Your data, handled with care.

Information we collect

We collect information you provide, such as your email address when you create a Poswaya account, subscribe to updates, or contact us. When you create a business or store, we also collect details such as business and store names, country, currency, city, and state.

When you use Poswaya, we process the operational information you enter, including products, prices, inventory, sales, customers, credit records, and related store activity. Information may be shared at business level or limited to a store according to the account's role and access.

For email sign-in and multi-store security, we process your account email, email-verification status, installation identifier, device platform and trust status, business membership and role, store assignments, sessions, verification attempts, and security audit events. One-time verification codes are not stored in plain text in our application database.

We may also receive basic technical information, including browser or device information, request and error details, pages visited, and timestamps.

How we use information

• Provide, maintain, synchronize, and improve Poswaya and this website.
• Create and verify accounts, register trusted devices, maintain sessions, and protect account access.
• Connect accounts to their businesses and stores and apply role-based permissions.
• Send one-time verification codes and other transactional account or security messages.
• Send product updates or respond to messages you send us.
• Protect the service, prevent misuse, maintain security audit records, and troubleshoot technical issues.
• Understand general usage patterns so we can make the product faster and more useful.

Website analytics

On public website pages, we use Google Analytics 4 to measure visits, page views, and referral channels. The Google Analytics tag may use cookies and similar technologies and send usage and technical information to Google. The private monitoring pages are excluded from page-view reporting.

Google processes analytics information under its own terms and privacy policy. The private monitoring dashboard retrieves aggregate reports from Google on demand; this website does not store those report results.

Email verification and account security

We send a six-digit, time-limited code when you register or sign in on a device and when you confirm certain sensitive multi-store actions. Verification records may include the purpose, status, expiry time, number of attempts, and protected representations of the destination and code. Our email provider receives the destination address and message content to deliver the code.

After verification, Poswaya creates a session associated with your account, business, and trusted installation. Device and store assignments help determine which business and store data that installation can access and allow access to be revoked.

Information stored on your device

To support offline use, the app may store store details, products, inventory, carts, transactions, pending synchronization work, and historical records on your device. It also stores an installation identifier and may keep a protected session token and the last trusted account and store context using the device's secure storage facilities.

Previously initialized stores may remain available offline. Offline changes stay associated with their original store and may be sent to our systems when connectivity returns.

Sharing and service providers

We do not sell your personal information. We may share information with providers that help us host the service and database, deliver email, monitor reliability, or provide support, and only as needed for those services. We may also disclose information when required by law or necessary to protect our rights, users, business data, or the service.

Within a Poswaya business, information is available to owners and other authorized users according to their roles and store access. The business is responsible for deciding who it authorizes and for its handling of customer, staff, and transaction information.

Data retention and security

We keep information while an account or business uses Poswaya and as needed for the purposes described here. Some records may be retained longer for security, fraud prevention, backups, dispute resolution, or legal obligations.

We use reasonable technical and organizational safeguards. Verification codes and session tokens are stored by our application in protected forms, codes expire and have attempt limits, and access is checked against account, business, role, device, and store records. No online service, email system, or device can be guaranteed completely secure.

Your choices

You can unsubscribe from optional marketing emails using the link in the message. Transactional messages, such as requested verification codes and important account or security notices, are necessary to provide and protect the service.

You can contact us to request access to, correction of, or deletion of personal information we hold about you. We may need to verify a request and may retain information where law or legitimate security and recordkeeping needs permit. Depending on where you live, you may have additional privacy rights.

Children and changes

Poswaya is intended for businesses and is not directed to children. We may update this policy as the service changes. The updated date above shows when the latest version took effect.