Privacy Policy

This Privacy Policy explains how Barcode AM LLC ("Haysell," "we," "us," or "our") collects, uses, stores, shares, and protects information about users of our products and services.

This Policy applies to all Haysell products, including:

• The Haysell cloud platform (available at haysell.com )
• The Haysell POS application
• The Haysell mobile application
• The Haysell Data Collection Terminal application
• Any other software, website, or service that references this Policy (collectively, the "Services")

By using any of our Services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller: Barcode AM LLC

Address: Yerevan, Charents St. 113/1, Armenia

Email: [email protected]

Sales Department: +374 (95) 53-54-00

Customer Service Department: +374 (60) 53-54-00

For questions about this Policy or your personal data, you may contact us using the details above.

We collect the following categories of information:

3.1 Account Information

When you register for or use our Services, we collect:

• Business name and legal entity information
• Contact person name, email address, and phone number
• Business address
• Taxpayer identification number (TIN) where applicable
• Account credentials (username, hashed password)
• Operator identities and PIN codes (hashed)

3.2 Business Operations Data

To provide our Services, we process business data that you input or generate, including:

• Product catalogs, pricing, and inventory data
• Sales transactions and receipt data
• Customer records
• Supplier and partner information
• Documents created in the Services (invoices, reports, etc.)

3.3 Device and Technical Information

When you use our Services, we automatically collect:

• Device identifiers (operating system version)
• Application version and build information
• Terminal registration data (profile, branch, warehouse)
• Session information and authentication tokens

3.4 Usage Information

We collect information about how you interact with the Services:

• Timestamps and session duration
• Error logs and diagnostic data
• Synchronization logs

3.5 Payment and Billing Information

For paid subscriptions:

• Billing contact details
• Transaction history
• Payment method information (processed through third-party payment processors; we do not store full card numbers on our systems)

3.6 Fiscal Data

Where our Services integrate with fiscal devices and transmit data to the Armenian State Revenue Committee, we process the transactional data required by law.

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Services
• To process transactions and manage subscriptions
• To authenticate users and secure accounts
• To synchronize data between devices and the cloud platform
• To comply with legal obligations, including tax and fiscal reporting requirements under Armenian law
• To communicate with you about the Services (service updates, security alerts, support)
• To respond to your requests, questions, and support inquiries
• To detect, prevent, and address technical issues, fraud, or misuse

We process personal data on the following legal bases:

• Performance of a contract (providing the Services you have subscribed to)
• Compliance with legal obligations (tax reporting, fiscal compliance, record-keeping requirements)
• Legitimate interests (service improvement, fraud prevention, security)
• Consent (where specifically requested, such as for optional marketing communications)

We do not sell your personal data. We share information only in the following circumstances:

6.1 Service Providers

We share information with trusted third parties who help us operate the Services, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Email and communication service providers
• Analytics and error-monitoring services

These providers are contractually required to protect your information and use it only for the purposes we specify.

6.2 Legal and Regulatory Authorities

We share information with authorities when required by law, including:

• The Armenian State Revenue Committee (for fiscal and tax compliance)
• Courts, law enforcement, or regulators in response to lawful requests

6.3 Business Transfers

If Haysell is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6.4 With Your Consent

We may share information in other circumstances with your explicit consent.

We retain your information for as long as needed to:

• Provide the Services to you
• Comply with legal obligations (including tax and fiscal record-keeping requirements under Armenian law, which may require retention for several years)
• Resolve disputes and enforce our agreements

When information is no longer needed, we delete or anonymize it. Specific retention periods vary by data category and legal requirement.

In the course of providing the Services, we may use infrastructure providers, service providers, or other partners located inside or outside Armenia. Where data is transferred internationally, we take appropriate measures to protect it in accordance with applicable law.

Subject to Armenian law and other applicable regulations, you have the following rights:

• Right to access the personal data we hold about you
• Right to correct inaccurate or incomplete data
• Right to request deletion of your data (subject to our legal obligations to retain certain records)
• Right to restrict or object to processing in certain circumstances
• Right to data portability (receive your data in a structured, commonly used format)
• Right to withdraw consent (where processing is based on consent)
• Right to lodge a complaint with the Armenian Personal Data Protection Agency

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframe required by applicable law.

We implement technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Access controls and authentication requirements
• Regular security reviews and updates
• Secure development practices
• Staff training on data protection

No system is 100% secure. If we become aware of a security incident affecting your data, we will notify you and the relevant authorities as required by law.

Our Services are intended for business use and are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Our website and web-based Services use cookies and similar technologies to:

• Authenticate users and maintain sessions
• Remember your preferences
• Analyze site usage and improve functionality
• Ensure security

You can control cookies through your browser settings. Blocking cookies may affect the functionality of our Services.

Our Services may contain links to or integrate with third-party services (such as payment processors, fiscal devices, or accounting software). This Policy does not apply to those third-party services. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Posting the updated Policy on our website
• Sending a notification where appropriate

Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated Policy.

This Privacy Policy is governed by the laws of the Republic of Armenia, including the Law on Protection of Personal Data.