Legal · Last updated 27 April 2026

Privacy Policy

Plain-English explanation of what we collect, why, and what we do with it. The short version: we collect what's needed to run the service, never sell your data, and let you export or delete it.

On this page

What we collect
Why we collect it
When we share it
How we store it
Your rights
Cookies
Data deletion
Contact

1. What we collect

Account info: Company name, owner name, PAN, mobile, email — required for registration.
Business data: Items, customers, vendors, invoices, payments — what you create inside 4-Square.
Usage logs: Login times, IP address, device, audit trail of changes.
Payment info: Processed by PayU. We store transaction IDs only — never card numbers.

2. Why we collect it

To run your account, generate invoices, and provide the service you're paying for
To prevent duplicate registrations (PAN uniqueness)
To comply with Indian tax law (GST invoicing)
To detect fraud and abuse
To send you transactional emails (renewal reminders, payment confirmations, low-stock alerts)

We share data only when:

You ask us to — e.g. support, account recovery
It's required by law — court orders, tax authority requests
With service providers who help us run 4-Square: PayU (payments), Hostinger (hosting), email infrastructure. They're bound by strict confidentiality.

We never sell your data. We never train AI models on it. We never share with marketers.

4. How we store it

Servers in India (Hostinger), encrypted at rest
HTTPS/TLS 1.2+ for all connections
Passwords hashed with bcrypt (we never see your password)
Daily full backups, weekly per-company exports
Audit trail records every change for accountability

5. Your rights

You can:

Export all your data (CSV / PDF) anytime from owner panel
Correct inaccurate data through the app
Delete records via recycle bin (soft delete) or master password (permanent)
Request full deletion of your account by emailing us
Object to specific processing — contact us and we'll address it

6. Cookies

We use minimal cookies — only what's needed for login sessions and security. No advertising trackers, no analytics that personally identify you.

7. Data deletion

To permanently delete your account and all associated data, email noreply@4square.in from your registered address. We process deletions within 30 days. Note: some records (invoices, tax data) may need to be retained for the legally required period under Indian tax law.

8. Contact

Privacy questions? Email noreply@4square.in. We aim to respond within 7 days.