Privacy Policy

This Privacy Policy explains how Techzoq (Private) Limited collects, uses, stores, protects, shares, and deletes personal, business, ledger, accounting, and financial information when you use Pakka Khata™.

Pakka Khata™ is designed for Pakistani adhatis, mandi commission agents, small traders, beoparis, agricultural intermediaries, accountants, and authorized staff who need a secure digital replacement for paper khatas and manual accounting records.

This policy applies to Pakka Khata™ mobile apps, Pakka Khata™ web services at https://pakkakhata.com, dashboards, APIs, ledgers, reports, exports, backups, WhatsApp/SMS/email/push communications, and optional integrations with Kissan Market marketplace services.

Pakka Khata™ is a digital double-entry ledger and accounting application built for Pakistan’s agricultural trade environment. The Service supports digital khata management, customer and supplier records, sales, purchases, payments, advances, commissions, expenses, stock, bardana, tulai, arhat, mandi fee, reports, multi-user business access, cloud backup, offline-first entry where supported, and WhatsApp sharing.

Pakka Khata™ is owned and operated by Techzoq (Private) Limited. Techzoq (Private) Limited is responsible for product operations, security controls, support, legal notices, privacy requests, billing support, and platform governance.

Pakka Khata™ collects different categories of information depending on whether you are a primary account holder, authorized staff member, business owner, payer, customer, supplier, or third-party person whose data is entered into a khata by an adhati or trader.

• Primary user information: full name, CNIC where required, mobile number, WhatsApp number, email address, business name, mandi affiliation, shop number, business address, license number where available, profile picture, business logo, bank account references, wallet details, subscription plan, billing history, trial usage, support history, and app language preference.
• Business and staff information: owner details, staff names and phone numbers, roles, permissions, invites, login history, and activity showing who created, changed, finalized, deleted, restored, exported, or approved records.
• Customer and supplier records entered by users: party names, phone numbers, CNIC where entered, village/city/tehsil/district/province, business name, mandi affiliation, opening balance, baqaya, payment history, sales/purchase history, notes, and credit/debit relationship.
• Transaction and ledger data: jama, udhaar, debit, credit, sales invoices, purchase invoices, payment in/out, advances, expenses, cash and bank entries, journal entries, stock movement, bardana, tulai, gross/net weight, quality grade, arhat, mandi fees, attachments, internal notes, revision history, audit logs, and accounting impact records.
• Device and usage data: device type, operating system, app version, browser, IP address, approximate login location, login times, session activity, feature usage, error logs, crash reports, security events, and device identifiers where permitted.
• Communication and billing data: WhatsApp messages sent through Pakka Khata™, SMS OTPs, subscription receipts, balance confirmations, payment reminders, support tickets, emails, push notifications, subscription plan, billing cycle, payment reference, trial status, refund status, and payment failure status.

Pakka Khata™ is different from many consumer apps because primary users often enter records about other people. For example, an adhati may enter a farmer’s name, phone number, sale amount, unpaid balance, bardana record, or payment history. A trader may enter a buyer’s balance or supplier payment details. These third parties may not have downloaded Pakka Khata™.

The adhati or trader decides what third-party data to enter. Pakka Khata™ provides secure software, storage, access controls, export tools, and deletion tools. The adhati or trader remains responsible for collecting and using third-party data lawfully and should inform customers that records may be maintained digitally where appropriate.

• Directly from you when you create an account, add business details, subscribe, contact support, or update your profile.
• From business owners and admins when they invite staff, assign permissions, or create records.
• From ledger entry forms when users record sales, purchases, payments, expenses, advances, stock, bardana, tulai, or journal entries.
• From imports, uploads, attachments, images, PDFs, spreadsheets, or backups.
• Automatically from your device when you use Pakka Khata™.
• From payment processors, WhatsApp Business API, SMS gateways, email providers, push notification providers, analytics tools, and error monitoring services.

• Create and verify accounts, authenticate users, and secure sessions.
• Provide Pakka Khata™ business, ledger, reporting, backup, sync, and staff permission features.
• Store khata records, calculate balances, generate reports, and maintain audit/revision history.
• Manage subscription plans, billing, receipts, renewals, support, and refunds.
• Send OTPs, security alerts, backup alerts, billing notices, user-initiated WhatsApp reminders, and khata confirmations.
• Detect fraud, unauthorized access, suspicious activity, misuse, and system errors.
• Improve performance, usability, language support, accounting workflows, and support quality.
• Comply with legal, accounting, tax, regulatory, AML/CFT, and security obligations.

Where GDPR-style legal bases apply, Pakka Khata™ processes information for contract performance, consent, legal compliance, legitimate interests, and protection of users and the platform. In Pakistan, we process information to provide requested services, meet contractual obligations, protect electronic systems under PECA 2016 principles, follow financial and business recordkeeping expectations, and comply with applicable laws.

