Privacy Policy

Information we collect

• Account and store information, including business name, owner or cashier name, phone number, store address, business type, tax settings, subscription status, and store configuration.
• Operational store data, including products, inventory counts, prices, barcodes, product images, sales, receipts, refunds, payment method labels, exchange rates, tax totals, and report data entered or generated by the store.
• Support and administration data, including PIN reset events, payment confirmations, support requests, device sync status, audit records, and internal admin actions needed to operate the service.
• Technical data needed to run and secure the service, including app version, sync timestamps, request logs, error logs, and basic device or browser information normally sent with network requests.

How we use information

• To create and authenticate store owner and cashier accounts using phone number and PIN.
• To sync store data between the mobile app, business portal, and admin system.
• To process sales, generate receipts, manage inventory, calculate taxes, and provide business reports.
• To manage subscriptions, grace periods, read-only access, support requests, and payment records.
• To maintain security, troubleshoot issues, prevent unauthorized access, and improve reliability.

Data sharing

• We do not sell store owner, cashier, customer, product, or sales data.
• We share data with service providers only when needed to operate Tilly POS, such as cloud hosting, database storage, SMS delivery, file/image storage, analytics or error diagnostics, and payment or support communication tools that are configured for the service.
• We may disclose information when required by law, to protect the security of the service, or to investigate misuse of Tilly POS.

Device permissions

• Camera access is used to scan product barcodes.
• Photo library access is used when a store owner adds business logos or product images.
• Bluetooth access is used to connect supported receipt and barcode printers.
• The app may open the device SMS, phone, WhatsApp, or browser apps when the user chooses a related support or receipt-sharing action. Tilly POS does not read incoming SMS messages.

Local storage and cloud sync

• The mobile app stores store data locally on the device so checkout and management workflows can continue when connectivity is limited.
• When internet access is available, the app syncs supported store records with Tilly POS servers so the business portal, admin panel, and other approved devices can access the same store data.
• If a device is reset, replaced, or restored, store data may be downloaded again from the server after account verification.

Security

• Tilly POS uses account PINs, temporary PIN flows, role-based access, server-side access checks, and audit records to protect store data.
• No system can guarantee absolute security, but we apply reasonable technical and administrative safeguards to reduce unauthorized access, loss, misuse, or alteration of data.

Data retention and deletion

• We keep store data for as long as needed to provide the service, support business records, maintain audit history, comply with legal obligations, and resolve disputes.
• A store owner may request account or store data deletion by contacting support. Some records may be retained when required for legal, tax, security, payment, or audit purposes.

Children

• Tilly POS is a business tool and is not intended for children. We do not knowingly collect personal information from children.

Changes to this policy

• We may update this Privacy Policy as Tilly POS changes. The updated date above will show when the policy was last revised.

Contact

For privacy questions, access requests, correction requests, or deletion requests, contact Tilly POS support through the in-app Help screen, the business portal Help page, or the support contact configured by your administrator.