Privacy policy

This policy covers Linksoft DI, the free FBR digital invoicing application at linksoft.pro/di. The rest of linksoft.pro is covered by the site privacy policy, which is shorter, because the website only has a contact form and this application has your sales ledger.

Invoicing data is financial data. We have written this to be read, not to be defensible.

What we hold

Your account. Whichever of a username, phone number or email address you signed up with, and a hash of your password. We never store the password itself.

Your business details. Your NTN or CNIC, business name, address, province, and the business activity and sector on your sales tax registration. The last two decide which FBR test scenarios apply to you, which is the only reason we ask.

Your FBR tokens. Encrypted. See below.

Your invoices. Every invoice you submit, including the exact data sent to FBR and the exact response received, kept so that the original transmission can be reproduced at audit as rule 150T requires.

Your customers. The buyers you save — name, registration number, address, province. You typed these; they are yours.

Technical records. Timestamps of submissions, error responses, and a one-way fingerprint used to stop the service being abused. That fingerprint is derived from your IP address and account together and cannot be reversed back into an IP address. We do not keep raw IP addresses in your records.

Your FBR token

A production token can create legally binding tax documents in your name. It is the most dangerous thing in the database and it is treated that way.

It is encrypted before it is written, using a key that is not stored in the database. A copy of the database on its own will not yield a usable token. It is decrypted only in memory, only at the moment an invoice is being sent to FBR, and it is never written to a log. No screen in the application shows it, no export contains it, and no support process involves us reading it back to you. If you lose your token, you get a new one from IRIS — we cannot recover it for you, and that is the correct behaviour.

Where it is stored

Your data is stored in Singapore, on infrastructure operated by Supabase. We chose that region deliberately over the closer alternative in Mumbai.

The website itself is served by Vercel from servers around the world, but that is static pages and images, not your invoices.

Who can see it

Other users of the application cannot see any part of your data. Access rules are enforced by the database itself rather than by the application asking politely, so a bug in the application cannot show your invoices to somebody else.

There is one administrator account, held by Linksoft. Being specific about what it can do, because a vague answer here is not an answer:

• It can see the list of accounts, when they were created, how many invoices each has submitted this month, and what monthly limit each has been given.
• It can raise or lower a limit, and set the date an agreed period ends.
• It can set a new password for an account, at that account holder's request.
• It cannot read your FBR token. The encryption applies to us as much as to anyone else.
• It can reach invoice records where that is genuinely needed to investigate a fault you have reported to us. Every such access is logged, and the log cannot be edited or deleted.

That account requires a second factor at every login. There is exactly one of it, and the application has no mechanism for creating a second.

Who else is involved

Four other parties touch this data, each for one reason:

• FBR and PRAL receive the invoices. That is the entire point.
• Supabase hosts the database in Singapore.
• Vercel serves the website and runs the code that talks to FBR.
• A static-IP proxy service carries requests to FBR, because FBR requires the calling address to be fixed and whitelisted. Invoices pass through it in transit, encrypted, and are not stored there.
• Resend sends account emails such as password resets. It receives your email address and nothing about your invoices.

We do not sell data, and we do not share it for advertising.

Taxpayer list data

To let you search for a buyer by name, the application holds a copy of FBR's published Sales Tax Active Taxpayer List, refreshed twice a week. That is public information issued by FBR, it contains registration numbers and business names, and it is not derived from anything our users have entered. Searching it does not tell us who you are invoicing.

How long we keep it

Invoices are kept for as long as your account exists, because you are required to hold them for six years and losing them would be worse for you than keeping them is for us.

When you delete your account, you must export your records first — the application will not complete the deletion until you have. After that, your account, your business details, your customers, your invoices and your encrypted tokens are destroyed. The administrator access log survives, because a log you can delete is not a log.

Notifications

Notifications are one setting, off until you turn it on. Turning it on covers two things, and we say so at the moment we ask rather than burying the second one: alerts when an invoice fails or an offline invoice is approaching its twenty-four hour upload deadline, and occasional messages about new Linksoft software. You can turn it off again in settings or in your browser, and we do not treat turning it off as a reason to stop the alerts working — they simply stop arriving as notifications.

What you can ask for

Ask us and we will tell you what we hold about you, correct anything wrong, export the lot, or delete it. There is no form. Message +92-347-2836414 or email musbahrashid12@gmail.com and a person will answer.

If something goes wrong

If data is exposed in a way that could affect you, we will tell you what happened, what was involved and what to do about it. We will not wait to establish the full picture before saying anything, because with a credential that can issue invoices in your name, the first hour matters more than a complete account does.

Changes

The date at the top says when this last changed. Where a change affects how your data is handled, registered users are told directly.