal obligation to retain it on your behalf, and does not do so once you request deletion. If you need your own copies for your business's tax or audit purposes, please export your reports (PDF) before requesting deletion — SnabbBiz is a tool for managing your accounting, not your business's system of record for regulatory retention.
• SnabbBiz's own billing records — basic records of your subscription invoices and payment confirmations (e.g. amount, date, payment reference) — may be retained separately for a limited period, as these form part of SnabbBiz's own accounting records as a business, kept for our own tax and regulatory compliance. This is limited to transaction metadata, not your business data, and does not include your sales, inventory, or accounting records.

7. Your Choices & Rights

• Access: you can request access to the information we hold about you.
• Correction: you can request correction of inaccurate information.
• AI assistant: SnabbBuddy is optional. You can stop using it at any time, the main user can turn it off for other users in User Management, and the morning summary can be switched off from its menu.
• Deletion: you can request deletion of your account and associated data, subject to any legal or accounting retention requirements.

8. Children's Privacy

SnabbBiz is a business management tool intended for business owners and staff. It is not directed at, and we do not knowingly collect information from, children under 13.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. Continued use of the App after changes are posted constitutes your agreement with the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how your information is handled, contact us at info@infodataAcc.com.