Privacy & Policy
Effective 26 July 2026 · Last updated 26 July 2026Who controls your information
HORIX PRO SOFTWARE (PVT) LTD is the operator of POS Mate and the controller for the account, website, billing, security and support information described in this Policy. The company is registered in Sri Lanka under registration number P V 00364292 at No. 47/A Spill Road, Puttalam 61300, Sri Lanka. Privacy and support requests may be sent to info@horixpro.com or made by telephone at +94 71 523 8808. Legal notices may be sent to admin@horixpro.com.
Our role and the customer’s role
POS Mate may act as a controller for account, billing, website, security and support information. For personal data a subscribing business enters about its staff, customers, suppliers or other parties, the business generally determines why that data is used and POS Mate processes it to provide the service. Final controller and processor roles must be confirmed contractually.
Information we may collect
We may process account-holder and employee names, contact details, login credentials, roles and permissions; customer, supplier and party records entered by the business; sales, inventory, purchase, expense and reporting data; subscription, invoice and payment-status information; device, IP, browser, log, diagnostic and security information; website cookies and usage information; SMS delivery records; and contact-form, telephone, email, remote-support or other support communications.
Purposes and legal bases
We use information to create and administer accounts; provide POS, synchronisation, reporting and support services; process subscriptions and invoices; secure, troubleshoot and improve the platform; communicate service information; meet legal obligations; and establish or defend legal claims. The applicable basis may include performing a contract, consent, legal obligation and legitimate interests. The final purpose-to-basis mapping is to be confirmed.
Cookies, application cache and analytics
The website may use essential cookies for security and functionality. POS Mate uses proprietary analytics developed by Horix Pro rather than a third-party analytics platform. No third-party cookie-management platform is currently used. Desktop applications may use Electron cache where necessary for operation. Additional cookies, durations and consent controls will be disclosed before or when they are introduced.
SMS notifications and minimum data sharing
POS Mate uses Text.lk, integrated through CodeRog, to send SMS notifications to customers and business owners. These messages may include purchase receipts, sales or order confirmations, daily sales summaries, business or system notifications, and subscription or account alerts. Only the minimum information required for delivery—the recipient mobile number and required SMS message content—is transmitted to Text.lk through the CodeRog integration and is intended to be used solely to deliver the message.
Service providers and data sharing
HORIX PRO SOFTWARE (PVT) LTD shares information only where necessary to provide requested services, operate and secure POS Mate, meet legal obligations or protect lawful interests. Current providers include DigitalOcean for cloud hosting, Spaceship for domain registration and DNS management, Text.lk through CodeRog for SMS delivery and AnyDesk for approved remote-support sessions. Spaceship does not receive POS Mate customer business data for the domain and DNS services used by Horix Pro; its own infrastructure operates according to its published policies. POS Mate does not currently provide WhatsApp support or use an integrated card-payment gateway.
Hosting, backups and international transfers
The primary POS Mate cloud server is hosted with DigitalOcean in Singapore, so information may be stored or processed outside Sri Lanka. Tenant-scoped disaster-recovery backups are created every 24 hours, verified by checksum and stored in private application storage accessible only to authorised Horix Pro administrators. SMS messages are processed through Text.lk using the CodeRog integration and may be processed on infrastructure operated by those providers in accordance with their privacy and security practices. Their exact SMS infrastructure country is not currently confirmed and will be added when reliable information becomes available.
Security
POS Mate uses reasonable technical and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration, loss and destruction. Controls include access restrictions, authentication, logging, secured local backups, authorised-administrator access, secure transmission where supported and incident response. AnyDesk access requires an approved support session. No system can guarantee absolute security.
Retention and expired subscriptions
Account-specific support and login access continue for a seven-day grace period after subscription expiry. Available business data may be requested for 30 calendar days from the subscription end date, after which the account data is scheduled for deletion from active systems. Backups associated with a deleted subscription are permanently removed within 30 days after account deletion. Billing records are retained for seven years or any different period required by Sri Lankan law; tax records are retained as required by Sri Lankan law; security and audit logs are retained for twelve months; and ordinary system logs are retained for ninety days. Records may be retained longer where reasonably necessary for fraud prevention, legal claims or a binding legal obligation.
Your privacy rights
Subject to applicable law, individuals may have rights to request access, correction or completion, erasure, withdrawal of consent, objection to processing and restriction from further processing, and to challenge certain automated decisions. Exercising a right does not affect processing already lawfully completed and some legal exceptions may apply.
Requests and identity verification
The Horix Pro Privacy Team handles privacy requests submitted by email to info@horixpro.com or by telephone at +94 71 523 8808. A requester must verify identity by logging into the relevant account or completing support-led identity verification. Horix Pro aims to respond within seven business days and will comply with any longer or different period required by applicable law, including formal statutory notification requirements.
Complaints and appeals
Privacy complaints are reviewed internally by the Horix Pro Privacy Team. If the requester is dissatisfied, the matter may be escalated to senior management for further review. This does not limit any right to complain or appeal to the Data Protection Authority of Sri Lanka or pursue another remedy available under applicable law.
Children
POS Mate is a business service and account holders must be at least 18 years old. Customers must not knowingly create accounts for children or enter children’s personal data unless they have a lawful business purpose, appropriate authority and all protections required by applicable law.
Required information and consequences
Some account, contact, authentication, billing and operational information is necessary to enter into or perform the subscription contract. If required information is not provided, POS Mate may be unable to create an account, process a subscription, secure access or deliver requested services.
Policy changes and contact
This Policy is effective from 26 July 2026. Customers will receive at least seven days’ prior notice before a material change takes effect. Privacy requests may be sent to info@horixpro.com, made by telephone at +94 71 523 8808 or sent by post to HORIX PRO SOFTWARE (PVT) LTD, No. 47/A Spill Road, Puttalam 61300, Sri Lanka.
Third-party services
| Service | Provider | Purpose |
|---|---|---|
| Cloud hosting | DigitalOcean | POS Mate application hosting in Singapore |
| Domain & DNS | Spaceship | Domain registration and DNS management |
| SMS gateway | Text.lk (via CodeRog) | Customer bills, sales reports and notifications |
| Remote support | AnyDesk | Approved technical-support sessions |
| Backup storage | HORIX PRO SOFTWARE (PVT) LTD | Local backup and disaster recovery in Sri Lanka |