Privacy policy (draft)

Who we are

MartPOS is made by Innobrains Technologies. For anything about your data, use the contact form.

On this website

• No trackers. The site uses no analytics, advertising or social media scripts, and loads no fonts or scripts from other companies. The website can load Google Analytics only if we switch it on in its settings; it is off, and this policy will say so before it is ever switched on.
• Cookies. A session cookie and a security token that protects forms, both needed for the contact form and for signing in; and, only if you tick "Keep me signed in", a cookie that keeps you signed in. Pages that only show content are sent without them.
• Contact form. We keep what you send (name, email, optional phone and business, topic and message) with your IP address and browser description, to answer you and to stop abuse.
• Crawlers. For automated crawlers that name themselves (search engines, AI assistants, link previews), we count which public pages they read each day, by the name in their user-agent. Nothing is stored about people's visits.

MartPOS Cloud accounts

• Your name, email and business name. Your password is stored only as a one-way hash.
• If you turn on two-step sign-in, its secret and your recovery codes, encrypted.
• A security log of sensitive actions (such as pairing codes created, PCs revoked, two-step sign-in changes) with the time, IP address and browser.

Data from your store PCs

• A paired store PC sends the changes it records, such as sales and returns with their items, amounts and dates, and the customer or supplier references in them. The cloud keeps them to show you reports such as daily sales per branch.
• For each paired PC: its name, when it was paired and last seen, and the licence grants it fetched.
• Your shop's records stay on your store PC as well; the cloud does not replace them.
• Crash reports. When MartPOS hits a problem it did not expect, the PC notes what went wrong in the program: the MartPOS, Windows and .NET versions, the screen, the error and where in the code it happened, and how often. Customer and supplier names, phone numbers, addresses, passwords, PINs, tokens and pairing codes are taken out on the PC before anything is kept. A paired store PC sends these reports to the MartPOS team only while the owner allows it (Settings › System & updates, "Send crash reports to the MartPOS team"; on unless the owner turns it off), never on the Offline edition; otherwise they stay on the store PC. We keep them for 90 days after the problem was last seen, to find and fix bugs.

Who else sees it

We do not sell data. The hosting and email providers will be named here before any shop's data is kept in production.

How long we keep it

Retention periods are still to be decided and will be set out here. Until then you can ask us to delete your account and its data.

Your choices

You can ask for a copy of your data, a correction, or deletion, through the contact form.