Every seller signs in with their own PIN, and you decide with checkboxes what appears on their screen. Cost price, profit and reports open only if you allow them.
If the owner simply hands over their phone, the seller sees everything: cost prices, profit, the balance. That is what employee accounts are for — the seller signs in with their own PIN and you decide what their screen contains. A section you do not tick never appears in the app, so nobody taps a button that does nothing.
The Employees section lives in your profile and is open to the owner only. Three places are never granted to staff whatever you tick: the balance (the shop money), the employee list and the referral code.
A permission is not just a hidden button: the server checks it on every request. Take a permission away or block the employee and their app stops at the very next tap.
The whole thing takes a few minutes. The owner picks the PIN — exactly four digits.
Profile → Employees → Add employee. The seller’s name and the four-digit PIN you give them — nothing else is asked.
Till only, Seller, Senior seller or Manager (everything). Afterwards you fine-tune each checkbox on the employee’s card.
They open the app, tap «Sign in as employee» and type the shop number plus their own PIN. Neither your number nor your Telegram is needed.
Permissions are grouped into six blocks: till and sales, the credit ledger, customers, stock, suppliers and other sections. Below are the ones shop owners ask about most.
The till never appears in the menu
They can only sell for cash or card
You handle returns yourself
The stock list does not open
The seller cannot book in new stock
The price field stays locked
Cannot lower a price at the till — only the “Manager” set includes it
Cost is never sent — not to the screen, not into Excel
The reports section is not in the menu
The expenses screen does not open
Their profile keeps only their name, language and sign-out
Some permissions depend on each other and are added for you: tick «Sell on credit» and «See debts» plus «Record a debt» switch on; tick «Create orders» and the supplier ledger opens. Three of the ready-made sets — Till only, Seller and Senior seller — include neither cost price nor reports; only the Manager set does.
A seller who knows the cost price is much readier to knock money off — for a friend or for anyone who starts haggling. That is why cost is a separate permission, and without it the cost figure is never sent to that employee at all. Other warning signs are in our article on staff theft.
Tightening permissions is half the job. The other half is seeing who made each record.
The report shows revenue, receipt count, average receipt and profit for each seller, with returns subtracted from their result. Your own sales sit on a separate line. Monthly targets and bonuses live in staff KPIs, which only you can see.
When a seller signs in you get a Telegram message — you can switch that off if you prefer. The Employees section also keeps a list of recent sign-ins.
After several wrong attempts the login is blocked for a while and a warning reaches you in Telegram.
Blocking or deleting takes effect at the next tap. The sales, debts and expenses of a deleted employee stay put — old reports are not broken.
At the start of the day the seller writes down the cash in the drawer and opens a shift — the bar sits at the top of the till screen. At closing they count the cash, and the app works out what should be there: opening cash + cash sales + debt repayments − cash refunds − expenses paid from the drawer. The difference appears immediately, and when there is one a reason field opens. More on the staff oversight page.
There are four things about staff control you should know — we are not hiding them.
Without the «See the cost price» permission, no: neither the screen nor the Excel file carries cost or profit. But with «Reports and profit» they will see the shop’s overall profit and expense totals even without knowing any single item’s cost.
You set the PIN and you can see it on the employee card — it is stored in the clear. Repeated wrong entries block the login for a while and send you a Telegram message. When a seller leaves, block or delete their account.
Only if you allow it. Haggling at the till — typing an agreed lower total for the customer — is its own permission (“Haggling at the till”): no ready-made set except “Manager” includes it, and every discount given is recorded with the sale. A discount on the product card depends on the “Change prices” permission, and discounting through the AI needs the same one.
No. However many sellers you have, the price stays the same — billing depends on the shop type, not on the number of staff.
Both sign in with their own PINs and every sale is stored with the seller’s name. But a shop has just one open shift: a second one cannot be opened, so the cash count stays shared.
Prepared by: the BuySale team · Spotted a mistake? Tell us on Telegram
Seller control in a shop: shift open and close, the cash difference, sales per employee, permissions that hide cost price — and what it does not do.
Learn more →What theft looks like in a small shop’s numbers, what to do in the first week, and which remedies need no software at all.
Learn more →How to start with BuySale: sign in by phone number with a code from Telegram, set up your shop, add your first products and try 7 days free.
Learn more →Guides for shop owners: getting started, barcodes, credit, stocktaking, printers, staff — plus articles on tills, equipment and choosing software.
Learn more →
7 days free, no payment card needed. Then from 6 630 UZS a day, depending on the shop type.
Start for freeBuySale assistant
Answers from what is published on this site
AI can make mistakes — check anything important via Telegram.
Writing an answer