1. Who we are
Sastomulya is a desktop inventory, POS billing, purchase, and related ledger product for Nepal retail and wholesale shops. Website: https://sastomulya.com/. Contact: sastomulya.nepal@gmail.com or phone 984-3367486.
2. What this policy covers
This policy applies to the Sastomulya website, desktop client, license/enrollment, online cloud sync with Sastomulya cloud, and optional Google Drive connection.
3. Information we collect
When you use the product we may collect or process:
- Account and contact: name, shop/business details, phone, email, license or installation identifiers.
- Shop operations data (primarily on your device): products, stock, sales, purchases, customers/suppliers, cash and reporting records.
- Technical/connectivity: device name, installation token, connection state, error logs (for support).
- Website: messages you send via contact or email.
- Google connection (optional): account identity (such as email) and Drive access tokens issued when you click Connect to Google, see section 5.
4. How we use information
We use information only to:
- Operate Sastomulya, verify licenses, provide support, and protect security.
- Sync data to Sastomulya cloud when you choose that online option.
- Create secure backups/restores on Google Drive when you choose that option.
- Improve the product, prevent abuse, and meet legal obligations.
5. Google user data and Drive API (important)
Some shops may choose Google Drive for online data storage. In that case the Sastomulya desktop app requests limited permissions through Google OAuth.
We use the Google Drive API (scope drive.file) to create a visible folder, My Drive › Sastomulya › Backups, and to store encrypted shop backups and small manifest files in it, and to read or update only files the app created or that you select in Google’s file picker. We do not request access to browse your whole Drive or read your other files. We also use your Google email address and OpenID sign-in (userinfo.email, openid) only to show which account is connected.
Web app (sastomulya.com/app): the Sastomulya backup files you select (drive.file permission) are downloaded, decrypted and edited in your own browser and written back to your own Drive. This data and your Google token are never sent to or stored on Sastomulya servers; the token lives only in browser memory.
Access tokens from Google are stored securely on the device and used for silent renewal. You can Disconnect in Settings; we then delete local tokens and attempt to revoke them with Google.
Google API Services User Data Policy, Limited Use: we do not use Google user data for advertising, do not sell it, and do not transfer it to third parties for sale or advertising. Human access is generally limited to support at your request, security incidents, or legal requirements.
6. Local SQLite and cloud
Day-to-day shop transactions are written first to the local database on your computer. POS can keep working when Sastomulya cloud or Google Drive is offline; remote storage is for extra copy or sync.
7. Sharing and third parties
We do not sell shop transaction data. Infrastructure needed to run the service (hosting, email, license APIs) may be used. With the Google Drive option, files remain in your own Google account. Disclosure may occur only if required by law or needed for security.
8. Security
We apply reasonable technical and organizational measures (such as encrypted backup payloads and secure token storage). No internet service is risk-free; keep device access and Google account 2-Step Verification secure.
9. Retention
Local shop records may be retained for multi-year periods consistent with Nepal tax/business practice (as designed in the product). Google Drive backups depend on your Drive quota and the app’s retention policy. License/contact records are kept while the relationship is active and as required by law.
10. Your rights and controls
You can disconnect Google in Settings, request access/correction via support email, and revoke app access in your Google Account security settings. You may also contact us through the website.
11. Children
Sastomulya is intended for business shop use and is not directed at children.
12. Changes
We may update this policy. Material changes will refresh the effective date and be published on this page.
13. Contact
Privacy questions: sastomulya.nepal@gmail.com · https://sastomulya.com/contact/ · phone 984-3367486.