Version 1 · Last updated «DATE»
This Privacy Policy explains how Estura POS (“the Software”), provided by «COMPANY LEGAL NAME», handles information. It is written with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) in mind; adapt it to your jurisdiction.
1. Where your data lives
Estura POS is an on-premises application. Your business data — products, sales, employees, and any customer records you enter — is stored locally in a database on your own computer(s). It is not sent to us. The Software works fully offline.
2. What is stored
Depending on the features you use, the local database may contain: product and inventory data; sales, refunds, and payment metadata (card brand / last 4 / approval code — never full card numbers); employee accounts and PINs (stored only as salted hashes); and, if you use the customer directory, customer names and purchase history. Full card/PAN data is never stored — card processing happens on your payment terminal, which is the card-data boundary.
3. How it is used
Data is used only to operate your point of sale: ringing sales, reporting, inventory, staff management, and the features you enable. We do not access it.
4. Remote access (optional)
If you enable the phone/remote companion, a device you pair can access your data over your local network / your own private network. Pairing requires an on-till code plus an employee PIN, and access is limited by that employee’s permissions. You control which devices are paired and can revoke them.
5. Backups
Estura POS creates local backups and, if you configure one, copies to a folder you choose (e.g. USB or network). You control where backups go; keep them on trusted/encrypted media, as they contain your business data.
6. Diagnostics
If you export diagnostics for support, they include app/printer/version details and recent activity logs. They do NOT include card data, passwords, or customer personal information. You choose whether and to whom to send them.
7. Your responsibilities
As the operator, you are the party responsible for the personal information you collect from customers and employees, including obtaining any required consent, honouring access/correction requests, retaining data only as long as needed, and securing your computer(s).
8. Changes
We may update this policy; the version and date above will change.
Contact: [email protected] · «REGISTERED MAILING ADDRESS»