Privacy Policy

1. Who we are

LuxPos provides cloud-based point-of-sale (POS), accounting, inventory, repair, and related business software, including companion mobile apps.
For privacy questions, contact us at [email protected].

2. Information we collect

Account and profile data: name, business name, email, username, phone number, address, country, and related registration details.
Business data you enter: products, sales, purchases, customers, suppliers, invoices, payments, inventory, repair tickets, appointments, and similar operational records.
Authentication and security data: login credentials (passwords are stored hashed), session tokens, device identifiers used for single-session / device pairing, IP address, browser or app type, and approximate location derived from IP when needed for security.
Payment and subscription data: plan selection, billing status, and payment references. Card details are processed by third-party payment providers (for example Tilopay, Yappy, PagueloFácil, or similar); we do not store full card numbers on our servers when those providers handle checkout.
Communications: support messages, email/WhatsApp/in-app messages you send to us, and feedback.
App and device data (mobile): app version, device model, OS version, crash/diagnostic logs, and push notification tokens if you enable notifications.
Public repair status lookups: if you use the public device/status page, we process the search identifiers you submit (order number, invoice, phone, or serial) to return status information.

3. How we use information

To provide, operate, and improve the services (POS, accounting, inventory, repair, messaging, and related modules).
To create and manage accounts, licenses, and subscriptions.
To process payments and prevent fraud or abuse.
To communicate about the service (security alerts, transactional emails, support replies).
To comply with legal obligations and enforce our terms.
To analyze aggregated, de-identified usage so we can improve performance and features.

4. Legal bases (where applicable)

Depending on your location, we process data based on: performance of a contract (providing the service you requested); legitimate interests (security, product improvement, fraud prevention); consent (where required, for example optional marketing or certain device permissions); and legal obligations.

5. Sharing of information

We do not sell your personal information.
We may share data with: infrastructure and hosting providers; payment processors; SMS/email/WhatsApp delivery providers you or we configure; analytics or error-reporting tools; and professional advisors when required.
Business customers control data they enter about their own end-customers (for example POS shoppers or repair clients). In that case, the business is the controller of that data; we act as a processor providing the software.
We may disclose information if required by law, court order, or to protect rights, safety, and security.
In a merger, acquisition, or asset sale, information may be transferred as part of that transaction with appropriate safeguards.

6. Mobile apps and Apple (App Store)

Our iOS applications may request permissions such as camera (barcodes, photos for products or repairs), photo library, notifications, network access, and local storage. Permissions are used only for features you use.
Apple App Store review teams and users can access this Privacy Policy at a public URL without signing in.
Push notifications, if enabled, use tokens managed by Apple Push Notification service (APNs). You can disable notifications in iOS Settings.
We do not use App Tracking Transparency (ATT) tracking across other companies’ apps or websites for advertising unless we clearly disclose it and obtain required consent. If that changes, we will update this Policy and the App Store privacy labels.

7. Cookies and similar technologies

Our websites use cookies and local storage for language preference, session authentication, security (CSRF), and basic site functionality.
You can control cookies through your browser settings. Disabling essential cookies may prevent login or core features from working.

8. Data retention

We retain account and business data for as long as your account is active and as needed to provide the service, meet legal, tax, or accounting requirements, resolve disputes, and enforce agreements.
After account termination, data may be deleted or anonymized within a reasonable period, except where retention is required by law or legitimate security needs.

9. Security

We use administrative, technical, and organizational measures designed to protect information, including encrypted transport (HTTPS/TLS), hashed passwords, access controls, and session safeguards.
No method of transmission or storage is 100% secure. Please use strong unique passwords and protect access to your devices and staff accounts.

10. International transfers

Your information may be processed on servers located in countries other than your own. Where required, we take steps to ensure appropriate safeguards for cross-border transfers.

11. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, or export personal data; object to or restrict certain processing; and withdraw consent where processing is based on consent.
To exercise these rights, contact [email protected]. We may need to verify your identity before fulfilling a request.
If you are an end-customer of a business that uses our software, please contact that business first; they control the data they collected about you.

12. Children’s privacy

Our services are directed to businesses and adults. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child provided data, contact us and we will take appropriate steps.

13. Third-party links and services

The service may link to or integrate third-party sites and services (payment gateways, messaging platforms, social networks). Their privacy practices are governed by their own policies. We encourage you to review them.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes may also be communicated through the website, app, or email when appropriate. Continued use after an update means you accept the revised Policy, except where additional consent is required by law.

15. Contact

If you have questions about this Privacy Policy or our data practices, contact: [email protected].
Website: https://dev.lux.pa