Privacy policy

We take your privacy seriously. This policy explains what information we collect, how we use it, and what rights you have. We've tried to write this in plain English, not legal jargon.

We collect information you give us directly, like when you sign up for an account, contact support, or use our services. This includes:

• Account information (name, email, phone number)
• Restaurant information (business name, address, tax details)
• Payment information (processed securely through payment gateways)
• Usage data (how you use the system, features you access)
• Device information (browser type, IP address, device identifiers)

We use your information to:

• Provide and improve our services
• Process transactions and payments
• Send you important updates about your account
• Respond to your questions and support requests
• Detect and prevent fraud or security issues
• Comply with legal obligations
• Analyze usage to improve our product

We don't sell your data. We don't share it with third parties except as needed to provide our services (like payment processors) or when required by law.

We use industry-standard security measures to protect your data:

• Encryption in transit (TLS) and at rest
• Regular security audits
• Access controls and authentication
• Secure data centers
• PCI DSS compliance for payment data

But honestly? No system is 100% secure. We do our best, but if something happens, we'll let you know immediately and work to fix it.

You have rights regarding your data:

• Access: You can request a copy of your data
• Correction: You can update incorrect information
• Deletion: You can request we delete your data (subject to legal requirements)
• Portability: You can export your data
• Objection: You can object to certain uses of your data
• Withdrawal: You can withdraw consent where applicable

To exercise these rights, contact us at privacy@posverse.com. We'll respond within 30 days.

The public website asks before it stores anything that is not required to run the page. Reject is as available as Accept. You can change the choice later from Cookie settings in the footer. We do not use advertising cookies, and we do not sell personal information.

Necessary, always on:

• posverse_floor: a session cookie that remembers whether you opened the company site or Bistro. The site cannot route those floors without it.
• posverse_consent: stores the choice you make in the banner for 6 months. Recording a refusal is itself necessary so we do not ask again on every page.

Functional, only after you allow it:

• Calendly, when you book a demo. The booking frame is not loaded until you allow functional cookies. Calendly then sets its own cookies under its policy.
• Offer countdown on the Bistro and pricing pages. Until you allow functional cookies, the timer runs for that visit only and is not saved on the device.

Signed-in tills and the back office store account data on the device so the service can run. That storage is part of the product you signed in to, and it is not covered by the public banner.

A browser Global Privacy Control signal is treated as a request not to sell or share personal information. Accept all does not override that signal. You can also use your browser settings to block cookies. Blocking the necessary cookies can stop the company site and Bistro from staying on the right floor.

If you live in California or another US state with a privacy law, you can ask us to:

• Know the personal information we hold about you
• Correct information that is wrong
• Delete information, subject to records we must keep
• Receive a copy of information you gave us
• Opt out of sale or sharing for cross-context advertising
• Not be treated worse for using these rights

We do not sell personal information, and we do not share it for cross-context behavioral advertising. The footer link “Do not sell or share my personal information” still records that opt-out. A Global Privacy Control signal counts as the same request.

You do not need an account to ask. An authorized agent may ask for you if they show they are allowed to. Email privacy@posverse.com. We respond within 30 days.

We work with trusted third parties to provide our services:

• Payment processors (to handle transactions)
• Cloud hosting providers (to store data)
• Calendly (to book a demo, only after you allow functional cookies on the public site)
• Support tools (to help you)

These companies have their own privacy policies. We only share what's necessary for them to do their job.

We keep your data as long as:

• You have an active account
• We need it to provide services
• Required by law or regulations
• Needed for legal claims or disputes

When you delete your account, we'll delete or anonymize your data within 90 days, except where we're required to keep it longer.

Our services are not intended for children under 18. We don't knowingly collect information from children. If you're a parent and think your child gave us information, contact us and we'll delete it.

We might update this policy from time to time. If we make significant changes, we'll notify you by email or through our platform. The "Last Updated" date at the top will tell you when this was last revised.

Your continued use of our services after changes means you accept the updated policy.

Questions about privacy? Concerns? Want to exercise your rights?

Email us at: privacy@posverse.com

Or contact our support team through the help center.

We're here to help and we'll respond as quickly as we can.