Privacy policy

• Optional connections you switch on yourself: the e-receipt feature sends receipts to the Egyptian Tax Authority; the daily summary sends a message to a Telegram bot or an e-mail address you configure; the WhatsApp button opens WhatsApp with the receipt text. Each goes to the party you chose, never to us.
• The new-version check (on by default, managers only, once a day) requests one small file from posmasr.com. That request carries the program version and your IP address like any web request; we keep only standard server logs and no per-shop record.
• The copy at PosMasr and the shared catalogue (4.0): PosMasr keeps a copy of your products list (names, barcodes, categories, prices and costs) on our server, sent once a day and whenever you press Upload now, so we can hand your list back if the PC dies or is stolen. That same product data — and nothing else — builds a shared product catalogue, so a new shop finds its products ready instead of typing them in one by one. Your sales, customers, suppliers, users, passwords and secret keys are never part of it. The catalogue lists products, not shops: it never says which shop sells what, and it never carries your shop name, phone or address. The catalogue is open to the shops that share their list, because it exists only because shops share theirs: picking from it and the barcode lookup in the product screen are available while A copy at PosMasr is on (products list or full backup), Upload automatically once a day is ticked and Do not use my products in the shared catalogue is not ticked. You can switch the copy off, or keep it but leave the catalogue, at any time in Settings → Backup, and we delete what we hold on request. A shop that stops sharing keeps everything already in its program, including pictures already applied to its products, but can no longer pick from the catalogue or use the barcode lookup. The catalogue's pictures and product details are downloaded into your program once and kept there, and the barcode lookup reads that copy on your own PC. A full backup (settings with every password removed, customers and suppliers, users, the sales of the last 400 days, the logo; never the license file) is off unless you turn it on; it is used only to give it back to you, is delivered only to a till that proves it is yours with its activation key, and the last ten copies per till are kept.

• Outside Egypt — and outside your own country. Your shop's data is stored and processed in the European Union: on Amazon Web Services (AWS) in its Milan, Italy region (eu-south-1). Every connection is encrypted; we take a backup every day and keep the daily backups for 35 days and one backup a month for 12 months. Card payments are handled by Stripe — we never see or keep card numbers.
• Our sub-processors, each only for its task: AWS (EU, Milan: hosting, storage, backups, and the e-mails we send through Amazon SES); Stripe (the card payments of your subscription and licences, under Stripe's own privacy policy); Paymob (your customers' card payments and pay links, only when you connect your own Paymob account, under your agreement with Paymob); Anthropic in the United States, our AI model provider (only when you use an AI feature, as below); and OpenAI, Microsoft Azure and Meta (WhatsApp), only for the voice and WhatsApp features you switch on.
• Why it may leave your country: the legal basis for transferring your data outside your country, and for storing and processing it in these places, is your acceptance of our Terms of service (section 4, "Where your data is stored"): by accepting them you agree to this transfer. Each provider is bound by contract to protect the data and to use it only on our instructions.
• AI, only when you use it: a question in Ask your shop that the app cannot answer from its own list goes, with only the report figures needed to answer it, to Anthropic (the company behind the Claude AI models), and so does the photo of a supplier invoice you ask the app to read. The AI front desk on WhatsApp, for shops that switch it on, sends Anthropic the customer's messages (they reach us through WhatsApp, which is Meta) and what it looks up for them (prices, availability, opening hours, that customer's own orders), to write the reply; voice notes go to OpenAI to be turned into text. Neither uses what we send to train its models. The full privacy policy inside the app lists exactly what is sent and how long it is kept.
• The PosMasr Till app for Android (Google Play and our website) opens the same online account, so everything above applies to it. On the device it keeps the till's pairing and, while the internet is down, the sales not sent yet, encrypted, until they reach us. When you pair a device it sends us its model and Android version, the app's version and a one-way code made from the device's Android ID (never the ID itself), so you can see and remove your tills under Settings → Tills. The barcode scanner reads frames on the device without saving or sending pictures. If you choose a file or take a photo for an upload, the app reads only that selection and sends it when you submit the form. Exports you request are saved on the device or shared through the system chooser. Bluetooth is used only for the printer you choose. The app has no ads, no advertising ID and no analytics or crash-reporting tools. It does not browse other files, contacts or location. To delete your account and data, see Delete your account.
• We access it only to support you when you ask, to keep the service running, or when the law requires. We never sell it, share it with advertisers, or use it for anything but running your account.
• You are the data controller for your customers' data; we are your processor. You can export everything at any time. When a subscription ends or the trial expires, the account is read-only; its data is deleted 90 days later, and the backups expire after that: the daily ones within 35 days, the monthly ones within 12 months. If you ask us to delete the account, we wait 7 days in case you change your mind and then delete it.

• What you send us by WhatsApp, e-mail or the contact form: your name, phone, shop name and message. We use it to reply, issue license keys and support you, and we keep it as long as you are a customer or a lead.
• The machine code you send to get a key identifies a PC, not a person, and we keep it with your license record.
• The contact form is protected by Google reCAPTCHA, which is subject to Google's privacy policy and terms. The site uses Google Analytics to count visits and no advertising trackers; the demo site sets only a session cookie.

Ask us at any time what we hold about you, to correct it, or to delete it (we keep what the law obliges us to keep, such as the invoices we issued to you, for five years). Write to legal@bytesglue.com or WhatsApp +1 650 442 5630. If you think we handled your data wrongly, you may also complain to the data-protection authority of your country. PosMasr is provided by BYTES GLUE SOFTWARE SERVICES AND SOLUTIONS — FZCO (trade licence 44334), DSO-THUB-G-D-FLEX-G033D, Dubai Silicon Oasis, Dubai, United Arab Emirates; this policy is governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai.

See also: Terms of service · Refund policy · Delete your account