How your business and customer information is handled.

This policy explains what information Instalify collects, how it is used, when it is shared, how long it is kept, and how it is protected. Instalify is operated by Kode Vision, Lahore, Pakistan.

Two different parties hold responsibility here, and the difference matters. Your business decides what customer information to collect and why — you are the controller of that information. Instalify stores and processes it on your instructions, as the platform you chose to run your business on.

So: the lawfulness of collecting a customer's CNIC, photograph or guarantor details is your business's responsibility. Keeping that information secure once it is in the platform is Instalify's.

Pakistan does not yet have a general data-protection statute in force. The Personal Data Protection Bill has been under consideration but is not yet law; where it is enacted, this policy will be updated to meet it. In the meantime Instalify follows the obligations that do apply — including the Prevention of Electronic Crimes Act, 2016 — and ordinary good practice.

Business and account information: business name, type, address, city, contact numbers, email, logo, branch details, currency and timezone; and for each login, the user's name, email, role, branch and permissions.

Customer and guarantor information entered by your business: name, father/husband name, CNIC number, mobile numbers, address, photograph, CNIC front and back images, guarantor details, and the agreements, installment schedules, payments and cancellations recorded against them.

Operational and financial records: sales, purchases, inventory and serial numbers, ledgers and accounting entries, day-closing and month-closing figures, targets and recovery performance.

Technical information: authentication tokens and session data, IP address, timestamps, and the audit trail of actions performed in your account.

Messaging records: SMS and WhatsApp messages the platform sends on your behalf, and their delivery status.

Instalify does not ask for, and does not want, card numbers or banking credentials inside the platform. Do not store passwords, PINs or card details in free-text notes.

To run the service you signed up for: authenticating users, enforcing permissions, recording sales and recoveries, producing reports, sending customer notifications, and raising your monthly invoice.

To keep the platform secure and accountable: detecting misuse, investigating incidents, and maintaining the audit trail that shows what happened in an account.

To support you: answering queries, correcting data at your request, and diagnosing problems.

To improve the product using aggregated, anonymised statistics that identify no business, no customer and no individual.

Instalify does not sell your data, does not rent it, and does not use your customers' information to market anything to them.

With lawful authorities. Where a government department, regulator, court or investigating authority makes a lawful demand, Instalify provides the data held in your account — including under the National Accountability Ordinance, 1999, the Income Tax Ordinance, 2001 (for example a notice under section 176), the Sales Tax Act, 1990, the Anti-Money Laundering Act, 2010, the Prevention of Electronic Crimes Act, 2016, or a court order.

In every such case Instalify: discloses only what the request lawfully covers, keeps a record of what was disclosed, to whom and under what authority, and informs your registered contact where the law permits it to do so.

Instalify does not hand your data to a private party, to a competitor, or to any department without lawful authority to demand it.

Instalify supplies records exactly as they stand in your account and does not verify their accuracy. Where the information your business entered was wrong, the consequences of that inaccuracy are your business's responsibility, not Instalify's.

With service providers who make the platform work, and only to the extent needed: Supabase (database, authentication and file storage), Railway and Vercel (hosting), Meta (WhatsApp Cloud API, for customer messages), Google (optional voice-assistant processing), and the SMS gateway or paired device your business uses. Each processes data to deliver its part of the service.

On a change of ownership. If Kode Vision is involved in a merger, acquisition or sale of assets, data may transfer as part of it. You will be informed, and this policy continues to apply until it is replaced by one no less protective.

Sign-in is handled by Supabase Auth. Passwords are stored by the authentication provider in hashed form and are never visible to Instalify staff.

Email verification and one-time codes are used to confirm that an address belongs to the person using it.

Keep your password to yourself. Activity carried out with your credentials is attributed to you, and the audit trail records it under your account. See the Terms & Conditions, section 4.

WhatsApp self-service for your customers is PIN-protected so that one customer cannot retrieve another's balance or statement.

Data is transmitted over encrypted connections and stored with the platform's hosting and database providers, which apply encryption at rest.

Access is separated by business and by branch, and enforced on the server — not merely hidden in the interface. A branch user cannot read another branch's records, and one business's data is never visible to another.

Customer photographs and CNIC images are held in private storage buckets, not on publicly readable URLs.

Instalify's own staff hold named accounts with defined roles, and administrative actions are logged.

No system is perfectly secure. If a breach affects your data, Instalify will inform you without undue delay, describe what happened and what is affected, and tell you what is being done about it.

While your subscription is active, your data is retained so the service can work.

If a business stops paying and stops operating, Instalify's responsibility for that data lasts three (3) months from the date of non-payment. Within that window the account can be restored by clearing the outstanding amount.

After six (6) months, the system automatically removes that business's data. The removal is automatic and is not reversed.

Responsibility for data lost to that automatic removal rests with the user, not with Instalify. Only a business that continues its service remains entitled to its data.

Take your own export before you stop paying. Your own legal duties are far longer than six months: business records must be kept for six years under the Income Tax Ordinance, 2001 (section 174) and the Sales Tax Act, 1990 (section 24), and a company's books of account for ten years under the Companies Act, 2017 (section 220). Instalify's schedule does not satisfy those duties for you.

Certain limited records — invoices, payment records, audit logs and records of lawful disclosures — may be retained beyond that period where Instalify is itself required to keep them, or needs them for a dispute. Traffic data may be retained where the Prevention of Electronic Crimes Act, 2016 requires a service provider to do so.

Backups are cycled on their own schedule, so a deleted record may persist in a backup for a limited period before it is overwritten.

You can view, correct and export your business data from inside the platform at any time while your subscription is active. Exporting regularly is the single most useful thing you can do to protect yourself.

You can ask support to correct or delete specific records, subject to what the law requires Instalify or your business to retain.

If one of your customers asks to see or correct their information, that request comes to you, not to Instalify — the record is yours and the relationship is yours. Instalify will help you action it.

Deleting a user's login removes their access; it does not remove the records they created, because those are your business's records and removing them would break your books.

Instalify uses cookies and local browser storage for sign-in sessions, keeping you logged in, remembering language and theme preferences, and basic product analytics.

Blocking cookies will prevent sign-in from working, because the session cannot be maintained.

The public website may load fonts and similar assets from third-party providers, which receive the request as part of serving them.

Instalify is a business tool and is not directed at children. Accounts are for businesses and their authorised staff.

Where your business records information about a customer who is a minor, or a guarantor who is a minor, doing so lawfully — including obtaining guardian consent where required — is your responsibility.

Instalify is built for businesses in Pakistan. Its hosting, database and storage providers may process or store data outside Pakistan, in the regions those providers operate.

Where data is processed abroad, it remains subject to this policy and to the contractual protections Instalify has with those providers.

If you use Instalify from outside Pakistan, you are responsible for compliance with any additional local requirements that apply to you.

This policy may be updated to reflect product changes, new providers, or changes in the law. The date shown on this page is when it was last revised.

Material changes — particularly to the retention and deletion schedule, or to how data is shared — will be notified in advance through the dashboard and your registered contact details.

Questions, corrections and privacy requests can be sent through the official Instalify support channel in your account, or to the contact details published on the website.

This policy describes how Instalify actually operates and should be reviewed by qualified legal counsel in Pakistan before being relied on in a dispute. It is not legal advice.