Privacy Policy

The entity responsible for processing your information under this policy is KING POS.

We collect only the minimum necessary information required to operate our Point of Sale (POS), inventory management, cloud synchronization, and billing services:

• Account & Profile Information: When you register directly or via authentication partners, we collect your full name, email address, contact phone number, encrypted password hash, and store name.
• Google User Data (via Google Sign-In / OAuth): If you choose to log in or create an account using Google Sign-In, we collect your verified Google email address, your display name, and your public Google profile photo. We use this strictly to authenticate your identity and link your KING POS stores to your Google account.
• Retail & Store Operational Data: Store configurations, product catalog (titles, barcodes, cost and selling prices), categories, inventory levels, customer names and phone numbers, supplier ledgers, sales transactions, quotations, digital invoices, and tax configurations.
• Device & Technical Diagnostics: Device unique identifiers (UUID), operating system version, app version, IP address, sync timestamps, error logs, and offline queue status necessary to reconcile offline POS transactions with the cloud database.
• Payment & Subscription Records: Subscription plan type, billing duration, payment status, and gateway transaction identifiers. Note: KING POS does not store or process complete credit card numbers or banking secrets; all payment processing is handled by PCI-DSS certified gateways (Stripe, PayPal, Paystack, Razorpay).

We use the collected information for the following specific purposes:

• Authentication & Account Management: To verify your identity, secure your login sessions, and provide administrative access to your retail dashboard.
• POS Operations & Multi-Device Sync: To enable offline-first sales at your cash register and sync transaction records, stock adjustments, and ledgers to the cloud when an internet connection is active.
• Invoicing & E-Receipts: To generate digital receipts, VAT invoices, and track business financial analytics.
• Security & Fraud Prevention: To prevent unauthorized device access, verify license status, and protect account integrity.
• Customer Support: To troubleshoot issues, answer inquiries submitted through our contact forms or WhatsApp support, and deliver necessary service updates.

We do not share your private store or customer data with third parties, except with trusted infrastructure providers that enable the technical operation of KING POS:

• Authentication & Infrastructure: Google Firebase / Google Cloud Platform (for secure user authentication and cloud synchronization).
• Payment Gateways: Stripe, PayPal, Paystack, Razorpay (for processing subscription invoices under secure tokenization).
• Transactional Communication: Email SMTP infrastructure for password resets and official WhatsApp API for customer service.
• Legal & Regulatory Authorities: We may disclose information if required by applicable law, court subpoena, or enforceable government request to comply with legal obligations.

We implement rigorous technical and organizational security measures to protect your data:

• Encryption in Transit: All communications between your mobile device, desktop POS, and our cloud servers are encrypted using 256-bit TLS / HTTPS.
• Encrypted Passwords: User passwords are encrypted using strong salted hashing algorithms (Bcrypt/Argon2) and are never stored in plain text.
• Role-Based Access Control: Internal system access is restricted to authorized personnel using Multi-Factor Authentication (2FA).
• Automated Backups: Cloud databases are backed up regularly with disaster recovery protocols to prevent data loss.

We retain your account and store information for as long as your account remains active. You maintain full rights over your data under GDPR and global privacy regulations:

• Right to Access & Export: You can view and export your product catalog, sales invoices, and customer lists directly from your POS dashboard.
• Right to Rectify: You can update or correct your profile, store name, or credentials at any time in your account settings.
• Account & Data Deletion Request: You have the right to request permanent deletion of your account and all associated store data. To request account and data deletion, simply send an email to [email protected] with the subject "Data Deletion Request" from your registered email address. Upon verification, all your personal data, Google OAuth associations, and store records will be permanently deleted from our active databases within thirty (30) days.