Privacy Policy

What we hold

• Your phone number and name — that is your login.
• Your PIN, stored only as a one-way hash. Nobody here can read it back, including us.
• Your business: name, address, trade, logo, and the branches under it.
• What you sell and what you sold: items, prices, orders, bills, expenses.
• Customers you choose to save — a name and a number, entered by you.
• The devices signed in to your shop, so you can see and remove them.

If you order at a shop that uses PepulBill

When you scan a table QR, we record your order and bill for that shop. If you join a shop's stamp card or scratch card offer, we hold the phone number you enter so the shop can recognise you next time. That information belongs to the shop you ordered from — ask them, or us at hello@pepulux.com, to see or delete it. You never need an account or an app to order.

What we do not hold

No card or bank details — PepulBill takes no payments, so it never asks for them. No location, no contacts, no photo library, no advertising trackers, and no third-party analytics watching what you tap.

Cookies

Three, all ours: one that keeps you signed in, one that remembers your language, one that remembers light or dark. There are no advertising cookies on this site.

Where it lives

In a Postgres database run by Supabase, served by Vercel. Each shop's rows are separated at the database itself, so one shop cannot read another's — that is enforced by the database, not only by the app.

Who can see it

You, and the people you invite to your shop — each only as far as the permissions you give them. Our staff look only when you ask us for help, or when the law requires it.

We do not sell your data, and we do not hand it to advertisers. If you connect your own SMS gateway, messages go through your account, not ours.

Children

PepulBill accounts are for businesses and are not for anyone under 18. Diners of any age can order at a shop without an account.

How long we keep it

While your shop is open. You can close your shop from Settings → Business settings, or ask at pepulbill.pepulux.com/delete-account if you cannot sign in. Closing takes the shop off the public side at once; it stays restorable for 30 days, and its records are permanently deleted within 60 days of closing. Backups roll off within 90 days after that. A staff member can remove their own login at any time — the shop's bills they created stay with the shop. Ask us at hello@pepulux.com for a copy of your data or for it to be erased.

Contact

Pepulux (Private) Limited (PV 00331930), No. 15, Murukesar Lane, Nallur, Jaffna — hello@pepulux.com, +94 77 208 2227. If this page changes, the date at the top changes with it.