VoidPOS
Features Pricing About Help
Sign in Get started free

Privacy Policy

Last updated: March 21, 2026  ·  We are committed to protecting your privacy and your customers’ data.

Summary: VoidPOS stores your business data (products, transactions, employees) in Firebase (Google Cloud). We do not sell your data. We use it only to provide the Service. You can export or delete your data at any time.

Table of Contents

1. Who We Are 2. What Data We Collect 3. How We Use Your Data 4. Data Storage & Security 5. Data Sharing 6. Cookies & Tracking 7. Your Rights 8. Data Retention 9. Children’s Privacy 10. International Transfers 11. Changes to This Policy 12. Contact Us

1. Who We Are

VoidPOS (“we”, “us”, “our”) operates the VoidPOS Point of Sale platform. We are the data controller responsible for the personal data processed through our Service.

Contact: [email protected]

2. What Data We Collect

2.1 Account & Business Owner Data

When you register and use VoidPOS as a business owner, we collect:

DataPurposeRequired?
Email addressAccount authentication, communicationsYes
Full nameAccount identificationYes
Phone numberAccount contact, supportYes
CountryRegional pricing, timezoneYes
Business name, address, phonePOS receipts, profileOptional
Password (hashed)Account security (stored by Firebase Auth)Yes

2.2 Business Operational Data

Data you create while using the Service:

  • Products: Names, prices, stock levels, categories
  • Transactions: Sale amounts, items, payment methods, timestamps
  • Employees: Names, email addresses, roles, hashed PINs
  • Shifts: Clock-in/out times, sales attributed per shift

This data belongs to you. We process it solely to provide the Service.

2.3 Technical Data

Automatically collected when you use the Service:

  • IP address (used for regional pricing and security)
  • Browser type and version
  • Pages visited and actions taken
  • Session identifiers (PHP session cookies)

2.4 Payment Data

Payment card details are processed by Lemon Squeezy and are not stored by VoidPOS. We only store the amount paid and the plan activated.

3. How We Use Your Data

PurposeLegal Basis
Providing and operating the VoidPOS ServiceContract performance
Processing payments and managing subscriptionsContract performance
Sending transactional emails (receipts, account alerts)Contract performance
Customer support and responding to enquiriesLegitimate interest
Security monitoring and fraud preventionLegitimate interest
IP-based regional pricing (anonymous)Legitimate interest
Improving the Service (aggregate, anonymised data)Legitimate interest
Sending product updates (with your consent)Consent

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Storage & Security

4.1 Where Data is Stored

Your data is stored in Google Firebase Realtime Database, located in the Asia Southeast 1 region (Singapore). Firebase is operated by Google LLC and complies with GDPR and international data protection standards.

4.2 Security Measures

  • All connections are encrypted via HTTPS/TLS
  • Employee PINs are hashed using bcrypt before storage
  • Firebase Security Rules restrict access so only authorised owners and employees can read their own business data
  • PHP sessions use HttpOnly, Secure, and SameSite=Strict cookies
  • Sensitive server-side operations use Firebase Database Secret (never exposed to browsers)

4.3 Data Breaches

In the event of a data breach that affects your personal data, we will notify you by email within 72 hours of becoming aware of the breach, as required by applicable law.

5. Data Sharing

We share your data only with the following service providers, and only to the extent necessary to provide the Service:

ProviderPurposeData Shared
Google Firebase (Google LLC)Database & authenticationAll business data
Lemon SqueezyPayment processingName, email, billing address, payment
ipapi.co / ip-api.comIP geolocation for pricingIP address only (anonymous)
Google FontsFont loadingNone (CDN request only)

We may disclose your data if required by law, court order, or to protect the rights and safety of VoidPOS, our users, or the public.

6. Cookies & Tracking

6.1 Cookies We Use

CookiePurposeDuration
VOIDPOS_SESSSession management (keeps you logged in)Session / 8 hours
Firebase auth tokensFirebase authentication state1 hour (refreshed automatically)

6.2 No Tracking Cookies

VoidPOS does not use advertising cookies, third-party tracking pixels, or social media tracking.

6.3 Managing Cookies

You can disable cookies in your browser settings. Disabling the session cookie will prevent you from logging in.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data (editable in Settings)
  • Erasure: Delete your account and all data (available in Settings → Delete Account)
  • Portability: Export your transaction data as CSV or JSON (Standard/Premium plans)
  • Objection: Object to processing based on legitimate interest
  • Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Most data rights can be exercised directly within VoidPOS without contacting us — update your profile in Settings, or delete your account from Settings → Delete Account.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • All business data (products, transactions, employees) is deleted immediately from Firebase
  • Your Firebase Authentication account is deleted immediately
  • Billing records may be retained for up to 7 years for tax and legal compliance purposes
  • Anonymised, aggregate usage statistics are retained indefinitely

If your subscription expires and you do not reactivate within 90 days, we may permanently delete your account data after sending a 14-day notice email.

9. Children’s Privacy

VoidPOS is a business tool intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Data Transfers

Your data is stored on Google Firebase servers located in Singapore (Asia Southeast 1). By using VoidPOS, you consent to the transfer of your data to Singapore and to other countries where our service providers operate.

Google LLC participates in and complies with relevant data transfer frameworks. For users in the European Economic Area (EEA), these transfers are governed by Standard Contractual Clauses under GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice in the Service. The “Last updated” date at the top of this page will reflect when changes were made.

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

For any privacy-related questions, requests, or complaints, contact us:

  • Email: [email protected]
  • Website: https://voidpos.com

If you are in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

VoidPOS

The modern point of sale for retail, food, and every business in between. Built for owners who move fast.

Product

Features Pricing Documentation Blogs

Company

About Contact Help Feedback

Account

Sign in Get started free Employee login
© 2026 VoidPOS. All rights reserved.
Privacy Terms [email protected]