1. Who we are
Sastomulya is a desktop inventory, POS billing, purchase, and related ledger product for Nepal retail and wholesale shops. Website: https://sastomulya.com/. Contact: sastomulya.nepal@gmail.com or phone 984-3367486.
2. What this policy covers
This policy applies to the Sastomulya website, desktop client, license/enrollment, online cloud sync with Sastomulya cloud, and optional Google Drive connection.
3. Information we collect
When you use the product we may collect or process:
- Account and contact: name, shop/business details, phone, email, license or installation identifiers.
- Shop operations data (primarily on your device): products, stock, sales, purchases, customers/suppliers, cash and reporting records.
- Technical/connectivity: device name, installation token, connection state, error logs (for support).
- Website: messages you send via contact or email.
- Google connection (optional): account identity (such as email) and Drive access tokens issued when you click Connect to Google — see section 5.
4. How we use information
We use information only to:
- Operate Sastomulya, verify licenses, provide support, and protect security.
- Sync data to Sastomulya cloud when you choose that online option.
- Create secure backups/restores on Google Drive when you choose that option.
- Improve the product, prevent abuse, and meet legal obligations.
5. Google user data and Drive API (important)
Some shops may choose Google Drive for online data storage. In that case the Sastomulya desktop app requests limited permissions through Google OAuth.
We use the Google Drive API primarily to store encrypted shop backups and a small manifest in the app’s private app data folder on your Google account (or files the app creates/opens). We do not request full Drive access to browse your entire Drive or read unrelated personal files unless clearly required and consented.
Access tokens from Google are stored securely on the device and used for silent renewal. You can Disconnect in Settings; we then delete local tokens and attempt to revoke them with Google.
Google API Services User Data Policy — Limited Use: we do not use Google user data for advertising, do not sell it, and do not transfer it to third parties for sale or advertising. Human access is generally limited to support at your request, security incidents, or legal requirements.
6. Local SQLite and cloud
Day-to-day shop transactions are written first to the local database on your computer. POS can keep working when Sastomulya cloud or Google Drive is offline; remote storage is for extra copy or sync.
7. Sharing and third parties
We do not sell shop transaction data. Infrastructure needed to run the service (hosting, email, license APIs) may be used. With the Google Drive option, files remain in your own Google account. Disclosure may occur only if required by law or needed for security.
8. Security
We apply reasonable technical and organizational measures (such as encrypted backup payloads and secure token storage). No internet service is risk-free; keep device access and Google account 2-Step Verification secure.
9. Retention
Local shop records may be retained for multi-year periods consistent with Nepal tax/business practice (as designed in the product). Google Drive backups depend on your Drive quota and the app’s retention policy. License/contact records are kept while the relationship is active and as required by law.
10. Your rights and controls
You can disconnect Google in Settings, request access/correction via support email, and revoke app access in your Google Account security settings. You may also contact us through the website.
11. Children
Sastomulya is intended for business shop use and is not directed at children.
12. Changes
We may update this policy. Material changes will refresh the effective date and be published on this page.
13. Contact
Privacy questions: sastomulya.nepal@gmail.com · https://sastomulya.com/contact/ · phone 984-3367486.