Privacy Policy

1. What this covers

This Privacy Policy explains what information WooPOS collects, why, and how it’s handled. It applies to your use of the WooPOS application. It does not cover your WooCommerce store’s own privacy practices toward your customers — you remain the data controller for your store and its customer data, and should have your own privacy policy covering your store.

2. Information we collect

• Account information — your name, email address, and password (stored hashed, never in plain text) when you sign up.
• Store connection details — your WooCommerce store URL and REST API consumer key/secret, encrypted at rest, used only to make API calls to your own store on your behalf.
• Store data — products, orders, customers, and stock levels that WooPOS reads from and writes to your WooCommerce store as part of normal use (e.g. ringing up a sale).
• Usage data — basic technical logs (timestamps, error reports) used to keep the Service reliable and secure.

3. How we use this information

We use this information solely to operate, secure, and improve WooPOS for you: authenticating your account, connecting to your store, processing the sales and reports you generate inside the app, and diagnosing bugs. We do not sell your information or your store’s data, and we do not use it for advertising.

4. Who we share it with

WooPOS relies on a small number of infrastructure providers to operate:

• Supabase — hosts our database, authentication, and file storage.
• Vercel — hosts the WooPOS web application.
• Your own WooCommerce store — WooPOS communicates directly with the store you connect, using the credentials you provide.

We do not share your information with any other third party except where required by law.

5. Data retention and deletion

We retain your account and workspace data for as long as your account is active. Disconnecting your store immediately removes its stored API credentials. You can request full deletion of your account and associated workspace data at any time by contacting us; store data that lives in your WooCommerce store itself (orders, products, customers) is unaffected, since WooPOS is never the system of record for it.

6. Security

Store API credentials are encrypted at rest. Access to your workspace is protected by row-level security so that only members of your workspace, with the roles you assign them, can see or act on its data. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

7. Your choices

You can update your account details, disconnect your store, or remove team members at any time from within the app. You can request access to, correction of, or deletion of your personal information by contacting us at the address below.

8. Children’s privacy

WooPOS is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you directly.

10. Contact

Questions about this policy, or requests to access or delete your data, can be sent to [email protected].