OpenPOS Privacy Policy

OpenPOS is a point-of-sale (POS) application used by restaurant staff to take orders and accept payments in-store. This Privacy Policy explains what information the app handles, how it is used, and the choices available to you. It applies to the OpenPOS iOS and Android apps, the openpos.site website, and the services they connect to.

OpenPOS is a tool operated on behalf of the restaurant ("the merchant") that uses it. Where the merchant decides what data is collected from its customers, the merchant is the controller of that data and its own privacy terms also apply.

1. Information we collect

• Staff account information — name, email, phone number, and login credentials (PIN), used to sign in staff and control access to POS functions.
• Customer information (only where the merchant enables it) — name, phone number, and email for membership, loyalty, and order lookup.
• Sales contact information — restaurant name, restaurant address, and phone number when you submit the contact form on openpos.site.
• Order and transaction records — items ordered, amounts, taxes, tips, and payment status, used to operate the point-of-sale and produce receipts and reports.
• Payment information — card payments are captured and processed by our payment providers (Stripe, WorldPay) through their own SDKs. OpenPOS does not store full card numbers.
• Photos you choose to upload — used only to attach images to menu items.
• Device information — device identifiers and diagnostic information used to pair and license in-store devices to a merchant and to keep the service working.
• Approximate location — accessed only when a connected card reader (Stripe Terminal) requires it to authorize a payment. See Section 3.

2. Device permissions

• Camera — to scan QR codes and barcodes.
• Bluetooth & Microphone — to connect to supported card readers.
• Photo Library — only when you choose to upload a menu image.
• Location — see Section 3.

Each permission is requested only when the related feature is used, and can be managed in your device settings.

3. Why the app uses location

When a card reader is used to accept payments, our payment provider (Stripe Terminal) requires device location to help authorize the transaction and reduce fraud. If location is unavailable, card payments through that reader are disabled. OpenPOS does not use location for advertising, does not track your movements, and does not build a location profile.

4. How we use information

Information is used solely to operate the point-of-sale service for the merchant: taking and fulfilling orders, processing payments, producing receipts and business reports, managing membership where offered, responding to requests from restaurants interested in OpenPOS, and keeping devices paired and secure. We do not sell personal data and do not use it for third-party advertising.

5. Sharing

We share information only as needed to operate the service:

• Payment providers (Stripe, WorldPay) process card payments under their own privacy terms.
• The merchant that operates the POS, for its own orders and customers.
• Service providers that host and support the software, under confidentiality obligations.
• When required by law, or to protect the safety and rights of users.

6. Data security

Data is transmitted over encrypted connections (HTTPS/TLS). Card data is handled by PCI-compliant payment providers and is not stored by the app. Access to POS functions is controlled by staff login and per-store permissions.

7. Data retention

Order and account records are retained for as long as needed to operate the service for the merchant and to meet applicable tax, accounting, and legal requirements. When no longer needed, data is deleted or anonymized. Sales contact information is retained only as long as needed to respond to the request and manage the resulting business relationship.

8. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to certain processing. Because most data is held on behalf of the merchant, requests are usually handled by the merchant that provided the app; you may also contact us using Section 11 and we will route the request appropriately.

9. Children

OpenPOS is a business tool for restaurant staff. It is not directed to children and does not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this policy can be directed to the merchant that provided this app, or to us at support@openpos.site.