BOSSTECH
Legal

Privacy Policy

What personal data we collect, why, who we share it with, and the choices you have.

Last updated · 1 October 2026

On this page
  1. Who we are and what this covers
  2. What we collect
  3. How we use it
  4. Who we share it with
  5. How long we keep it
  6. Security
  7. Your choices and rights
  8. Students under 18
  9. Where data is stored
  10. Third-party content on this site
  11. Changes to this policy
  12. Contact

01Who we are and what this covers

Nisar Ahamed, trading as BOSSTECH Innovation, United Arab Emirates (“BOSSTECH”, “we”) is responsible for personal data collected through bosstech.systems and our products NEET Arena, BOSS ERP Mini, WMS · PickSmart AI and Ulaa Marketplace. Questions go to support@bosstech.systems.

When a business uses BOSS ERP Mini or another business product to record information about its own customers, suppliers or employees, that business decides how the data is used, and we process it on the business’s behalf.

02What we collect

Information you give us

  • Account details — name, email address, optional mobile number, password (stored only as a secure hash), language and, for NEET Arena, the exams you are preparing for.
  • Business details (BOSS ERP Mini) — company name, branch, trade licence number, TRN, address and logo, and the records you enter: invoices, stock, accounts, and employee details for payroll.
  • Study activity (NEET Arena) — exams you build and take, answers, scores, progress, bookmarks, notes, XP, streaks and leaderboard name.
  • Support messages — what you send us by email.

Information collected automatically

  • Security and usage logs — sign-in times, IP address, browser and device type, and an audit trail of actions in business products.
  • Browser storage — cookies and local storage that keep you signed in and remember preferences such as language or theme. On bosstech.systems itself, the only thing stored is the last product you opened, in your own browser.

Payment information

Card payments are handled by Paddle.com as Merchant of Record. Paddle collects your card details, billing address and tax information directly. We receive only what we need to manage your subscription: your email, country, plan, amounts, and payment and subscription status. We never receive your full card number.

We do not use advertising trackers, and we do not sell personal data.

03How we use it

  • To create and run your account and deliver the product you signed up for.
  • To keep accounts secure: sign-in codes, two-factor sign-in, fraud and abuse prevention, audit logs.
  • To send service emails, such as verification codes, receipts, trial and renewal notices, and study reminders you turned on. You can switch off optional reminders in the product.
  • To manage trials, subscriptions and payments with Paddle.
  • To answer support requests and to fix and improve the products.
  • To meet legal, tax and accounting obligations.

04Who we share it with

  • Paddle.com — to take payments, calculate tax, issue receipts and handle refunds.
  • Infrastructure providers — the companies that host our servers and help deliver email, bound to protect the data and use it only for us.
  • Other people in your account — for business products, users in the same company can see records they have permission to see. In NEET Arena, your leaderboard name and rank are visible to other students.
  • Authorities — when the law requires it, or to protect our users or our rights.

05How long we keep it

We keep account data while your account is open. When an account is closed we delete or anonymise its personal data within a reasonable period, except where we must keep records longer by law (for example payment and tax records). Backups are overwritten on a rolling schedule.

06Security

All traffic is encrypted with HTTPS. Passwords are stored as one-way hashes. Business data is separated per company, access is role-based, sign-ins are logged, and data is backed up regularly. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.

07Your choices and rights

You can ask us to give you a copy of your personal data, correct it, delete it, or stop using it for a purpose you did not agree to. Many details can be changed directly in your account settings. For anything else, email support@bosstech.systems from the address on your account. We may need to confirm who you are first, and we will reply within 30 days.

08Students under 18

NEET Arena is used by school students. If you are under 18, please use it with the agreement of a parent or guardian, who should also handle any payment. A parent or guardian can contact us to see or delete their child’s data.

09Where data is stored

Our servers are run by a hosting provider and may be located outside your country. Paddle processes payment data in the countries it operates in. Wherever data is processed, we apply the protections described in this policy.

10Third-party content on this site

bosstech.systems loads its fonts from Google Fonts, so your browser connects to Google’s servers, which receive your IP address. Links to Paddle, and to our product sites, are covered by those sites’ own policies.

11Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell you by email or in the product before it applies.

12Contact

Nisar Ahamed, trading as BOSSTECH Innovation · United Arab Emirates · support@bosstech.systems