Privacy Policy

1. Two kinds of data

Account data: information about you and your staff as users of KHPOS. We decide how it is used, as described here.

Shop data: what your shop puts into KHPOS, including your customers' details. Your shop decides what to collect and why; we handle it only to run the service for your shop. Customers of a shop should contact that shop about their data.

2. What we collect

• Account: name, email address, password (stored only as a secure hash) or Google sign-in, language and the shop you belong to.
• Staff on Telegram: when someone links Telegram, their Telegram user ID and chat ID, so the bot can send them tasks and alerts.
• Shop data: products, photos, prices and costs, stock and expiry dates, sales and refunds, orders, notes, reports and settings.
• Customer details your shop enters or receives: for example a name, phone number or delivery address on an order.
• Billing: Paddle processes payments and gives us the subscription status, plan and dates. We never see or store full card details.
• Technical data: IP address, browser and device information, and logs needed to keep the service secure and working.
• Loyverse import: if you connect Loyverse, we use your access token only during the import and do not store it.

3. Why we use it

• to run the service: sign you in, show and save your shop's data, send Telegram messages you set up;
• to bill your subscription through Paddle;
• to keep the service secure, prevent abuse and fix problems;
• to contact you about your account, billing and important changes.

We do not sell personal information, and we do not use your shop's data for advertising.

4. Who else handles it

We share data only with providers that help run the service, and only what they need:

• Cloudflare: hosting, database and file storage;
• Telegram: delivering bot messages and the staff app;
• Paddle: payments, invoices and tax (Paddle is the merchant of record);
• Google: sign-in, if you choose it.

We may also disclose information if the law requires it, or to protect the rights and safety of our users and the service.

5. Where it is stored

Data is stored and processed on Cloudflare's network, which may be outside Cambodia. We rely on our providers' security and data-protection commitments when data moves between countries.

6. How long we keep it

We keep account and shop data while your account is open. Sales and stock records are kept as part of your shop's history. When a shop is deleted, we keep an archived copy for safety and then delete it for good: 6 months after deletion if the shop ever paid for a subscription, 90 days if it only used the free trial. We keep what we must by law (such as billing records). Some technical logs are kept for a short time only.

7. Cookies

The dashboard uses cookies only to keep you signed in, remember a device you signed in on, and complete Google sign-in. Shop pages use one cookie to remember the chosen language, and keep the cart in the customer's own browser. The website khpos.app sets no cookies. We do not use advertising or tracking cookies.

8. Your choices and rights

You can see and change most of your information in the dashboard. You can ask us to access, correct, export or delete your personal information at support@khpos.app. If you are a customer of a shop that uses KHPOS, please contact that shop first; we will help them with your request.

9. Security

We protect data with encryption in transit, hashed passwords, per-shop separation and role-based access. No system is perfectly secure; tell us right away if you think your account has been misused.

10. Children

KHPOS is for businesses and is not meant for children. We do not knowingly collect information from children.

11. Changes

We may update this policy. We will post the new version here with a new date and tell you about important changes.

12. Contact

Privacy questions or requests: support@khpos.app.