Skip to content

Legal

Privacy Policy

How 10 Cores Solutions (Pvt) Ltd collects, uses, shares and protects personal information.

Effective date: 19 October 2026

1. Introduction

This Privacy Policy explains how 10 Cores Solutions (Pvt) Ltd ("10Cores", "we", "us" or "our") collects, uses, shares and protects personal information.

It applies to:

  • our website, 10cores.com, and its pages;
  • our products and services, including Korx ERP, Dinvoice (FBR digital invoicing), the ATL API, CNIC/NTN verification and the E-Payment NTN Validator;
  • our advertisements and lead forms on social media platforms such as Facebook and Instagram;
  • our communication with you by phone, WhatsApp and email.

By using our website, submitting a form or using our services, you agree to the practices described in this policy. If you do not agree, please do not share your information with us.

2. Information we collect

We collect only the information we need to respond to you and to provide our services.

Information you give us

  • Contact details: name, phone or WhatsApp number, email address, business name and city.
  • Business details: National Tax Number (NTN), Sales Tax Registration Number (STRN), business type, invoicing volume and the plan or service you are interested in.
  • Anything you tell us in a form, message, call or meeting, such as questions or requirements.

Information processed when you use our products

  • Accounting, inventory, sales, HR and other business records you enter into Korx ERP.
  • Invoice data you create or upload in Dinvoice, including buyer details, items, amounts and the IRN and QR code returned by FBR.
  • NTN, CNIC or other identifiers you submit for ATL, CNIC/NTN or e-payment verification.

Information collected automatically

  • Technical data such as IP address, browser and device type, pages visited and time spent on the website.
  • Information from cookies and similar technologies (see Section 6).

3. How we use your information

We use your information to:

  • respond to your enquiry and contact you by call, WhatsApp or email about the service you asked for;
  • arrange demos, prepare quotes and explain plans and offers;
  • set up, provide and support our products, including FBR integration through PRAL;
  • submit invoices and verification requests to FBR or other authorities when you instruct us to;
  • send service updates, billing information and important notices;
  • send marketing messages about our services, which you can opt out of at any time;
  • improve our website, products and advertising;
  • keep our services secure and meet our legal and tax obligations.

We do not sell your personal information.

4. Social media ads and lead forms

We advertise on platforms such as Facebook and Instagram, operated by Meta Platforms, Inc. When you submit one of our lead forms on these platforms, Meta shares with us the details you entered, such as your name, phone number, email and answers to our questions.

We use these details only to contact you about the service or offer shown in the ad and to follow up on your request. Meta's own collection and use of your data is governed by Meta's Privacy Policy.

We may also use advertising tools, such as the Meta Pixel, to measure how our ads perform and to show relevant ads to people who visited our website. You can manage ad preferences in your Facebook or Instagram settings.

5. How we share information

We share personal information only in these cases:

  • Tax authorities, on your instruction. To provide Dinvoice and our verification services, we send invoice and taxpayer data to the Federal Board of Revenue (FBR) through PRAL, or to other authorities you choose to connect with.
  • Service providers. Trusted companies that host our systems, send messages or support our operations, under confidentiality obligations and only for the work they do for us.
  • Partner firms. Accounting and legal firms we work with, only where needed to deliver a service you requested and with your knowledge.
  • Legal requirements. When required by law, court order or a lawful request from a government authority, or to protect our rights, users or the public.
  • Business transfers. If 10Cores is merged, acquired or restructured, information may transfer to the new owner under this policy.

We do not sell or rent your personal information to anyone.

6. Cookies

Our website uses cookies and similar technologies to keep the site working, understand how visitors use it and measure our advertising.

  • Essential cookies make the website function properly.
  • Analytics cookies show us which pages are visited and how the site performs.
  • Advertising cookies, such as the Meta Pixel, help us measure and improve our ads.

You can block or delete cookies in your browser settings. Some parts of the website may not work correctly without them.

7. Data security

We protect your information with reasonable technical and organisational measures. These include encrypted connections (HTTPS), access controls so only authorised staff can see data, and secure hosting.

We never ask for your FBR portal password or banking passwords by phone, WhatsApp or email. No method of storing or sending data is completely secure, so we cannot guarantee absolute security, but we work to prevent unauthorised access, loss or misuse.

8. Data retention

We keep personal information only as long as we need it:

  • Enquiries and leads: for as long as needed to respond and follow up, and no longer than 24 months if you do not become a customer.
  • Customer and invoice records: for the duration of your subscription and afterwards for the period required by Pakistani tax and accounting laws.
  • Website analytics: for the period set in our analytics and advertising tools.

When information is no longer needed, we delete it or make it anonymous.

9. Your rights and choices

You can contact us at any time to:

  • ask what personal information we hold about you;
  • correct information that is wrong or out of date;
  • ask us to delete your information, unless we must keep it by law;
  • stop marketing messages by replying "STOP" on WhatsApp or emailing us;
  • withdraw consent you gave earlier.

We will respond within a reasonable time, normally within 30 days. We may ask you to confirm your identity before acting on a request.

10. Other important information

  • Children. Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect information from children.
  • Third-party links. Our website and ads may link to other websites, such as FBR or social media platforms. We are not responsible for their privacy practices, so please read their policies.
  • Changes to this policy. We may update this policy from time to time. The latest version will always be on this page with its effective date. Significant changes will be highlighted on our website.

11. Contact us

For questions about this policy or your personal information, contact:

10 Cores Solutions (Pvt) Ltd