Privacy Policy
This Privacy Policy explains what information BoltSync Technologies ("we", "us") collects when you use the BoltSync website (tryboltsync.com), the BoltSync desktop application, and the Web Reports portal, and what we do with it. We have written it to be read, not skimmed. If anything is unclear, email support@tryboltsync.com.
1. Who we are
BoltSync Technologies, Lahore, Punjab, Pakistan. We are the data controller for the personal information described in this policy.
2. Our approach: your data stays on your PC
BoltSync is an offline-first desktop application. Your sales, purchases, stock, customers, suppliers and financial records are stored in a database on your own computer. We do not have access to that data and it is never sent to us unless you deliberately turn on a feature that sends it (Web Reports, or backup to your own Google Drive) — each of which is explained below and is off by default.
3. What we collect, and why
We collect the minimum needed to run the product. In summary:
| What | When | Why | Legal basis |
|---|---|---|---|
| Licence key, a hardware identifier of the PC it is activated on, activation date, product tier | When you activate BoltSync | To issue and enforce your licence and to stop one licence being used on many machines | Performance of our contract with you |
| Last-seen date and IP address of the licensed PC | Periodic licence check (roughly every 6 hours when online) | To confirm the licence is still valid and to detect abuse | Our legitimate interest in protecting the product |
| Business name, contact name, phone number, email | When you buy a subscription or contact us | To set up your licence, invoice you and respond to you | Performance of a contract; legitimate interest in replying to you |
| Shop ID and PIN | When you sign in to Web Reports | To verify you are allowed to see that shop's reports | Performance of a contract |
| Report data (sales totals, stock, receivables, profit) | Only if you turn on Web Reports | To show your reports on the portal | Your consent, which you can withdraw by turning the feature off |
| Server logs (IP address, browser, pages requested, timestamp) | Whenever you visit the website or portal | Security, abuse prevention and keeping the service running | Legitimate interest |
We do not collect payment card details on this website. Subscriptions are arranged directly with us over WhatsApp or email and paid by bank transfer or other methods we agree with you.
4. The website
The website does not use advertising trackers, social-media pixels or analytics cookies. It stores one preference in your browser (light or dark theme) and, if you sign in to Web Reports, a session token so you stay signed in. See the Cookie Policy.
Fonts are loaded from Google Fonts and one script from the jsDelivr CDN; when your browser fetches them, those providers receive your IP address as part of the request. We are working to serve these files ourselves.
5. The desktop application
Apart from the licence check described above, the application does not send your data anywhere unless you enable a feature that does:
- Web Reports / cloud sync (Enterprise plan, off by default): sends summarised report data to our servers roughly every 15 minutes so you can view it online. Turn it off in Settings → Web Access and syncing stops.
- Backup to Google Drive (Pro and above, off by default): uploads an encrypted backup of your database to your own Google Drive account. We never receive the file. Google's own privacy policy applies to your Drive.
- Software updates: the application checks GitHub for a newer version. That request tells GitHub your IP address and the version you are running.
6. Web Reports and cloud sync
If you turn Web Reports on, the synced report data is stored on servers we rent. It is protected by your Shop ID and PIN. Choose a PIN you do not use elsewhere and do not share it. You can delete synced data at any time by turning Web Access off and asking us to purge it, which we will do within 30 days.
7. WhatsApp and email support
If you message us on WhatsApp we see your phone number, name and the messages you send. WhatsApp is a service of Meta Platforms and its own privacy policy applies to how it handles your messages. We keep support conversations so we can help you again later and to improve the product.
8. Third parties we use
| Provider | What for | What they receive |
|---|---|---|
| GitHub (Microsoft) | Hosting installer downloads and update checks | IP address, download request |
| Google Fonts | Website fonts | IP address, font request |
| jsDelivr | One website script | IP address, script request |
| WhatsApp (Meta) | Customer support chat | Your phone number and messages, if you contact us there |
| Google Drive | Optional backups to your own account | Backup file, sent by you to your account |
| Our hosting provider | Licence server and Web Reports | The data in section 3 |
We do not sell personal information, and we do not share it with anyone else except where the law requires us to.
9. How long we keep data
- Licence and account records: for as long as you hold a licence, and up to 3 years afterwards for accounting and dispute purposes.
- Web Reports data: until you turn the feature off and ask us to purge it, or 12 months after your subscription ends, whichever is sooner.
- Support conversations: up to 2 years.
- Server logs: up to 90 days.
10. Security
Connections to our servers use HTTPS. PINs are stored hashed, never in plain text. Access to our servers is limited to people who need it. No system is perfectly secure, so if you believe your data has been compromised, contact us immediately.
11. Your rights
You can ask us to tell you what personal information we hold about you, correct it, delete it, or stop using it. To exercise these rights email support@tryboltsync.com. We will respond within 30 days. If you are in a jurisdiction with a data-protection regulator, you also have the right to complain to them.
Pakistan's Prevention of Electronic Crimes Act 2016 applies to our handling of electronic data. If Pakistan's Personal Data Protection legislation comes into force, we will update this policy to reflect it.
12. Children
BoltSync is a business product and is not directed at anyone under 18. We do not knowingly collect information from children.
13. Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell licence holders by email or WhatsApp.
14. Contact
BoltSync Technologies · Lahore, Punjab, Pakistan · support@tryboltsync.com · WhatsApp +92 302 7568850
← Back to BoltSync