Data Privacy Policy
Learn about our data privacy policy, how we protect user data, and your rights regarding personal information at LogixInventor.
1. Who we are
{{company_name}} (“{{brand_name}}”, “we”, “us” or “our”) is a software and digital services company registered in Pakistan, with its office at {{registered_address}}. We build and sell business software (ERP, CRM, point of sale and other applications), develop websites and mobile apps, and provide cloud, hosting, design and digital marketing services.
For the personal information described in this policy, we are the data controller: we decide why and how it is used. When we process information on behalf of a client (for example, the customer records inside an ERP we host for that client), we act as that client’s processor, and the client’s own privacy notice governs that information.
Questions about this policy or your information can be sent to {{privacy_email}} or by phone/WhatsApp on {{phone}}.
2. What this policy covers
This policy applies to personal information we collect when you:
- visit {{website}} and any page, blog article, knowledge base article or tool on it;
- create an account, sign in to the client portal, place an order, request or accept a quotation, or pay an invoice;
- contact us by form, e-mail, phone, WhatsApp, our website chat assistant or live chat;
- subscribe to our newsletters or receive our business e-mails;
- buy, download or use our software and subscriptions, or work with us on a project.
It does not cover websites or services run by other companies, even when we link to them.
3. Information we collect
Information you give us
- Account and profile: name, e-mail address, phone number, company, country, profile picture and your password (stored only as a one-way bcrypt hash; we cannot read it). If you turn on two-factor authentication, we store the data needed to verify your codes.
- Orders, quotations and billing: billing name, e-mail, phone, company, postal address, city, country, tax number, the products or services you order, payment method chosen, payment confirmations and any notes you add. We do not collect or store payment card numbers. Payments are made by bank transfer or other methods settled outside our website.
- Messages: what you write in our contact form, support tickets, quotation responses, e-mails, chat assistant and live chat conversations, together with the name, e-mail and other details you choose to give.
- Enquiries from the chat assistant: if you ask us to contact you, the name, e-mail, phone, company, job title, area of interest, budget, timeline and message you provide, and your consent to be contacted.
- Newsletters: your e-mail address and, where asked, your name, and where you signed up.
- Blog comments and feedback: the name, e-mail and website you enter with a comment, and feedback you leave on help articles.
- Project materials: content, files, credentials and data you share with us so we can deliver a project.
Information collected automatically
- Technical and security logs: IP address, browser and operating system, device type, pages and API addresses requested, response codes, timing, and the date and time. Sign-in activity (successful and failed attempts, new devices, sessions) is logged to protect accounts. A random device identifier is stored in your browser and kept by us only in hashed form.
- Chat assistant analytics: a random visitor identifier stored in your browser, the pages you viewed, the page you arrived from, campaign (UTM) tags, device and browser, and how you interacted with the assistant. We use this to answer you in context and to understand which pages lead to enquiries.
- Website performance: anonymous page-speed measurements (for example how quickly a page loaded) together with the page path and device type. These measurements are stored without your IP address.
- E-mail engagement: our business and marketing e-mails record whether an e-mail was opened and whether a link in it was clicked, so we can stop sending messages that are not wanted. We do not store your IP address for these events.
- Cookies and browser storage: see our Cookie Policy for the exact list.
Information from other sources
- Business contact information that companies publish about themselves (company name, website, business address, business e-mail and phone) from public directories and websites, which we may use to introduce our services to businesses (see section 6).
- Payment confirmations from banks and payment providers when you pay us.
- Search and analytics services such as Google Search Console, which report how our website appears in search results in aggregated form.
We do not ask for, and ask you not to send us, sensitive information such as health data, religious beliefs, biometric data or national identity card numbers, unless it is strictly needed for a project and we have agreed how it will be protected.
