Privacy Policy

This policy explains what personal information Pynux handles and how. Pynux (replace with registered company name) (“Pynux”, “we”) runs the service.

Two kinds of information

1. About you, our customer

When a business signs up we collect the owner's name, email, phone or WhatsApp number, business name, country and outlet details, and payment records for subscriptions (including the transfer slips you upload). We use this to run your account, bill you, send service messages (such as trial and payment reminders) and give support.

2. Data you keep in Pynux

Your shop records can include personal information about your customers and staff, for example names, mobile numbers used for loyalty, delivery addresses, tax numbers and purchase history. For this data, your business is in control (the data controller or data user) and Pynux processes it on your instructions only. We do not sell it, use it for advertising or contact your customers.

Where data is stored

• Each till keeps a working copy on the device so it can sell offline.
• Our servers are run by Supabase on Amazon Web Services in the Asia Pacific (Mumbai) region. The website is served by Vercel.
• Data is encrypted in transit (HTTPS) and at rest. Each business's data is separated by database security rules so one business can't read another's.

Who else processes data

• Hosting: Supabase (database, sign-in, file storage) and Vercel (website).
• Email: our email delivery provider, for account and service emails.
• Optional features you switch on: your bank's payment gateway (such as BML Connect), Telegram or your webhook for alerts, and an AI provider (Anthropic) for the AI action plan in Insights. The AI feature sends summarised sales figures by product, not customer names or phone numbers.

How long we keep it

While your account is open. After closure we delete business data within 90 days, except billing records we must keep by law. Backups roll off within 30 days after that.

Your choices and rights

• Owners can view, correct and export their business data at any time (Settings → Data & backup).
• If one of your customers asks to see, correct or delete their information, you can do it in Customers, or ask us to help.
• You can ask us for a copy of the personal information we hold about you, or to correct or delete it, by emailing support@pynuxapp.com.
• Businesses in Malaysia: we handle personal data in line with the Personal Data Protection Act 2010 as your data processor. Businesses in the Maldives: we follow the privacy and data protection requirements that apply there.

Security

Staff PINs are stored only as salted hashes. Tills use their own limited sign-in, separate from the owner's account. Payment-gateway keys and alert tokens are kept on the server and never sent back to tills. Access by Pynux staff is limited to what is needed for support and is logged.

Cookies

Pynux uses browser storage to keep you signed in and to run tills offline. We don't use advertising or tracking cookies.

Changes and contact

We'll post changes here and tell account owners about important ones. Questions: support@pynuxapp.com, Pynux (replace with registered company name), Malé, Maldives.