Privacy Policy

This Privacy Policy explains how ShasTech-IT processes information in connection with ShasPOS Pro, including the website, SaaS application, API and related support services. The exact data processed depends on the features a customer enables and the information users enter into the service.

1. Information we process

Account and identity information

This can include names, email addresses, authentication/session information, roles, permissions, device/session identifiers and account-security records.

Business and operational information

Customers may enter business profiles, outlets, staff, customers, suppliers, products, barcodes, pricing, taxes, inventory, purchases, sales, returns, payments, financial entries, reports, notes and other operational records.

Subscription and payment information

We process subscription plan, invoice, payment attempt, gateway transaction/reference, status, refund and reconciliation information needed to administer ShasPOS Pro subscriptions. Payment providers may separately process payment-instrument information under their own policies.

Technical, security and audit information

We may process IP addresses, user agents, request identifiers, device information, login attempts, audit events, rate-limit events, application logs, cron/health information and other records used to operate and secure the service.

Support and communications

When you contact us, we process the information you provide so we can respond, investigate issues and maintain a support history.

2. Why we process information

We process information to provide and administer ShasPOS Pro; authenticate users; isolate businesses and outlets; execute requested POS, inventory, purchasing, reporting and finance workflows; manage subscriptions and billing; generate documents and notifications; provide support; prevent abuse and fraud; maintain auditability; diagnose service issues; and comply with applicable obligations.

3. Customer responsibility for business data

ShasPOS Pro customers decide what business, employee, customer, supplier and transaction information they enter into the service. Customers are responsible for ensuring that they have an appropriate basis and authority to collect, use and retain that information and for configuring user access appropriately.

4. Service providers and integrations

We may use hosting, infrastructure, email, payment-gateway and other service providers needed to operate ShasPOS Pro. Information is shared only as reasonably necessary for the relevant service. Third-party services and payment gateways may have their own privacy terms.

5. Security

ShasPOS Pro uses measures designed to protect the service, including tenant context controls, authentication/session controls, role-based permissions, prepared database queries, CSRF protection where applicable, audit logging, security headers, rate limiting and operational monitoring. No internet service can guarantee absolute security.

6. Retention

We retain information for as long as reasonably needed to operate the service, maintain security and audit records, administer subscriptions, resolve disputes and meet contractual, accounting, fraud-prevention or legal obligations. Retention periods may differ by data type and customer relationship.

7. Account deletion

You can request account deletion through the in-app account controls or our public Account Deletion page. We verify identity and authority before deletion or anonymization. Some records may be retained where reasonably required for security, fraud prevention, accounting, contractual or legal obligations.

8. Your choices and rights

Depending on applicable law and your relationship with ShasPOS Pro, you may have rights regarding access, correction, deletion, restriction or other handling of personal information. Business users may first need to contact the organization that controls their ShasPOS Pro workspace.

9. International processing

Our infrastructure or service providers may process information in locations different from your own. Where applicable, we use the service arrangements and safeguards available to us for those transfers.

10. Children

ShasPOS Pro is business software and is not intended as a consumer service for children.

11. Changes to this policy

We may update this policy when the service, legal requirements or our practices change. The current version will be published on this page with an updated date.

12. Contact

For privacy questions, use the contact page or the support contact configured for ShasPOS Pro.

This policy is a product-operational privacy notice and should be reviewed by appropriate legal counsel before launch in jurisdictions that require jurisdiction-specific wording, disclosures or contractual terms.