Privacy Policy — WishPOS

1. Introduction

WishPOS ("we", "us", "our") operates a cloud-based point-of-sale platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

Account Data: Name, email address, and password used to create your WishPOS account.
Business Data: Store name, subdomain, products, orders, customers, and transactions you enter into the platform.
Usage Data: IP address, browser type, and access logs for security and analytics purposes.
Billing Data: Subscription plan, payment status, and invoice history processed via Paddle.

3. How We Use Your Data

To provide and maintain the WishPOS service
To process subscription payments and manage billing
To send service notifications and lifecycle emails
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations

4. Data Storage and Security

Your data is stored in isolated, store-prefixed database tables. Each tenant has its own separate data namespace. We use TLS encryption for data in transit and encrypt data at rest. Access to production data is restricted to authorized personnel only.

5. Your Rights Under GDPR

Right of Access: You can request a copy of your personal data at any time via the Data Export tool in your account settings.
Right to Rectification: You can correct inaccurate data through your account settings.
Right to Erasure: You can request deletion of all your data via the Data Deletion tool in your account settings.
Right to Data Portability: Your exported data is provided in JSON format for easy portability.
Right to Object: You can object to processing for direct marketing at any time.

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all store-prefixed tables, uploaded files, and associated records are permanently deleted within 30 days. Backup copies are retained for 30 days and then automatically purged.

7. Data Processing Agreement

WishPOS acts as a Data Processor for the business data you enter into the platform. You are the Data Controller for your customers' data. We do not access, sell, or share your business data with third parties.

8. Contact

For privacy-related questions or data requests, contact us at privacy@wishpos.com.