Your privacy matters

1. Introduction

Sales Point 360 ("we," "us," or "our") operates the Sales Point 360 point-of-sale platform and website at salespoint360.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Business name and contact information
• Your name, email address, and phone number
• Password (stored as a bcrypt hash — we never store plaintext passwords)
• Country and preferred currency

2.2 Business Data

As you use the Service, you may store:

• Products, categories, and pricing information
• Customer records and contact details
• Sales transactions, invoices, and payment records
• Employee information and schedules
• Inventory and supplier data

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or expiration date on our servers. Stripe processes and stores this data in accordance with PCI-DSS standards. We only store references such as Stripe customer and subscription IDs.

2.4 Usage Data

We automatically collect:

• IP addresses and browser information
• Pages visited, features used, and session duration
• Device type and operating system
• Error logs for debugging and support

2.5 Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies to operate and improve our Service. You can manage your cookie preferences at any time using the cookie consent banner shown on your first visit. To reset your preference, clear your browser cookies for salespoint360.com.

Essential Cookies

These are required for the Service to function and cannot be disabled:

Analytics Cookies (Optional)

These help us understand how visitors use our website. They are only loaded if you accept cookies via the consent banner:

Security Cookies

Used to protect against spam and abuse:

Local Storage & IndexedDB

In addition to cookies, we use browser local storage and IndexedDB for the POS application:

• Cart persistence — your current cart is saved locally so it survives page refreshes
• Offline sync queue — sales made while offline are queued in IndexedDB and synced when connectivity returns
• Product cache — products, categories, and images are cached locally for offline browsing
• Push notification tokens — for receiving real-time order and alert notifications

Managing Your Cookie Preferences

You can manage your cookie preferences in the following ways:

• Cookie consent banner: Click "Accept All" or "Reject" when prompted. Your choice is saved and can be changed by clearing your browser data.
• Browser settings: Most browsers allow you to block or delete cookies. Note that blocking essential cookies may prevent the Service from functioning.
• Google Analytics opt-out: Install the Google Analytics opt-out browser add-on.

We do not use third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies.

2.6 Mobile Numbers & SMS Consent

Where you give a mobile number and consent to receive text messages, we record the number, the date and time consent was given, the page or point of sale it was given at, the IP address it came from, and the exact wording of the disclosure shown to you. We keep this record so that consent can be evidenced, and so that a withdrawal of consent can be honoured across every business on the platform. Consent is optional everywhere it is offered and is never a condition of registering, purchasing, or booking.

2.7 Business Questionnaire

If you complete our business questionnaire, we collect the answers you give about your business — for example its type and size, what it sells, how it takes payments, and the software and hardware it uses — together with your name, email address and phone number. We also record the wording you agreed to and when, your IP address and your browser details. We use this to assess your needs, prepare a setup plan and contact you about it.

The questionnaire does not ask for payment card, bank account or identity document numbers, and you should not enter them. If something that looks like a payment card number is typed into a text box, we remove it before your answers are saved. We send product updates and offers only if you tick the separate box asking for them. You can ask us to delete your questionnaire answers at any time using the contact details in Section 13.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process transactions and send billing notifications
• Send account-related communications (welcome emails, password resets, security alerts)
• Send text messages you have consented to receive — order and appointment updates, one-time passcodes, and security alerts (see section 6)
• Provide customer support and respond to inquiries
• Monitor usage patterns to improve the Service
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Multi-Tenant Data Isolation

Sales Point 360 is a multi-tenant platform. Each tenant (business account) has fully isolated data. Your business data — products, customers, sales, employees — is accessible only to authorized users within your organization. Other tenants cannot access your data, and you cannot access theirs.

5. Data Sharing

We share your information only in the following circumstances:

• Service providers: We use third-party services for payment processing (Stripe), email delivery (SMTP2GO), text message delivery, and hosting. These providers access only the data necessary to perform their services and are contractually obligated to protect it. Mobile numbers and SMS consent are shared only with the messaging provider that delivers the message, and never for that provider's own purposes — see section 6.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information with your explicit consent.

6. Mobile Messaging (SMS)

Where you have given consent, we send text messages relating to your account, orders, appointments, and security, and — where separately consented to — promotional offers. Message types, opt-in points, and opt-out instructions are set out in full in our SMS Terms.

Message frequency varies with your activity. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for assistance.

Messages we send ourselves are delivered by Twilio Inc. A business using our platform selects its own delivery provider from Twilio, Vonage, Sinch, ClickSend, Plivo, Bandwidth or Telnyx, so a message sent to you by that business is delivered by whichever it has chosen. In every case the provider receives only the recipient's mobile number and the message content, solely in order to deliver it, and is contractually prohibited from using that data for any purpose of its own.

We do not sell, rent, or share mobile numbers or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every category of information sharing described in section 5, other than delivery by the messaging provider named above.

Where a business using our platform messages its own customers, that business is the sender and is responsible for obtaining consent from those customers. We provide the consent capture, opt-out handling, and record-keeping used to do so, and a number that opts out is suppressed across every business on the platform.

7. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing with appropriate cost factors
• JWT-based authentication with secure token management
• Role-based access control with granular permissions
• Tenant-level data isolation at the database query level
• Activity logging and audit trails
• Rate limiting on authentication and public endpoints
• Optional two-factor authentication (TOTP)

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your data within 30 days, except where retention is required by law (e.g., tax records, financial transaction data) or for legitimate business purposes (e.g., resolving disputes).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Restrict or object to certain processing
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers, including compliance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: [email protected]
• Website: salespoint360.com/contact