We collect information you provide to us directly, information created as you use the Services, and a limited amount of information from third parties that help us operate.

• Account and profile information — such as your name, business name, email address and the credentials you use to sign in.
• Billing information— details needed to process your subscription. Card data is handled by our payment processor; we store limited references and never the full card number.
• Usage and device information — how you interact with the Services, together with technical data such as IP address, browser type and log timestamps.
• Support communications— the content of messages you send us when you request help.

We use the information we collect to:

• provide, maintain and improve the Services;
• set up and administer your account, process your subscription and take payment;
• respond to your requests, send service-related notices and provide support;
• monitor for, investigate and help prevent fraud, abuse and security incidents;
• comply with our legal obligations and enforce our terms.

Where the law requires a legal basis to process personal information, we rely on one or more of the following, depending on the context: performance of the contract under which we provide the Services to you; our legitimate interests in operating and securing the Services; your consent, where we ask for it; and compliance with legal obligations that apply to us. Where we rely on consent, you may withdraw it at any time.

We do not sell your personal information. We share it only in the limited circumstances described here:

• Service providers— vendors who process data on our behalf (for example hosting, payment processing and email delivery) under contracts that limit their use of it to providing those services;
• Legal and safety— where we reasonably believe disclosure is required by law or necessary to protect the rights, property or safety of our users or the public;
• Business transfers— in connection with a merger, acquisition or sale of assets, subject to this policy or a successor policy.

We keep personal information for as long as your account is active and for a reasonable period afterwards to meet the purposes described in this policy — including to comply with our legal, tax and accounting obligations, to resolve disputes and to enforce our agreements. When information is no longer needed, we take steps to delete it or to de-identify it.

We use administrative, technical and organisational measures designed to protect personal information against loss, misuse and unauthorised access, including encryption of data in transit and access controls. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

Depending on where you live, you may have some or all of the following rights over your personal information: to access it, to correct it, to delete it, to object to or restrict certain processing, and to receive a copy in a portable format. You may also opt out of non-essential communications at any time.

To exercise any of these rights, please reach out through our contact page. We will respond in line with the applicable law, and we will not discriminate against you for exercising a right.

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the Services are used. You can control non-essential cookies through your browser settings and, where offered, our cookie preferences. See our Cookie Notice for more detail.

We may process and store information in countries other than the one in which you are located. Where we transfer personal information across borders, we take steps intended to ensure it continues to receive an appropriate level of protection, using safeguards recognised by the applicable law.

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps to remove it.

We may update this policy from time to time to reflect changes in our practices, our Services or the law. When we make material changes, we will provide reasonable notice — for example by posting the updated policy here and revising the “last updated” date above. Your continued use of the Services after an update takes effect means you accept the revised policy.

Questions about this policy or how we handle your information? Please reach out through our contact page. For illustrative purposes only, an example privacy contact would take the form privacy@vertexpos.example — the operative contact details are provided in your signed agreement.