Techzoq (Private) Limited acts as a data controller when it decides how and why to process information for Pakka Khata™ account creation, verification, subscription billing, security monitoring, customer support, marketing, product analytics, legal compliance, and abuse prevention.

For khata records entered by adhatis and traders about their customers, suppliers, farmers, buyers, and other parties, Techzoq (Private) Limited generally acts as a service provider or processor. The adhati or trader controls the business relationship and decides what party records to enter.

• Adhati users must handle customer data lawfully and avoid unnecessary sensitive data.
• Adhati users should obtain consent where required and respond to customer correction or deletion requests.
• Pakka Khata™ provides tools for secure storage, export, correction, deletion, and access control where technically available.

Pakka Khata™ uses WhatsApp Business API operated under Kissan Market’s WhatsApp Business arrangements to support account, security, billing, and user-initiated ledger communications. WhatsApp is widely used in Pakistan’s mandi and trading environment, so Pakka Khata™ uses it with consent, anti-spam controls, and message category separation.

• Pakka Khata™ may send account verification OTPs, login/security alerts, subscription receipts, billing notices, app update notifications, backup status alerts, critical service alerts, user-initiated payment reminders, user-initiated balance confirmations, user-initiated khata statement sharing, and support messages.
• Primary users must opt in to receive Pakka Khata™ WhatsApp messages during signup, account settings, or another clear consent flow.
• Before sending WhatsApp messages to their own customers through Pakka Khata™, adhatis are responsible for confirming the customer phone number is correct, the message is lawful and relevant, and consent exists where required.
• Recipients may opt out of promotional or non-essential WhatsApp messages by replying STOP, BAND KARO, ROK DO, or any other clear opt-out instruction supported by our system or support team.
• WhatsApp communications are subject to Meta’s WhatsApp Business Messaging Policy, WhatsApp Business Terms, approved template rules, anti-spam requirements, and customer service messaging window rules.
• Pakka Khata™ may restrict or suspend WhatsApp sending features if a user abuses messaging, sends spam, violates recipient consent, or creates compliance risk.

Pakka Khata™ may use SMS for OTP verification, login alerts, critical account notices, subscription updates, security notifications, and support communications. SMS may be sent through providers such as Eocean, Jazz, Telenor, or similar gateways. You should never share OTPs with anyone.

Pakka Khata™ may use cookies, local storage, device identifiers, and similar technologies to keep users logged in, protect sessions, remember language and settings, improve performance, measure feature usage, detect abuse, debug errors, and support analytics. Disabling cookies may cause some web features to stop working properly.

• With authorized business owners and staff according to Pakka Khata™ business permissions.
• With payment processors for billing and subscription handling.
• With WhatsApp Business API providers, SMS gateways, cloud hosting, backup storage, authentication, email, push notification, analytics, and error monitoring providers.
• With legal, accounting, tax, audit, or security advisers.
• With regulators, courts, law enforcement, or government authorities where legally required.
• With Kissan Market marketplace services if you enable or use marketplace integration.

• Meta Platforms for WhatsApp Business API through Kissan Market’s WhatsApp Business arrangements.
• JazzCash, EasyPaisa, Stripe, banks, card processors, app store billing, and related payment or subscription providers.
• AWS, Google Cloud, Firebase Authentication, Google OAuth, Firebase Cloud Messaging, AWS S3, Google Cloud Storage, SendGrid, Resend, AWS SES, Google Analytics 4, Microsoft Clarity, Sentry, Bugsnag, RevenueCat, and similar infrastructure providers.

Pakka Khata™ may process subscription and payment data for plan activation, renewal, receipts, support, refunds, and account history. We do not store full payment card numbers where third-party payment processors handle card payments. We do not ask for wallet PINs, bank login details, card PINs, or bank OTPs.

• Encryption for data in transit using secure TLS protocols.
• AES-256 encryption at rest where supported by storage systems.
• End-to-end encryption protections for khata data where implemented and supported.
• Role-based access control, business-level data isolation, and staff permission controls.
• Audit logs, revision history, optional multi-factor authentication, optional biometric lock, automatic session timeout, secure backup storage, and suspicious-login monitoring.

Khata data is confidential business information. Pakka Khata™ applies technical and organizational controls to protect party balances, receivables, payables, sales, purchases, payment records, stock, journal entries, internal notes, reports, attachments, and staff activity. Employee and contractor access is restricted based on business need.

Pakka Khata™ is designed as a multi-business platform. Many businesses may use the same application infrastructure, but each business’s data must remain separated by business identity and permissions. We use businessId-based data scoping, role-based access permissions, staff membership checks, owner/admin permission rules, API authorization controls, and audit logging for sensitive actions.

Some Pakka Khata™ service providers may process or store data outside Pakistan, including cloud hosting, WhatsApp infrastructure, authentication, analytics, error tracking, email, backup, and subscription services. Where international transfer occurs, we use reasonable safeguards such as reputable providers, contractual protections, access limitation, and encryption where available.

