Privacy policy

Effective date: 18 October 2026.

Your store records

Detailed POS sales, customer and supplier entries, staff records, payroll, and backups are stored on the register. Compatible builds can send selected daily and financial summaries to the owner Business Hub. When online stock integration is enabled and registers are assigned to a stock group, online services also store product identities, receiving batches, stock movements, sale references, register/group identifiers, and synchronization acknowledgements. This is selected integration data rather than a complete copy of the POS database. A backup that you export or restore may contain personal and financial information. Keep its password and file secure. Current installed POS releases encrypt local records at rest using device-protected keys. Keep your device login and backup password secure.

Business Hub records

The optional Business Hub stores records you explicitly enter or restore in your signed-in owner workspace: products, stock adjustments, sales detail, invoices, bills, payments, documents, expenses, and business settings. Staff, attendance, leave, and payroll are held separately behind an additional server-enforced HR PIN. Supabase hosts these cloud records. Access is restricted to your owner account; sensitive reads and changes are logged for security. The Hub does not automatically copy your installed POS database. You can manually import an encrypted VendoPulse backup file that you export from the register; this adds its products, stock counts and expenses for the active business to your Hub workspace, and never its sales history, employees or PINs. Register summaries and receiving records are available with compatible connected registers. Summaries may be provisional until the register closes its day, and the Hub shows the information received from each register. Website catalogue details and prices can be sent to compatible POS builds by stable product identity. Turning stock syncing OFF pauses that stock workflow; it does not erase previously sent records, disable account checks, or turn off separately configured reporting.

Signing out clears Hub records and account tokens. Hub login tokens are kept only in the current browser tab's session storage so that moving between website pages does not end your sign-in; they are never saved to long-term browser storage and are erased when you sign out, close the tab, or leave this website inactive for 10 minutes. Activity on Learn, Downloads, guides, and other website pages keeps your sign-in active. Downloaded CSV, spreadsheets and Word documents are unencrypted files under your control. Hub backups use password-based encryption; we cannot recover a forgotten backup password. To request cloud data export or deletion, contact support through the contact page. The current release is owner-only and does not offer staff team invitations.

Account and device information

Supabase handles account sign-in and email confirmation. We use your email address, optional account name, and account identifier to operate your account. Cloudflare hosts the website and stores subscription status, renewal dates, PayPal subscription references, and authorized device metadata. Device metadata includes a device identifier, public verification key, name, activation time, last check time, revocation status, and a record of device management actions. The device's private key stays on that device.

Device approval

Approval requests expire after 15 minutes. Temporary request records and expired security challenges are removed during subsequent service activity. Device approval links should be shared only with your owner account. Each authorized device follows the same account subscription end date.

Payments

PayPal processes VendoPulse subscription payments. We do not store your card details. Store sales in the POS are payment records; any bank, card, wallet, or QR payment must be completed separately with your payment provider.

Contact and support

When you contact us, we store your name, reply email, subject, message, source platform, and optional app version so we can answer and manage your request. Authorized support access may add private notes and status changes. Messages are eligible for deletion after 12 months; cleanup runs when the support service is used. Rate limiting uses short-lived hashes derived from an IP address. Hosting providers may process normal security and request logs. Please do not send passwords, card numbers, employee records, or customer transaction files through the contact form.

Service providers and your choices

Cloudflare, Supabase, PayPal, and a configured email delivery provider process information needed for their services. These providers may process information in other countries. We do not sell your POS records. Optional product email consent is separate from account and support messages. To request access, correction, deletion, or help with your account data, use Contact us. Some payment or security records may need to be retained for legal or operational reasons. Local store records are controlled by the store operator; deleting an account does not erase data or backups already stored on your devices.

Updates

We will update this page when our data practices change and show the new effective date.