4. How we use your information and our legal bases
We only use personal information when we have a valid reason. Where data-protection laws require a legal basis (for example the EU and UK GDPR), the bases we rely on are shown below.
| Purpose | Legal basis |
|---|---|
| Creating and running your account and client portal; processing orders, quotations, licences, subscriptions, invoices and payments; delivering projects and support | Performance of a contract with you, or steps you asked us to take before entering one |
| Answering your enquiries, chat and live chat messages, and support requests | Our legitimate interest in responding to people who contact us; contract where it concerns a purchase |
| Keeping accounts and systems secure: sign-in protection, two-factor authentication, fraud and abuse prevention, error and security logs | Our legitimate interest in protecting our users, customers and systems; legal obligation where security is required by law |
| Sending newsletters and marketing e-mails you subscribed to | Your consent, which you can withdraw at any time |
| Introducing our services to businesses using their published business contact details | Our legitimate interest in business-to-business marketing, always with an easy way to opt out |
| Improving the website, measuring page speed and understanding which content helps visitors | Our legitimate interest in running an effective website |
| Keeping accounting, tax and business records; responding to lawful requests from authorities; enforcing our terms and defending legal claims | Legal obligation; our legitimate interest in establishing, exercising or defending legal claims |
Where we rely on legitimate interests, we have considered your rights and expectations and believe our use is proportionate. You can object at any time (see section 11).
5. Artificial intelligence features
Our website chat assistant answers questions about our services. By default it runs on our own engine, on our own servers. When we switch a feature to an external AI provider (such as OpenAI, Google Gemini, Groq or DeepSeek), the text needed for that task is sent to the provider to generate a reply. We configure these providers through their business APIs and do not share your account details with them for this purpose.
Inside our business, AI also helps our team draft content, summarise conversations, read imported contact lists and sort replies to our e-mails. A person in our team reviews AI-assisted output before it is relied on for anything that affects you.
We give enquiries an interest score so we can follow up with the most relevant ones first. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
AI-generated answers can be wrong. Please do not rely on the chat assistant for legal, financial or other professional advice, and avoid typing confidential or sensitive information into it.
6. Marketing and how to opt out
Newsletters. We send newsletters only to people who subscribed. Every newsletter contains an unsubscribe link that works with one click, and you can also write to {{contact_email}}.
Business introductions. We may send a small number of short, personal e-mails to businesses whose published contact details suggest our services could help them. Each e-mail identifies {{company_name}}, includes our postal address and contains an opt-out link. If you opt out, reply that you are not interested, or an e-mail bounces, the address is added to a do-not-contact list and we will not e-mail it again.
Service messages. Messages about your account, orders, invoices, security and support are not marketing; we send them as long as you have an account or an active order with us.
7. Who we share information with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share it only as follows:
- Service providers who work for us, under contracts or terms that require them to protect it: our hosting and server providers; e-mail delivery providers; AI providers when an AI feature is used (section 5); cloud storage providers that hold our encrypted or access-controlled backups; and Google services we use for search performance and, where enabled, website analytics and fonts.
- Payment and banking partners, to the extent needed to receive and reconcile your payments.
- Professional advisers such as accountants, auditors and lawyers, under a duty of confidentiality.
- Authorities, when we are required to by law, court order or a lawful request from a competent authority in Pakistan or elsewhere, or when needed to protect the rights, property or safety of our customers, the public or us.
- A buyer or successor, if all or part of our business is reorganised, merged or sold, in which case your information remains protected by this policy.
- Anyone else with your consent or at your direction.
8. International transfers
We are based in Pakistan and serve clients in many countries. Our servers and some of our service providers (for example AI, e-mail and cloud storage providers) may be located outside your country, including in the United States and the European Union. When we transfer personal information across borders, we take steps to make sure it stays protected, such as choosing providers with strong security commitments and, where the law requires, using recognised safeguards like the European Commission’s Standard Contractual Clauses.
