Point of saleMenuInventoryFinance and payrollOnline ordering and deliveryCustomersOwner and multi-branchSetupFAQRequest early access

Legal

Privacy Policy

Last updated: October 2026

Preplo ("we", "us", or "our") operates the Preplo point-of-sale platform, the Preplo Owner mobile app, and our marketing website. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By signing up for our waitlist or using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Waitlist & Contact Information

When you request early access, we collect:

  • Your full name
  • Your cafe or business name
  • Your WhatsApp number
  • Your email address

This information is used solely to contact you about Preplo, schedule product demonstrations, and send you onboarding information once access is granted.

Usage Data (Active Subscribers)

When you use the Preplo platform, we collect operational data necessary to provide the service: order records, payment summaries, menu configurations, staff profiles, and device activity. This data belongs to you and your business. Preplo acts as a data processor on your behalf.

Preplo Owner Mobile App

The Preplo Owner app is for owners and managers of businesses that already use Preplo. Accounts are created by Preplo for each business; you cannot sign up inside the app. When you use the app, we collect and process:

  • Account details: your name, email address, role, a user ID, and the branches and permissions assigned to your account.
  • Your phone number: you sign in with the mobile number registered on your Preplo account. We send a one-time code to that number on WhatsApp, and you enter it in the app to sign in. Some accounts can instead sign in with a company code, email address, and password; passwords are transmitted over an encrypted connection and stored only as hashes.
  • An install identifier: a random code the app generates the first time it runs on your phone. We use it only to recognise which phone a sign-in belongs to, so that signing in or out on one device does not affect your other devices. It is not your advertising identifier and is not used to track you.
  • Business data you view: sales, orders and payments, finance and expense reports, inventory, menu items, staff, vendors, and customer information (such as customer names, phone numbers, delivery addresses, and amounts owed) for the branches your account can access. This is your business's data, shown to you within the permissions on your account. The app displays it and does not keep a copy on your phone after you close the app or sign out.

Your sign-in session is kept in your device's secure storage (iOS Keychain or Android Keystore). To keep you signed in, a session stays valid while you use the app, and ends after 90 days without use or 180 days in total, whichever comes first, or immediately when you sign out. The app does not collect your location, contacts, photos, or advertising identifier, does not include third-party analytics, advertising, or tracking software, and does not track you across other companies' apps or websites.

We use this data only to authenticate you and to provide the app's features. Accounts are created by Preplo for each business, so the app has no sign-up or account-creation screen. It is retained and deleted as described in Section 5 and in line with your rights in Section 6.

Technical Data

Our servers automatically record standard server logs for our website and app, including IP address, browser or app type, referring page, and timestamps. This data is used to maintain service reliability and security.

2. How We Use Your Information

  • To contact you about your waitlist application and product updates
  • To deliver, maintain, and improve the Preplo platform
  • To provide customer support when you reach out to us
  • To send service-related notifications (e.g., billing, security alerts)
  • To understand usage patterns and improve product features

We do not use your business data for any purpose other than delivering the service you have subscribed to.

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

  • Service providers: Trusted third-party vendors who help us operate the platform (e.g., cloud hosting, email delivery) under strict data processing agreements.
  • WhatsApp (Meta): to deliver your sign-in code we send your phone number and the one-time code through the WhatsApp Business Platform, which is operated by Meta and subject to its own privacy terms.
  • Legal obligations: If required by law, regulation, or valid legal process.
  • Business transfers: In the event of a merger or acquisition, your information may be transferred as part of that transaction. We will notify you before this occurs.

4. Data Security

We implement industry-standard measures to protect your information: encrypted connections (HTTPS/TLS), hashed credentials (bcrypt), and access controls that limit who within Preplo can view customer data.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions and will notify affected users promptly in the event of a breach.

5. Data Retention

Waitlist sign-up information is retained until you ask to be removed or until 12 months after your last interaction with us, whichever comes first.

Operational data for active accounts is retained for the duration of your subscription plus 90 days after termination, giving you time to export your records before deletion.

6. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your data (subject to legal retention obligations)
  • Withdraw consent at any time for communications you have opted into

To exercise any of these rights, email us at contact@preplo.pk.

7. Cookies

The Preplo marketing website uses only essential cookies required for the site to function (e.g., session state). We do not use advertising, analytics, or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify active subscribers via email.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: