MHPOS Security

We take the security of your business data seriously. This page describes the main safeguards in place for MHPOS.

Encrypted connections

The MHPOS web admin panel and mobile app communicate with our servers over encrypted HTTPS connections, so data in transit between your device and MHPOS is protected.

Authentication

Passwords are never stored in plain text — they are hashed using industry-standard hashing before being saved. Mobile app sign-in uses OAuth2-based access tokens, so credentials are not repeatedly transmitted with every request.

Access controls

MHPOS supports role-based staff accounts, so a business owner can control which staff members can access which features (billing, inventory, reports, settings). Each business's data is isolated from every other business on the platform.

Data storage

Business data is stored on managed database infrastructure with restricted administrative access. We do not store payment card details on our systems — subscription payments are handled outside the app via invoice, bank transfer, or UPI. See our Privacy Policy for what data we collect and how it's used.

Your responsibilities

To help keep your account secure, we recommend that you:

• Use a strong, unique password for your MHPOS account.
• Avoid sharing staff login credentials between employees.
• Remove staff access promptly when an employee leaves.
• Contact us immediately if you suspect unauthorised access to your account.

Reporting a security issue

If you discover a potential security vulnerability in MHPOS, please report it responsibly to info@megharsh.com rather than disclosing it publicly. We will investigate and respond promptly.