Privacy policy

Who we are

1718pos is point-of-sale and back-office software sold to cafés by subscription. Each café that subscribes (“the café”) decides what data it records about its own business, staff and guests; 1718pos stores and processes that data on the café’s behalf so the software can work.

Questions about this policy: support@1718pos.com.

What we collect

• Staff accounts — name, sign-in email, role, a hashed password and, if set, a hashed PIN. Passwords and PINs are stored only as one-way hashes; nobody at 1718pos or at the café can read them.
• Orders and payments — items, prices, times, table, order type, how a bill was paid, and who took the payment.
• Guest details a café chooses to record — a guest’s name, phone number and (for deliveries) address on an order; loyalty and membership members’ name, phone, optional email and student ID.
• Business records — menu, stock counts, shifts, settings and a history of changes made in the back office.
• Sign-in cookies — a session cookie, and a 30-day “remember me” cookie when that box is ticked. They keep you signed in and are not used for anything else.

The camera

The app asks for the camera only to scan the QR code on a loyalty or membership card at the till. The image is read on the phone to find the member code; no photo or video is stored or sent anywhere.

What we do not do

• No advertising, no ad networks, and no tracking across other apps or websites.
• No selling or renting of anyone’s data.
• No analytics SDKs in the iPhone or Android app.

How it is used and shared

Data is used only to run the café’s point of sale and back office: taking and preparing orders, settling bills, reports, loyalty, memberships, stock and staff management. If a café switches on WhatsApp messages, the guest’s phone number and order details are sent through the café’s chosen WhatsApp provider to tell the guest their order was received or is ready. If a café adds a membership or loyalty card to Apple Wallet or Google Wallet, the card details are sent to Apple or Google for that purpose.

Each café’s data is kept in its own database on our servers, separate from every other café’s, over encrypted connections (HTTPS).

Keeping and deleting data

A café’s data is kept while its subscription is active. Nightly backups are kept for 30 days. A café owner can remove staff accounts from Settings › People, and remove loyalty or membership members from those screens.

To have an account or a café’s data deleted, or to ask what is held about you, email support@1718pos.com from the address on the account. Guests should ask the café they ordered from, which controls its own guest records; we will help the café act on the request.

Children

1718pos is a business tool for café staff and is not directed at children.

Changes

If this policy changes, the date at the top changes with it, and anything significant is announced to café owners in the back office.