Privacy Policy
Effective Date: April 1, 2026 | Last Updated: March 31, 2026
At VunaPos ("Company", "we", "our", "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our point-of-sale SaaS platform, website, and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the data practices described in this policy.
1. Information We Collect
We collect information that identifies, relates to, describes, or is capable of being associated with you ("Personal Information"). The categories of Personal Information we collect include:
1.1 Information You Provide Directly
- Account Information: Business name, contact name, email address, phone number, billing address, and payment information (processed by secure third-party payment processors).
- Business Data: Product catalogs, inventory levels, sales transactions, customer lists, pricing information, and employee details that you upload or enter into our platform.
- Communications: Information you provide when contacting support, responding to surveys, or participating in promotions.
1.2 Information Automatically Collected
- Usage Data: IP address, browser type, device information, pages visited, time spent, and feature usage patterns.
- Cookies & Similar Technologies: We use cookies, web beacons, and local storage to enhance user experience, analyze trends, and remember preferences. You can control cookies through your browser settings.
- Transaction Logs: Records of sales, refunds, and payment activities processed through our platform.
1.3 Information from Third Parties
- If you connect third-party integrations (e.g., payment gateways, accounting software), we may receive information from those services based on your authorization.
- We may receive data from partners who assist with fraud prevention or identity verification.
2. How We Use Your Information
We use the information we collect for the following business purposes:
- Provide & Maintain the Service: To process transactions, manage inventory, generate reports, and deliver core POS functionality.
- Account Management: To create and manage your account, process payments, and communicate important updates.
- Customer Support: To respond to inquiries, troubleshoot issues, and improve service quality.
- Service Improvements: To analyze usage trends, enhance features, and develop new products.
- Security & Fraud Prevention: To monitor for unauthorized activity, protect against fraud, and ensure the integrity of our platform.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Marketing (with consent): To send promotional materials, product updates, and relevant offers. You may opt out at any time.
3. Legal Basis for Processing (GDPR & Similar Laws)
If you are located in the European Economic Area (EEA) or other jurisdictions with similar data protection laws, our legal basis for processing your Personal Information includes:
- Contractual Necessity: Processing required to perform our contract with you (e.g., providing the Service).
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, security, and fraud prevention.
- Legal Obligations: Processing required to comply with tax, accounting, or regulatory requirements.
- Consent: Processing based on your explicit consent (e.g., marketing communications).
4. Sharing & Disclosure of Information
We do not sell your Personal Information. We may share information in the following circumstances:
- Service Providers: We engage trusted third-party vendors to assist with hosting, payment processing, analytics, customer support, and email delivery. These parties are contractually obligated to protect your data.
- Payment Processors: Payment transactions are processed through PCI-compliant partners (e.g., Stripe, Square). We do not store full payment card details on our servers.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
- Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
- With Your Consent: We may share information with third parties when you have given explicit consent.
5. Data Security & Retention
We implement industry-standard security measures, including encryption (TLS/SSL), access controls, and regular security assessments to protect your data. However, no method of transmission over the Internet is 100% secure. We retain your Personal Information for as long as your account is active or as needed to provide the Service, comply with legal obligations (e.g., tax records for 7 years), resolve disputes, and enforce our agreements. Upon account termination, we will delete or anonymize your data in accordance with our data retention policy, except where retention is required by law.
6. Your Rights & Choices
Depending on your location, you may have certain rights regarding your Personal Information:
- Access & Portability: Request a copy of your Personal Information in a structured, machine-readable format.
- Correction: Update or correct inaccurate or incomplete information.
- Deletion: Request deletion of your Personal Information, subject to legal exceptions.
- Opt-Out of Marketing: Unsubscribe from promotional emails by clicking the "unsubscribe" link or adjusting account preferences.
- Cookie Preferences: Manage cookie settings through your browser or our cookie consent tool.
- Restrict Processing: In certain circumstances, you may request restriction of processing.
To exercise these rights, contact us at privacy{{ env('APP_NAME') }}.com. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.
7. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect Personal Information from children. If we become aware of such data, we will delete it promptly.
8. International Data Transfers
VunaPos is headquartered in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate. We ensure appropriate safeguards, such as Standard Contractual Clauses, are in place to protect your data in accordance with applicable laws.
9. Third-Party Links & Integrations
The Service may contain links to third-party websites or integrate with external applications. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with VunaPos.
10. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance functionality, analyze usage, and personalize content. Types of cookies we use:
- Essential Cookies: Required for core functionality like authentication and security.
- Analytics Cookies: Help us understand how users interact with our Service (e.g., Google Analytics).
- Preference Cookies: Remember your settings and preferences.
- Marketing Cookies: Used to deliver relevant advertisements (where applicable).
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights, including:
- The right to know what Personal Information we collect, use, disclose, and sell (we do not sell your data).
- The right to request deletion of your Personal Information, subject to exceptions.
- The right to correct inaccurate Personal Information.
- The right to opt-out of sharing for cross-context behavioral advertising (if applicable).
- The right to non-discrimination for exercising your privacy rights.
To exercise your California rights, contact us at privacy{{ env('APP_NAME') }}.com or call toll-free at 1-800-555-VunaPos. Authorized agents may submit requests on your behalf with written authorization.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or through your account dashboard. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Information
If you have questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer (DPO) at:
VunaPos Privacy Team
Email: privacy{{ env('APP_NAME') }}.com
Address: 123 Commerce Avenue, Suite 400, Wilmington, DE 19801, USA
Phone: 1-800-555-7673
Your trust is our priority.
We are committed to protecting the data you entrust to us. For any privacy-related inquiries, please reach out to our dedicated privacy team at the contact information above.
This Privacy Policy applies solely to information collected by VunaPos. By using our Service, you acknowledge that you have read and understand this Privacy Policy. For our Terms and Conditions, please click here.