Privacy Policy

This policy applies to store owners, managers, cashiers, and other staff who sign up for or are invited to a MaxPOS account (collectively, "Users", "you"), and, where relevant, to the customer and supplier records that Users store inside the Service on behalf of their business. If you are a customer of a business that uses MaxPOS, your data is controlled by that business, and this policy describes how MaxPOS processes it on their behalf.

Information you provide directly

• Account details: full name, email address, phone number, and password.
• Business details: store name, business type, address, and store settings.
• Records you create in the Service: products and inventory, sales and receipts, customer and supplier contact details, purchase orders, expenses, and support tickets.
• Payment and billing details when you subscribe to a paid plan.

Information collected automatically

• Log data such as IP address, device and browser type, and pages visited.
• Usage data such as feature interactions, timestamps, and session activity, used to keep the Service reliable and to improve it.
• Cookies and similar technologies used to keep you signed in and to remember preferences.

Information from third parties

• If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Our payment processor (Paystack) shares transaction status and limited billing metadata with us; MaxPOS does not store your full card details.

• To create and maintain your account and store workspace.
• To operate core features: sales, inventory, customers, suppliers, purchases, expenses, and reporting.
• To send transactional messages, such as receipts, low-stock alerts, and account notifications, by email and SMS.
• To process subscription payments and manage billing.
• To provide customer support and respond to support tickets.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To maintain, improve, and develop new features for the Service.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers. We use trusted third parties to run the Service, including Supabase (database and authentication), Paystack (payment processing), Resend (transactional email), and Hubtel (SMS delivery). These providers process data on our behalf and are bound by confidentiality and data protection obligations.
• Within your business. Data you enter is visible to other members of your store account according to their assigned role (for example, owner, manager, or cashier).
• Legal and safety reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of MaxPOS, our users, or others.
• Business transfers. If MaxPOS is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We retain account and business data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data as described in Section 8, subject to records we are required to keep by law.

We use industry-standard safeguards to protect your information, including encryption in transit, access controls, and role-based permissions within the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately using the details in Section 11.

Our service providers may store and process information in countries other than your own. Where this happens, we take reasonable steps to ensure your information continues to receive an appropriate level of protection.

Depending on your location and applicable law (including Ghana's Data Protection Act, 2012), you may have the right to:

• Access, correct, or update your personal information.
• Request a copy or export of your data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before fulfilling a request.

MaxPOS is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice in the Service before the change takes effect. Continued use of the Service after a change becomes effective constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at info@maxnagi.com.