The short version: your store's data stays on your till. Online, Estura keeps only your email, store name and billing details to run your subscription — and we never sell your data. The full policy is below.
Version 2 · Last updated August 3, 2026
This Privacy Policy explains how Estura (“we”, “us”), based in the Province of Ontario, Canada, handles information — both inside the Estura POS software that runs on your till (“the Software”) and inside the online service we operate to license and bill it (“the Subscription Service”). It is written with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) in mind.
Estura has two parts, and they handle data very differently:
- The Software on your till runs on your own computer. Your business data stays there — we cannot see it.
- The Subscription Service (our server at api.estura.ca, its database, and our payment processor) handles the limited account and billing information needed to sell you a licence and keep it active.
Part A — The Software on your till
1. Your business data stays local
Estura POS is an on-premises application. Your business data — products and inventory; sales, refunds and payment metadata; employee accounts; and any customer records you enter — is stored locally in a database on your own computer(s). It is not sent to us, and the Software works fully offline. We do not access it.
2. What the Software stores
Depending on the features you use, the local database may contain product and inventory data; sales, refunds and payment metadata (card brand / last 4 / approval code — never full card numbers); employee accounts and PINs (stored only as salted hashes); and, if you use the customer directory, customer names and purchase history. Full card / PAN data is never stored — card payments run on your own card terminal or processor, which is the card-data boundary.
3. Remote access (optional)
If you enable the phone/remote companion, a device you pair can access your data over your local network or your own private network. Pairing requires an on-till code plus an employee PIN, and access is limited by that employee’s permissions. You control which devices are paired and can revoke them.
4. Backups
Estura POS creates local backups and, if you configure one, copies to a folder you choose (e.g. USB or network). You control where backups go; keep them on trusted / encrypted media, as they contain your business data.
5. Diagnostics
If you export diagnostics for support, they include app / printer / version details and recent activity logs. They do NOT include card data, passwords, or customer personal information. You choose whether and to whom to send them.
Part B — The Subscription Service (licensing & billing)
6. What we collect, and why
To sell you a subscription and keep your licence active, the online service we operate — a Cloudflare Worker at api.estura.ca, its database, and Stripe for payments — collects and stores:
- Your email address — to send your licence key, receipts and support replies, and to identify your account.
- Your store name — it is written into your licence and shown on your account.
- A device identifier — a one-way value derived from your computer (based on, but not, the Windows MachineGuid; we never receive the raw hardware ID) — used to bind your licence to the specific till(s) it is activated on, so it can’t be copied onto more machines than the number of tills you’ve paid for.
- Stripe customer and subscription IDs, and your billing status — to run your subscription (monthly or annual), know whether it is paid, and let you manage it. Your card details go directly to Stripe; we never see or store your full card number.
- Prepaid-credit balance — if you pre-pay, we track the credit remaining on your account.
- Support messages — if you email support or use the contact form, we keep your message and our reply so we can help you.
- PIN-reset request records — if you request an owner-PIN reset, we store a record of the request as a one-way hash, never the PIN itself.
7. Website analytics
Our website uses Cloudflare Web Analytics — a privacy-friendly measure that sets no cookies and does not build a profile of you. Our contact form uses Cloudflare Turnstile to block spam and bots. Transactional emails are sent from [email protected] and replies come from [email protected], through Cloudflare’s email service.
8. Where this data is processed (outside Canada)
The Subscription Service is run for us by providers located outside Canada: Cloudflare (our server, database and email) and Stripe (payments). This means the account and billing information described above is stored and processed outside Canada — for example in the United States — and may be subject to the laws of the countries where those providers operate, including lawful access by their authorities. We use these providers because they offer appropriate safeguards, but we want you to know this before you subscribe.
9. How long we keep it
We keep account and billing information for as long as your subscription is active and for a reasonable period afterwards, to meet tax, accounting and legal obligations and to reactivate your account if you return. Stripe retains payment records under its own rules. Support messages are kept only as long as they are useful for support and record-keeping. When information is no longer needed, we delete or de-identify it.
10. We never sell your data
We do not sell, rent or trade your personal information, and we do not use it for advertising. We share it only with the providers that run the service for us (Cloudflare and Stripe), only as needed to license, bill and support you — or where the law requires it.
11. Access, correction and deletion
Under PIPEDA you can ask what personal information we hold about you, ask us to correct it, or ask us to delete it (subject to records we are required to keep by law). Email [email protected] from your billing address and we will help. Because most of your business data lives only on your own till, those records are yours to view, correct and delete directly in the Software.
Part C — Shared responsibilities
12. Your responsibilities as the operator
For the customer and employee information you collect and keep on your till, you are the party responsible for that personal information — including obtaining any required consent, honouring access / correction requests, retaining data only as long as needed, and securing your computer(s).
13. Changes to this policy
We may update this policy; the version and date above will change.
Questions about your privacy, or an access / correction / deletion request? Contact [email protected] — a mailing address is available on request. Estura is based in Ontario, Canada.