9. How long we keep information
We keep personal information only for as long as we need it for the purposes above, then delete or anonymise it. The periods below are the maximums we work to:
| Information | How long |
|---|---|
| Account and profile | While your account is open, and up to 24 months after your last activity unless you ask us to delete it sooner |
| Orders, invoices, payments and contracts | As long as tax and company law require (generally up to 10 years) |
| Chat assistant conversations | Up to 12 months |
| Chat assistant visitor activity | Up to 6 months |
| Contact form messages, enquiries and support tickets | Up to 3 years after the matter is closed |
| Newsletter subscriptions | Until you unsubscribe; we keep the address on a suppression list so we never e-mail it again |
| Security, sign-in and server logs | Generally up to 6 months, longer if needed to investigate an incident |
| Page-speed measurements | Raw measurements up to 14 days; anonymous daily totals longer |
| Backups | Typically 30 days, after which they are overwritten |
10. How we protect your information
We use technical and organisational measures appropriate to the risk, including: encrypted connections (HTTPS); passwords stored only as bcrypt hashes; two-factor authentication available for customer and staff accounts; encryption of sensitive stored credentials such as mailbox and cloud-storage passwords; role-based access so staff see only what their work requires; rate limiting and automated blocking of abusive traffic; activity, security and error logging; and regular backups.
No method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to put your rights at risk, we will notify you and any authority as required by applicable law.
Please keep your password private, use two-factor authentication, and tell us immediately at {{security_email}} if you suspect someone has accessed your account.
11. Your rights
Subject to the law that applies to you, you have the right to:
- Access the personal information we hold about you and receive a copy;
- Correct information that is inaccurate or incomplete (much of it you can update yourself in the client portal);
- Delete your information when we no longer need it or you withdraw consent, unless we must keep it by law;
- Restrict our use of it while a concern is being resolved;
- Data portability: receive the information you gave us in a structured, machine-readable format;
- Object to our use based on legitimate interests, and at any time to direct marketing;
- Withdraw consent where we rely on it, without affecting what we did before;
- Complain to us, and to a data protection authority where one exists for you.
How to make a request: use the privacy request form on this page or e-mail {{privacy_email}}. We may ask you to confirm your identity before acting on a request, to protect your information from others. We answer within 30 days; if a request is complex we will tell you why we need more time. Making a request is free, unless it is clearly unfounded or excessive.
12. Additional information for your region
Pakistan
We respect the right to privacy under Article 14 of the Constitution of the Islamic Republic of Pakistan and comply with the Prevention of Electronic Crimes Act, 2016, the Electronic Transactions Ordinance, 2002, and the regulations of the Pakistan Telecommunication Authority on unsolicited communications. While a comprehensive personal data protection law is still under consideration in Pakistan, we follow internationally recognised data protection principles, and will update our practices and this policy when new legislation takes effect.
European Economic Area, United Kingdom and Switzerland
If you are in these regions, the GDPR (or its UK and Swiss equivalents) gives you the rights in section 11 and we rely on the legal bases in section 4. You may lodge a complaint with the data protection authority where you live or work; we would appreciate the chance to address your concern first.
California and other US states
In the last 12 months we collected the categories of personal information described in section 3 (identifiers, commercial information, internet or network activity, and professional information) for the purposes in section 4, and disclosed them to the service providers in section 7. We do not sell or “share” personal information as those terms are defined in the California Consumer Privacy Act, and we do not knowingly sell information of consumers under 16. You may ask to know, correct or delete your information, and you will not be treated differently for exercising these rights. An authorised agent may make a request on your behalf with your written permission.
13. Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13, and you must be at least 18, or the age of majority where you live, to create an account or buy from us. If you believe a child has given us personal information, please contact us and we will delete it.
14. Third-party websites and embedded content
Our pages may link to other websites and may include embedded content such as YouTube or Vimeo videos and Google Maps. Embedded content behaves as if you visited the other website: that provider may collect data and set its own cookies when the content loads or when you interact with it. Their privacy policies apply to that data.
15. Changes to this policy
We review this policy regularly and update it when our services or the law change. The effective date at the top shows when this version took effect, and earlier versions remain available on this page. If we make a significant change, we will tell account holders by e-mail or in the client portal before it applies.
16. Contact us
{{company_name}}
{{registered_address}}
E-mail: {{privacy_email}}
Phone / WhatsApp: {{phone}}
Website: {{website}}