Privacy Policy

QrPOS is a software platform designed for small and medium-sized businesses. We provide digital menu catalogs, point-of-sale (POS), and kitchen display system (KDS) tools that run entirely in the browser — no special hardware, no app installs. Our mission is to give independent restaurants, cafés, bars, clinics, and retail shops access to the same high-quality operational tools that large brands enjoy, at a fraction of the cost.

We keep data collection to the minimum required to operate the service:

• Account information — your email address, used for magic-link authentication. We do not collect passwords.
• Business profile — business name, logo, cover image, address, contact details, and menu content you voluntarily enter when setting up your catalog.
• Order data — order items, totals, station assignments, and delivery method. This data is retained for 7 days by default to power day-to-day POS/KDS operations and short-term reporting, after which it is automatically purged. You may export reports at any time before purging.
• Device identifiers — anonymous browser fingerprints used solely to associate a customer’s device with their in-session orders. No personal information is derived from these identifiers.

• Payment card numbers or financial data — QrPOS does not process, transmit, or store credit/debit card numbers. We are not a payment processor and PCI DSS compliance is not applicable to our platform.
• Long-term sales or analytics data — we do not retain order history, revenue figures, or customer behaviour data beyond the 7-day rolling window unless a bespoke data-retention arrangement has been explicitly agreed upon with an enterprise client.

• To authenticate you and grant access to your dashboard.
• To display your digital menu to your customers.
• To route orders through POS and KDS in real time.
• To generate operational reports (daily, weekly, monthly) during the 7-day retention window.
• To send transactional emails (magic-link logins). We will never send marketing emails without your explicit consent.

Order and transactional data is automatically deleted after 7 days. Business profile data (menu, categories, products) persists for as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days.

If your business requires extended data retention, archival, or custom analytics, contact us to discuss an enterprise arrangement tailored to your needs.

We do not sell, rent, or share your data with third parties for marketing or advertising purposes. Data may be shared only:

• With infrastructure providers (hosting, database) strictly to operate the service, under appropriate data-processing agreements.
• When required by law or a valid legal process.

All data is transmitted over TLS (HTTPS). Authentication uses one-time magic links — no passwords are stored. Database access is restricted and encrypted at rest. We follow industry best practices proportionate to the nature and volume of data we handle.

QrPOS uses only essential cookies and local storage required for authentication tokens and session state. We do not use tracking cookies, advertising pixels, or third-party analytics scripts.

You may at any time:

• Request a copy of the data we hold about your account.
• Request correction or deletion of your data.
• Export your reports before the 7-day window closes.
• Close your account, triggering permanent data removal.

To exercise any of these rights, email us at info@qrpos.io.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice in the admin dashboard. Continued use of the platform after changes constitutes acceptance.

For privacy-related questions or requests, reach us at info@qrpos.io.