Privacy Policy

1. What We Collect

Modest POS collects only the data necessary to provide point of sale features:

• Account information: email address and business name when you register.
• Menu data: product IDs, names, and prices synced from your POS system.
• Request logs: timestamps, source (AI or fallback), latency, and error information for each API call.
• API keys: hashed credentials used to authenticate requests to our recommendation endpoint.

We do not collect customer names, payment data, PCI information, or any personally identifiable information about your customers.

2. How We Use Your Data

• To generate AI-powered product recommendations based on current cart contents.
• To sync and maintain your product catalog via POS integration.
• To provide analytics and performance monitoring in your dashboard.
• To improve the accuracy and relevance of our recommendation engine.

3. Data Sharing

We do not sell your data. We share data only with our subprocessors who enable the service:

• OpenAI: receives menu items and cart contents to generate recommendations. No customer PII is ever sent.
• Supabase: hosts your account data, menu, and request logs.
• Vercel: hosts the application and API endpoints.
• Stripe: if you subscribe to a paid plan, Stripe processes your payment information. We never see your full credit card number.
• Stripe: handles payment processing for paid subscriptions.

4. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all associated data — including menu items, API keys, fallback configurations, and request logs — are permanently deleted within 30 days.

5. Security

API keys are stored as SHA-256 hashes — we never store raw keys. All API traffic is served over TLS 1.3. We follow security best practices for a solo-operated SaaS.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support.rcdlapps@gmail.com. You may also delete your account directly from the dashboard, which triggers automatic deletion of all associated data.

7. Changes

We may update this policy from time to time. Material changes will be communicated via email to the address associated with your account.

8. Contact

Questions? Email us at support.rcdlapps@gmail.com.