Till1. Who we are
[Registered business name] ("TillMesh", "we", "us") provides point-of-sale software for sweet shops and pharmacies in India. Our website is tillmesh.com.
- Registered name: [Registered business name]
- Registration: [Company registration number / CIN]
- Registered address: [Registered address, City, State, PIN]
- GSTIN: [GSTIN]
- Privacy contact: privacy@tillmesh.com
2. Your shop owns its data
This is the most important part of this policy, so it comes first.
When your shop bills a customer, records a khata balance or attaches a prescription, that information belongs to your shop. Under the Digital Personal Data Protection Act 2023, your shop is the Data Fiduciary for that information — you decide what is collected and why. TillMesh is a Data Processor: we hold and process it only to run the service you asked for, and only on your instructions.
That means your shop is responsible for telling its own customers what it collects and for having a lawful basis to collect it. We are responsible for keeping it safe and doing only what you tell us to do with it.
For your own account information — your name, mobile number, shop name, billing details — TillMesh is the Data Fiduciary and this policy is your notice.
3. What we collect
We collect only what the service needs to work.
| Type | What it includes | Why |
|---|---|---|
| Your account | Name, mobile number, email, shop or pharmacy name, city, address, GSTIN | To create your account, raise invoices and contact you about the service |
| Billing | Plan, billing period, payment reference, invoice history | To charge the correct amount and meet tax law |
| Shop records | Bills, products, stock, ingredients, production, wastage, orders, offers, staff accounts and shift records | This is the product. Without it there is no POS |
| Your customers | Whatever your shop enters — usually name, mobile number, purchase history, khata balance | So your shop can find a customer, reprint a bill or track credit |
| Pharmacy records | Batch numbers, expiry dates, rack locations, supplier details, prescription images, Schedule H, H1 and X entries | So a pharmacy can keep the records the law requires it to keep |
| Technical | Device type, app version, IP address, error logs, times of access | To keep the service running, fix faults and detect misuse |
| Website | What you type into the contact form on tillmesh.com | To reply to your enquiry |
We do not ask for and do not want card numbers, UPI PINs, bank passwords or Aadhaar numbers. Never enter these into TillMesh.
4. How we use it
- To provide the POS: billing, stock, orders, reports and everything else in your plan
- To back your data up so a lost or broken device does not lose your shop's records
- To answer your AI questions about your own shop
- To provide support when you ask for it
- To charge the correct amount and issue GST invoices
- To tell you about faults, security issues, price changes and changes to these policies
- To detect and stop fraud, abuse and unauthorised access
- To meet legal obligations and respond to lawful requests
We do not sell your data. We do not rent it, and we do not share it with advertisers.
5. AI questions
TillMesh lets you ask questions about your own shop in plain language — what to make tomorrow, which stock needs attention, where a medicine is. To answer, the assistant reads the information already in your own account.
- An AI answer is based only on your shop's own data
- We do not use your shop's data to build features or answers for any other business
- AI answers are suggestions, not instructions. Check them before you act on them
- The assistant does not give medical, legal, tax or financial advice
7. Where your data is stored
Your shop's data is stored on Amazon Web Services in the Asia Pacific (Mumbai) region — inside India.
Some supporting services, such as email delivery, may process limited information outside India. Where that happens we use providers that offer contractual protections at least equal to this policy.
8. How we protect it
- Encrypted in transit (HTTPS) and encrypted at rest on our servers
- Access controlled by role — staff see only what their role allows
- Our own access to customer data is limited, logged and used only for support
- Automatic backups, so a lost phone or a broken counter machine does not lose your records
- Regular updates to fix security faults
No system is perfectly safe. If a breach affects your data, we will notify you and the Data Protection Board of India as the law requires, and tell you plainly what happened and what to do.
You must also do your part: keep your login private, give staff their own accounts rather than sharing one, and remove staff who leave.
9. How long we keep it
| What | How long |
|---|---|
| Your shop's records | While your account is active |
| After you close your account | 90 days, so you can change your mind or export, then deleted |
| Invoices and tax records | As long as Indian tax law requires us to keep them |
| Technical logs | Up to 12 months |
| Contact form enquiries | Up to 24 months |
You can ask us to delete your data sooner. We will, except where a law requires us to keep a record.
10. Your rights
Under the Digital Personal Data Protection Act 2023 you can ask us to:
- Tell you what personal data of yours we hold and who we shared it with
- Correct anything that is wrong, incomplete or out of date
- Delete data we no longer need
- Nominate someone to exercise these rights if you die or cannot act
- Withdraw consent, where we relied on consent
Write to privacy@tillmesh.com from the email or mobile number on your account. We will acknowledge within 48 hours and respond within 30 days. There is no charge.
If the request concerns data your shop holds about its own customer, send it to the shop — they are the Data Fiduciary for that record, and we will help them act on it.
11. Children
TillMesh is a business tool. It is not for anyone under 18, and we do not knowingly collect data about children. If a child's data reaches us, tell us and we will delete it.
13. Complaints
If you are unhappy with how we handled your data, contact our Grievance Officer. This is required by Indian law and we take it seriously.
- Grievance Officer: [Grievance Officer name]
- Email: grievance@tillmesh.com
- Phone: [Business phone number]
- Address: [Registered address, City, State, PIN]
We acknowledge within 48 hours and aim to resolve within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India.
14. Changes to this policy
We will update this page when the service or the law changes, and change the date at the top. If a change materially affects your rights, we will tell you by email or inside the app at least 14 days before it takes effect.
Questions about this page? Write to support@tillmesh.com.