Privacy policy

Last updated October 23, 2026

This policy explains what personal information FigiPOS collects, why, who it is shared with, and the choices you have. FigiPOS is operated by FIGI POS LLC, a Utah limited liability company, USA, which is the controller of the personal information described here. Questions go to info@figipos.com.

FigiPOS is used by food vendors and event organizers (our customers). When a vendor sells to the public with FigiPOS, the vendor decides what it records about its own sales; we process that information on the vendor's behalf.

Accounts for vendors and organizers

When you create an account we collect your name, email address and, if you give one, your phone number. Passwords are never stored: we keep only a one-way hash. Sign-in and verification links are single-use and short-lived. We protect accounts against repeated sign-in attempts.

When you sign in we record the session: its IP address, browser user agent and when it was last used. Sessions expire automatically. Business details you add — a business profile, contact details, permits and insurance details, logo and photos, an event application — are stored so the product can use them. Profile images you choose to publish are public.

Tablets and cashiers

Tablets. When a vendor pairs a tablet we store the name they give it, its role, its selling location, its model, operating system and app version, when it was last seen, and the health of its offline queue. The tablet's credential is stored on our servers only as a one-way hash, and on the tablet in the device's secure storage. Pairing codes are single-use and short-lived. The tablet apps do not create accounts.

Cashiers. A vendor adds the people who work its register by display name and role. Each cashier signs in with a PIN. PINs are never stored: we keep only a one-way hash. Cashier sessions are tied to one tablet and expire automatically. Cashiers are managed by their vendor, not by us.

Orders and sales

For each sale we store what was sold, the amounts (prices, discounts, tax, tips), how it was paid, any refund or void and its reason, and which tablet and cashier recorded it. Orders do not hold the customer's name, email or phone. Cashiers can add a short note to a refund or a void; notes are kept separately from the sale record so they can be deleted on their own.

Receipts sent to customers

A customer at the register can ask for a receipt by email. We only send it when the customer has agreed at checkout, and we use the address only to send that receipt — never for marketing. The address is erased from our records within 30 days. Receipts can also be read by scanning the QR code on the register, which needs no contact details at all.

Payments

Card payments are processed by Stripe, on Stripe Terminal card readers. We never receive or store card numbers or other raw card data; we keep only Stripe's reference numbers for each payment and refund. Vendors set up their payment account directly with Stripe, which collects the business and identity details it needs. Stripe's own use of that information is covered by Stripe's privacy policy.

Email from organizers

Organizers can message the vendors taking part in their events through FigiPOS. We send those messages by email to the vendor's contact address.

Service providers

• A cloud hosting provider hosts our servers and stored data. Data is encrypted in transit and at rest, and access to it is restricted.
• Stripe processes card payments and vendor payment accounts.
• An error-monitoring service receives reports of errors in our software. We remove personal information from error reports before they leave our systems.
• An email delivery provider sends sign-in links, receipts and organizer messages.
• Mapping and address-lookup services suggest addresses as organizers type them, place addresses on a map, and draw the public vendor map.
• An AI content service, used only when an organizer chooses the promotion tool, drafts event promotion copy and images. It receives event details only — never customer, cashier or sales information.

We do not sell personal information, and we do not use advertising or analytics trackers.

Cookies

The web portal uses only the cookies it needs: one that keeps you signed in and a security token (both up to 30 days), and one that remembers your language (one year). This site sets none.

How long we keep information

• Receipt email addresses: erased within 30 days.
• Sales, payment, refund and tax records: kept for 7 years, because vendors and we must be able to account for every sale and payment by law.
• A record of important account actions is kept for security.
• Account, tablet and cashier details are kept while the account is open; on request we delete or anonymize what the law does not require us to keep.
• Backups are kept for a limited period of up to 7 days.

Your rights

You can ask us to access, correct or delete your personal information, or to give you a copy of it. Vendors can download their own sales records from the portal at any time. To make a request, email info@figipos.com from your account's email address; we may need to confirm your identity. To close an account, see account deletion. If you bought from a vendor, contact the vendor about their records.

Children

FigiPOS is a business tool and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

When we change this policy we update the date at the top of this page. Significant changes will also be announced to account holders.

Contact

FIGI POS LLC · info@figipos.com