Privacy Policy

LagaPOS ("LagaPOS", "we", "us") is a business operations platform operated from Bangladesh and available at lagapos.com. It helps WooCommerce store owners manage orders, inventory, couriers, coupons, staff activity and customer communications from one admin workspace.

This policy explains what information we collect, why we collect it, and how we protect it when you use LagaPOS.

Account information. When you sign in, we collect your email address and authentication identifiers. If you sign in with Google, we receive your Google account email, name and profile identifier from Google — we do not receive or store your Google password.

Store connection data. To sync with your WooCommerce store, we store your store URL and WooCommerce REST API credentials (consumer key and secret), which you provide explicitly in settings.

Business data. Orders, products, inventory levels, coupons, customer names, phone numbers and delivery addresses synced from your connected store or created inside LagaPOS.

Usage and security data. Sign-in times, IP addresses, device fingerprints and staff activity logs used for security, fraud prevention and audit purposes.

• Operate and sync your orders, inventory, coupons and courier bookings.
• Authenticate users and enforce role-based access for admins and staff.
• Detect fraud, block abusive phone numbers or devices, and secure accounts.
• Send transactional SMS notifications you configure (e.g. order updates).
• Produce reports on sales, staff activity and inventory that you request.
• Comply with legal obligations and resolve disputes.

If you choose "Continue with Google", Google shares your basic profile (email, name, profile ID) with us solely to authenticate you. We use this data only to create and secure your LagaPOS session. We do not sell Google user data, use it for advertising, or share it with third parties beyond what is required to operate the service.

We share data only with the services needed to run LagaPOS:

• Your own WooCommerce store (orders, products, stock, coupons).
• Courier providers you connect (e.g. BD Courier) for booking deliveries.
• SMS providers you configure (e.g. BulkSMSBD) for order notifications.
• Cloudflare Turnstile for bot and abuse protection.
• Supabase for authentication and managed database hosting.

We never sell your data or your customers' data to anyone.

Data is stored in an encrypted, access-controlled database. API credentials and secrets are stored server-side and never exposed to the browser. Access is limited to authenticated admin users through role-based permissions, and sensitive actions are logged for audit.

We retain business data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by contacting us; we will delete it within a reasonable period unless legally required to keep it.

• Access, correct or export the data we hold about you.
• Request deletion of your account and data.
• Disconnect your WooCommerce store at any time, which stops all syncing.
• Withdraw Google sign-in access from your Google account settings.

LagaPOS uses only essential cookies for authentication sessions and security verification. We do not use advertising or cross-site tracking cookies.

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of LagaPOS after changes means you accept the updated policy.

For privacy questions or data requests, contact the LagaPOS team at support@lagapos.com or through the admin panel of your workspace.