This Privacy Policy explains how SIVRAPOS (“SIVRAPOS,” “we,” “us”) collects, uses, and shares information when you visit www.sivrapos.com (the “Site”) or use the SIVRAPOS point-of-sale service (the “Service”). It also describes the choices and rights available to you.
1. Information we collect
Information you give us
- Demo and contact requests. When you request a demo or email us, we collect your name, restaurant name, email address, phone number, number of locations, and (optionally) the POS you use today.
- Account information. When a restaurant subscribes, we collect business contact details, staff names and roles as entered by the account owner, and menu and configuration data.
- Support communications. Messages you send to our support and sales addresses, and our replies.
Information collected through the Service
- Transaction data. Order contents, prices, taxes, tips, payment method type, and timestamps generated by normal use of the POS.
- Guest data our customers enter. A restaurant may store guest names, contact details, and order history in its customer directory. That data belongs to the restaurant; we process it on the restaurant’s behalf.
- Device and log data. Device model, operating system version, app version, IP address, and diagnostic logs used to keep the Service reliable.
Payment card data
We do not collect, store, or process payment card numbers. Card-present and QR payments are processed end-to-end by Stripe, Inc. (“Stripe”). Card data is entered on, or read by, devices and interfaces controlled by Stripe and is subject to Stripe’s PCI-DSS compliant infrastructure and its own privacy policy, available at stripe.com/privacy.
2. How we use information
- To respond to demo requests and schedule and run demos.
- To provide, maintain, secure, and improve the Site and the Service.
- To provide customer support and send service-related communications.
- To bill subscriptions and detect and prevent fraud or abuse.
- To comply with legal obligations.
We do not sell personal information, and we do not use customer or guest data for third-party advertising.
3. Service providers (processors)
We share information only with service providers that help us run the business:
- Stripe — payment processing and payouts.
- Cloud hosting providers — hosting for the Site, the Service, and encrypted backups.
- Form and email providers — receiving demo-request submissions and sending transactional email.
- Analytics — a single privacy-respecting analytics tag on the Site measuring aggregate page traffic; no cross-site tracking and no advertising cookies.
Each provider is bound by contract to use the data only to provide its service to us. We may also disclose information if required by law, or in connection with a merger or acquisition, in which case this policy will continue to apply to previously collected data.
4. Retention
- Demo and contact requests: kept while we correspond with you and deleted within 24 months of the last contact if you do not become a customer.
- Customer account and transaction data: kept for the life of the subscription and, after cancellation, made available for export for 90 days, then deleted from production systems within a further 90 days, except where longer retention is required for tax, accounting, or legal purposes.
- Diagnostic logs: retained for up to 12 months.
5. Security
Data is encrypted in transit and at rest. Access to production systems is restricted to authorized personnel with a need to access them, protected by multi-factor authentication, and logged. No method of transmission or storage is perfectly secure, but we design for failure and least privilege.
6. Your rights and choices
Depending on where you live (including under the California Consumer Privacy Act), you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, and to opt out of certain processing. We honor these requests regardless of residence where practicable. If you are a guest of a restaurant that uses SIVRAPOS, we will route your request to that restaurant, which controls its guest data.
To exercise any right, email hello@sivrapos.com. We respond within 30 days and will not discriminate against you for exercising your rights.
7. Cookies
The Site uses only cookies that are strictly necessary for it to function and a single first-party analytics measurement described above. We do not use advertising or cross-site tracking cookies.
8. Children
The Site and Service are for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes to this policy
If we make material changes, we will update the effective date above and, for customers, give notice by email before the changes take effect.
10. Contact
Privacy questions and requests: hello@sivrapos.com.