• Account data is retained while the account is active and for a reasonable period after closure.
• Khata and accounting records are retained for at least five years or longer where required for tax, audit, FBR, accounting, dispute, or legal purposes.
• Payment and subscription records are retained for billing, tax, refund, fraud prevention, and audit requirements.
• Audit logs and revision history are retained to preserve accounting traceability and prevent unauthorized changes.
• Security logs are retained for a limited period unless needed for investigation or compliance.
• Backups are retained according to backup cycles and deleted over time after account closure unless legal retention applies.

Adhati users and business owners own their business khata data. Pakka Khata™ holds that data as a software service provider and platform operator. Users may export supported data in Excel, CSV, PDF, party statements, ledger summaries, payment records, sales and purchase reports, and backup files where available.

• Request access to your personal information.
• Request correction of inaccurate account data.
• Request supported data export.
• Request deletion of eligible personal information.
• Withdraw optional consent.
• Opt out of marketing communications.
• Ask how your data is used.
• Request account closure.

Some people whose data is stored in Pakka Khata™ may not be direct users. If you are a farmer, buyer, supplier, or other party whose data appears in a business user’s khata, you may contact the business that entered your data or contact contact@pakkakhata.com. Because the business user often controls the ledger relationship, we may refer your request to that business user or require verification before taking action.

Pakka Khata™ is intended for users who are at least 18 years old. We do not knowingly create accounts for children or knowingly collect children’s personal information. If we learn that a child has created an account, we may delete the account and related data, subject to legal and accounting retention requirements.

You may request account deletion by contacting support or privacy channels. Before deletion, we may verify your identity, confirm business ownership, ask whether you want to export data, cancel active subscriptions, and preserve legal/accounting records where required. Eligible personal data is generally deleted or anonymized within 90 days after verified closure, subject to backups and lawful retention.

Pakka Khata™ may maintain backups to protect against device loss, accidental deletion, corruption, system failure, or disaster recovery events. Backups may include khata records, business settings, staff roles, parties, transactions, attachments, reports, and audit metadata. Backup deletion may not be immediate after account closure because backups rotate according to scheduled retention cycles.

If we discover a security incident that materially affects your personal, business, ledger, or financial data, we will take reasonable steps to investigate, contain, assess affected data, notify affected users where legally required or operationally appropriate, notify regulators where required, provide recommended protective steps, and improve controls to reduce recurrence.

Pakka Khata™ may send optional marketing communications about new features, subscription plans, training, product updates, marketplace integrations, business tips, and educational content. You may opt out of optional marketing while still receiving essential security, billing, legal, account, and transaction messages.

Pakka Khata™ may use automated or semi-automated systems for fraud detection, suspicious login detection, subscription status, report generation, balance calculations, stock calculations, business insights, error detection, abuse prevention, and risk signals. Automated calculations depend on user-entered data, so users remain responsible for verifying balances, rates, weights, payments, and reports before relying on them.

We may update this Privacy Policy when Pakka Khata™ changes, laws change, payment integrations change, WhatsApp rules change, or security practices improve. For material changes, we may notify users through Pakka Khata™, the website, email, SMS, WhatsApp, or other reasonable channels.

• Privacy inquiries: contact@pakkakhata.com
• Support: contact@pakkakhata.com
• Legal notices: contact@pakkakhata.com
• General inquiries: contact@pakkakhata.com
• Data Protection Officer: contact@pakkakhata.com
• Phone / WhatsApp Business: 0327-1001222
• Registered Office: Plot No 2, Main Boulevard Bypass Town, Depalpur Bypass Road, near Shell Petrol Pump, Kasur, District Kasur, Punjab, Pakistan

This Privacy Policy is governed by the laws of Pakistan. Relevant legal and regulatory context may include PECA 2016, Companies Act 2017, Income Tax Ordinance 2001, applicable FBR recordkeeping expectations, State Bank of Pakistan digital payment and payment systems guidance where relevant, AML/CFT obligations where applicable, personal data protection law when enacted and applicable, Meta WhatsApp Business policies, Apple App Store and Google Play privacy disclosure requirements, and IPO Pakistan trademark regulations for pending trademark status.

This Privacy Policy is effective from 19 May 2026 and was last updated on 19 May 2026.

• Pakka Khata™: our digital ledger and accounting product, trademark application pending with IPO Pakistan.
• Khata: ledger or account book.
• Kachha Khata: informal or draft ledger.
• Adhati: commission agent in a mandi or agricultural trade setting.
• Jama: credit entry.
• Udhaar: debit entry, loan, or amount owed.
• Baqaya: outstanding balance.
• Mandi: wholesale agricultural market.
• Bardana: sacks or bags used for handling produce.
• Tulai: weighing process.
• Arhat: commission charged by an adhati.
• Phari: sub-broker or local intermediary.
• Beopari: trader or buyer.
• Boli: auction or bidding process.
• Kissan: farmer.