Privacy Policy for QB Dealer

1. Scope

This Policy applies to the QB Dealer Android and iOS applications and the backend services they connect to. It does not apply to third-party websites, apps, or services that we do not control, even if accessible through the App.

2. Information We Collect

2.1 Information You Provide (App Users)

• Phone number, used to log in via one-time passcode (OTP). We do not use passwords.
• Name and role (e.g., field officer, shopkeeper, agent), assigned as part of your account.
• Device information associated with your account session (device model, OS version, a device identifier used to secure your login session).

2.2 Information About End Customers

When an App User processes an installment-financing application, the App collects the following information about the End Customer applying for financing:

• Identity document data: CNIC (national identity card) number, name, father’s name, date of birth, and dates of issue/expiry, captured by photographing the front and back of the CNIC and read using optical character recognition (OCR) and QR-code decoding.
• Photographs: a photo of the CNIC (front and back) and a live selfie photo of the End Customer, taken within the App.
• Biometric verification data: the selfie photo is compared against the CNIC photo using automated facial-comparison technology to verify that the person applying matches the identity document presented (see Section 4).
• Financing application details: information relevant to the installment plan being applied for, such as the product being financed, its device/IMEI identifier (where applicable), profession, and other application details the App User records.
• Contact information: phone number and any other contact details provided as part of the application.
• Location of the transaction: the geographic location (GPS coordinates) of the shop or location where the application is being processed, captured at the time of application.

This information is provided to us by our App Users (our authorized dealers, agents, and field officers) on behalf of the End Customer, as part of the End Customer’s application for financing, and is used solely for the purposes described in this Policy.

2.3 Automatically Collected Information

• Device and app diagnostics: device model, operating system version, app version, and crash/error logs, collected to identify and fix bugs and stability issues.
• Push notification token: used to deliver in-app notifications (e.g., application status updates).
• Usage analytics: general usage statistics about how the App is used, to help us improve it.

2.4 Permissions Used by the App

The App may request the following device permissions. We only use each permission for the purpose described:

3. How We Use Information

We use the information described above to:

• authenticate App Users and maintain their login sessions;
• process, evaluate, and manage installment-financing applications, including verifying the identity of End Customers;
• detect and prevent fraud, including verifying that the person in a selfie photo matches the identity document presented;
• operate, maintain, and improve the App, including diagnosing technical issues and crashes;
• send operational notifications (e.g., application status updates);
• comply with applicable legal, regulatory, and record-keeping obligations related to consumer financing.

We do not use End Customer identity or biometric data for advertising purposes, and we do not sell personal information.

4. Biometric and Identity Verification

As part of processing a financing application, the App captures a selfie photograph of the End Customer and compares it against the photograph on their CNIC using automated facial-comparison technology, provided by a third-party cloud service (see Section 5). This comparison produces a similarity score used to help confirm that the applicant is who they claim to be. This process is a required step in our identity-verification and fraud-prevention procedures for financing applications and is performed by, or with the assistance of, our App Users at the point of application.

Photographs and identity-verification results are used only for identity verification, fraud prevention, and the specific financing application in connection with which they were collected, and are retained in accordance with Section 6.

5. How We Share Information

We share information with the following categories of third parties, solely as necessary to operate the Service:

• Cloud infrastructure and identity-verification providers (e.g., Amazon Web Services), used to process and store application data, and to perform facial-comparison and document-analysis services described above.
• Optical character recognition / document-verification service providers, used to read data from CNIC photographs.
• Analytics, crash-reporting, and messaging providers (e.g., Google Firebase), used to diagnose technical issues, understand app usage, and deliver push notifications.
• Regulators, credit bureaus, or financial partners, where required by applicable law or as part of our normal financing and credit-assessment operations.
• Law enforcement or other parties, where required to comply with a legal obligation, protect our rights, or prevent fraud or harm.

We do not sell personal information to third parties, and we do not share End Customer identity or biometric data with third parties for their own marketing purposes.

6. Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Policy, including:

• for the duration of an active financing application and any resulting installment plan, plus any period required by applicable financial recordkeeping or regulatory obligations;
• for App User account information, for as long as the account remains active, plus a reasonable period thereafter for security and audit purposes.

When information is no longer needed for these purposes, we take reasonable steps to delete or de-identify it.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. All data transmitted between the App and our servers is encrypted in transit (HTTPS/TLS). Despite these measures, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Some of our service providers (see Section 5) process data on servers located outside of Pakistan, including in the United States. Where information is transferred internationally, we take steps to ensure it continues to be protected in accordance with this Policy.

9. Your Rights and Choices

Depending on your role and applicable law, you may have the right to:

• request access to, or a copy of, the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information, subject to our legal, regulatory, and legitimate business retention needs (for example, we may need to retain financing-application records for a period required by financial regulation even after a deletion request);
• withdraw consent, where our processing is based on consent.

To exercise these rights, contact us at [email protected] or submit a request at https://www.qistbazaar.pk/page/account-deletion.

App Users can also request deletion of their account directly within the App, via Settings.

10. Children’s Privacy

The Service is intended for use by adults (18 years of age or older) in the context of financing applications and dealer/agent operations. We do not knowingly collect information from children. If you believe a child’s information has been provided to us, contact us at [email protected] and we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Effective date” above and, where changes are material, provide additional notice (such as an in-app notification).

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

QistBazaar (Private) Limited
105-C, 11th Street, Jami Commercial Area, Phase 2, DHA, Karachi, Pakistan
[email protected]
021-111-11-55-66