On this page
1. Who we are
This policy is issued by TAXNEST TECHNOLOGIES PRIVATE LIMITED ("TaxNest", "we", "us"), Pakistan. It covers the TaxNest web platform at taxnest.com.pk (FBR Digital Invoicing, NestPOS for PRA, and FBR POS) and the TaxNest Android applications, including TaxNest Caller ID (package pk.taxnest.callerid).
TaxNest is business software sold to registered businesses. In almost every case the person using our apps is a shop owner or their staff member, using the software for their own shop.
2. The TaxNest platform
What we collect
- Account and company details you provide — name, email, phone, username, CNIC / NTN, business name and address.
- Transaction data you create — invoices, POS bills, products, customers, ledgers and payments.
- Technical and usage data — log records, device / browser information, IP address, and audit trails of actions taken in your account.
Why
- To run the service and produce your invoices and receipts.
- To transmit, on your instruction, the documents that FBR / PRA require.
- To provide support, prevent abuse and fraud, and improve the platform.
- To send service, billing and account notifications.
3. TaxNest Caller ID (Android app)
TaxNest Caller ID is a companion app for shops that already use TaxNest NestPOS. It sits on the shop's phone and tells the shop's own POS sale screen who is calling, so the cashier sees the customer's name and past orders while the phone is still ringing.
The app is only usable by a person who signs in with an existing TaxNest POS account. It has no public sign-up.
What the app collects and sends
| Data | Why | Where it goes |
|---|---|---|
| Caller's phone number of an incoming call | To match the caller to a customer record in the shop's own POS and show the pop-up | Only to the shop's own TaxNest account on taxnest.com.pk, over HTTPS |
| Caller's display name, when the phone shows one | Shown in the pop-up when the number is not yet a saved customer | Same |
| Time of the call and its type (SIM call or WhatsApp call) | To show the pop-up for the right call and drop stale ones | Same |
| Sign-in email, device model, build type, and a device token | To sign in, to show the shop owner which phones are linked, and to let the owner revoke a phone | Same |
How the app detects a call
- The clean build (website download) uses Android's telephony permissions (
READ_PHONE_STATE,READ_CALL_LOG) to read the number of an incoming SIM call. This is a caller-ID use, which is an approved use of these permissions. - The WhatsApp build (website) and the Google Play build use Android's notification access instead, so that WhatsApp calls — which are internet calls and are invisible to telephony APIs — can also be detected. Before that permission is requested, the app shows a full-screen disclosure describing exactly what is read and where it is sent, and the user must agree.
- Those two builds read an incoming-call notification only when it comes from the phone's own calling app (the default dialer or the system telephony app) or from WhatsApp / WhatsApp Business. A call notification from any other app — Messenger, Telegram, Viber, Skype, Zoom and the like — is ignored: it is not read and nothing about it is sent.
What the app never does
- It does not read, store or transmit any notification other than an incoming-call notification from the phone's own calling app or from WhatsApp — no messages, chats, emails, or other apps' notifications.
- It does not read your call history, contacts, SMS, photos or files.
- It does not record calls or audio.
- It does not track location.
- It does not show ads, and it contains no advertising or analytics SDKs.
- It never sends data to any third party. The only destination is the shop's own TaxNest account.
Retention for Caller ID data
A ring record (number, name, time, call type) is stored so the sale screen can show the pop-up, and is deleted automatically about 48 hours later. If the shop's owner turns the feature off, or revokes that phone from POS → Customize, the phone stops sending anything immediately. Uninstalling the app also ends all collection.
Where the caller is already a saved customer of the shop, that customer record belongs to the shop and is kept as part of the shop's own business records (see section 5).
5. Security & retention
All traffic between our apps and our servers is encrypted in transit using HTTPS (TLS). Access is controlled per account and per user role, sensitive credentials are stored encrypted, and account actions are written to immutable audit logs.
Business records (invoices, bills, customers, ledgers) are retained while your account is active and for the period required by Pakistani tax law. Caller ID ring records are deleted automatically after about 48 hours. Device tokens are deleted when the device is revoked or the user signs out.
6. Your rights & deleting your data
You can ask us for a copy of your data, ask for a correction, or ask for your account and data to be deleted. For Caller ID specifically, you can withdraw the permission at any time from your phone's settings, and the shop owner can revoke the device or switch the feature off from POS → Customize.
The full deletion procedure, including what is deleted immediately and what must be kept for tax law, is on the Account & Data Deletion page.
7. Children
TaxNest is business software intended for registered businesses and their staff. It is not directed to children, and we do not knowingly collect data from anyone under 18.
8. Changes & how to contact us
We may update this policy. The date at the top of this page always shows the current version, and continued use after a change means you accept it.
For any privacy question, data request, or deletion request:
- Email: support@taxnest.com.pk
- Address: OLD GRAIN MARKET
- Or use any channel on our Contact page.
Terms & Conditions and the split of responsibilities between TaxNest and your business are on the Contact & Legal page.