Draft — not legally reviewed
This is a working draft prepared for review. It has not been checked by a legal practitioner and must not be relied on as it stands. It is published so it can be reviewed, not because it is finished.
Privacy notice
Last updated 15 September 2026
Who this is about
Our POS is software a business uses to run its till. There are two different groups of people whose information passes through it, and they are treated differently.
Our customers — the business, its owner and its staff. We are responsible for this information.
The business’s own customers — the people who buy from the shop. The business decides what to collect and why; we process it on their instruction and do not use it for anything of our own.
What we collect about a business and its staff
Name and email address; the business’s registered and trading names, contact details and registration numbers; which locations someone works at and what they are allowed to do; and records of what they did in the software — sales rung up, discounts approved, stock adjusted.
We store a one-way hash of passphrases and staff PINs, never the value itself. We store no card number and no CVV, for any payment, in either direction.
What the software records about shoppers
Only what the business chooses to capture: optionally a name, phone number or email address if the business keeps a customer list, and the contents of their purchases.
Personal details are not printed on receipts unless the business deliberately turns that on for a sale.
Who else sees it
Our infrastructure and payment providers, listed on the subprocessors page. Nobody else.
Our own staff have no routine access to a business’s trading data. Support access is requested, time-limited, records a reason, and every read under it is logged. Acting as a user of the business additionally requires that business’s owner to authorise it.
How long it is kept
Trading records are kept while the account exists and for the period a business is legally required to retain them. Sign-in session records are kept for 12 hours. Audit records are kept for seven years. A business can ask for its data at any time and can ask for deletion, subject to what the law requires us to retain.
Getting your data out
Every business can export its own records at any time, on any plan, whatever the state of its subscription. This is not a feature we can withdraw, and we have deliberately built it so that we cannot.
Still to be settled before this is finished
The registered operator entity and its address; the information officer’s name and contact details as required by POPIA; confirmed retention periods checked against SARS and POPIA requirements; the cross-border transfer position for each provider; and the breach-notification procedure and timeline.