Privacy Policy

PosPilot.online is a cloud-based point-of-sale and business management tool built for small business owners worldwide. We are the data controller for information collected through our website and application at pospilot.online.

Questions about this policy? Contact us any time at hello@pospoilt.online.

We collect only what's necessary to run your account and improve the product.

• Account information: your name, email address, and password (stored as a secure hash — we never see your password in plain text).
• Business data you enter: sales records, customer names and contacts, stock items, and expenses. This data belongs to you.
• Usage data: pages visited, features used, and error logs — used to fix bugs and improve the app.
• Device & technical data: browser type, IP address, and time zone — used for security and to display correct local time.

Your data is used exclusively to:

• Provide and maintain your PosPilot.online account and dashboard.
• Send account-related emails (password resets, security alerts). We do not send marketing emails unless you opt in.
• Diagnose errors and improve app performance and reliability.
• Comply with applicable legal obligations.

Your data is stored on servers protected by industry-standard security measures including encrypted connections (HTTPS/TLS), database access controls, and regular backups.

We retain your account data for as long as your account is active. If you delete your account, all your data is permanently removed within 30 days.

No system is 100% secure. If you suspect your account has been compromised, contact us immediately at hello@pospoilt.online.

We use minimal, essential cookies only:

• Session cookie: keeps you logged in between page loads. Expires when you close your browser or log out.
• CSRF token cookie: protects forms from cross-site request forgery attacks.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. There is nothing to "Accept" — these cookies are strictly necessary for the app to function.

We use a small number of trusted third-party services to operate the platform:

• Hosting provider: to run our web servers. They process data on our behalf under strict data processing agreements.
• Email delivery service: to send transactional emails (password resets, etc.).
• Google Fonts: to load web fonts. Google may log your IP address when fonts are fetched.

None of these parties are permitted to use your data for their own purposes.

You have full control over your data:

• Access: request a copy of all data we hold about you.
• Correction: update your name, email, or other details in your account settings.
• Deletion: delete your account (and all associated data) at any time from your settings page.
• Portability: export your sales and business data as PDF or CSV at any time.
• Objection: object to how we use your data by contacting us.

To exercise any of these rights, email hello@pospoilt.online — we will respond within 30 days.

PosPilot.online is intended for business owners and adults (18+). We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will promptly delete it.

If we make significant changes to this Privacy Policy, we will notify registered users by email at least 7 days before the changes take effect. Continuing to use PosPilot.online after that date constitutes acceptance of the updated policy.

The "Last updated" date at the top of this page always reflects when the policy was last revised.

Have a question about your privacy or this policy? We'd love to hear from you:

• Email: hello@pospoilt.online
• Contact form: pospoilt.online/contact