Privacy Policy

Grupo HAI S.A., Calle 50, Edificio Global Bank, Oficina 1213, Panamá. Contact: support@poscompleto.com.

Account data — information about you as our customer: name, email, business name, country and subscription status. We are responsible for this, as the data controller.

Business data — everything you upload to the Service: products, sales, inventory, customers, employees and their payments. You are responsible for this; we process it on your behalf and only to provide the Service.

Your customers' and employees' data belongs to you, not us.

From you: name, email, business name, country and the stores you create.

From your use of the Service: login times, IP address, browser and device identifiers, and an audit log of important actions. We use it for security and to diagnose problems — for example, to detect a device registering from an unexpected location.

Card details: we never see or store them. Payment takes place entirely on Lemon Squeezy's pages. We receive only the subscription status and the last four digits.

Your customers' money does not pass through us either. The payments you collect in your store are made directly through your own bank terminal or in cash. The Service only records the transaction; we do not process, hold or transfer those funds.

To provide the Service, keep it secure, bill you, answer your inquiries and notify you of things that affect your account — a failed payment, a price change, a security matter. The legal basis is performance of the contract with you, our legitimate interest in keeping the Service secure and compliance with legal and tax obligations.

We do not sell your data. We do not share it with advertisers. We do not use your business data to build or train anything for other customers.

Some features use AI to suggest: work schedules, merchandise restocking, product suggestions at checkout, and reports you can query in natural language.

When you use those features, the necessary data is sent to an AI provider to generate the response. We send only what the feature needs.

Your data is not used to train the provider's models.

These features are optional and can be turned off for your organization from the administration dashboard.

• Supabase — hosting and database.
• Lemon Squeezy — our Merchant of Record: product sales, subscription management, payments, tax compliance and billing.
• AI providers — only for the features in section 5, and only when you use them.
• Telegram — only if you choose to link an account to receive approval notifications. It is optional.

We may also share data with professional advisers (legal or accounting) and with authorities when required by law.

On our hosting provider's servers. Data may be processed outside your country , including the United States and the European Union. When data leaves the European Economic Area or the United Kingdom, we use appropriate safeguards, such as standard contractual clauses or adequacy decisions.

While your subscription is active: for as long as you use the Service.

After canceling: your account becomes read-only and your data is retained for 90 days , so you can export it. After the 90 days it is permanently deleted.

You can ask us to delete it sooner by writing to support@poscompleto.com.

Audit and billing records may be retained longer when required by law.

You may ask us for access to your data, to correct, delete or restrict it, object to processing, request its portability and withdraw your consent when it is the legal basis. You may also lodge a complaint with your country's data protection authority. Write to support@poscompleto.com. We respond within one month at most.

You can export most of your business data yourself, whenever you wish, from the administration dashboard.

Access to your data is restricted to your own organization and that restriction is enforced by the database, not just the application. Passwords are stored encrypted. All traffic is encrypted in transit.

No system is perfectly secure. If a breach affects your data, we will tell you promptly and explain what happened.

We use only cookies and local storage that are essential : to keep you logged in, remember the device and store, and for security. We do not use advertising cookies. You can delete them from your browser, but you will then have to log in again.

The Service is for businesses. It is not directed at anyone under 18 and we do not knowingly collect data from minors.

We may update this policy. If a change substantially affects how we process your data, we will notify you by email at least 30 days in advance.