Privacy Policy

1. Introduction

AlfaPOS, the mobile point-of-sale solution ("Service"), is provided by 55th Street Ventures ("we," "us," or "our"). This Privacy Policy clarifies our practices regarding the handling, storage, and protection of your data when you use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (name, email address, business details)
• Sign-in credentials (depending on your chosen authentication method)
• Stripe account connection details
• Transaction data processed through the Service
• Customer support communications
• Marketing preferences and consent for promotional communications

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Device information (model, operating system, unique identifiers)
• Usage data (features used, time spent, interaction patterns)
• Log data (IP address, access times, error logs)

2.3 Analytics and Service Providers

We use third-party services to operate and improve our Service:

• Mixpanel: Collects usage analytics to help us understand how you use the Service
• Firebase (Google): Provides authentication and crash reporting services

These services collect information such as device identifiers, operating system details, app performance data, and usage patterns. Their use of your information is governed by Google's Privacy Policy, available at policies.google.com/privacy, and Mixpanel's Privacy Policy at mixpanel.com/legal/privacy-policy.

2.4 Legal Basis for Processing (EU/UK)

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service
• Legitimate Interest: Analytics, fraud prevention, and service improvement
• Consent: Where you have given explicit consent
• Legal Obligation: Compliance with applicable laws

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Respond to your comments, questions, and customer support requests
• Send you technical notices and security alerts
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations
• Send you marketing communications about our products and services (with your consent where required by law)

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• With Stripe: Transaction data is shared with Stripe for payment processing and managing your connected account
• With Google Firebase: Authentication data and crash reports are processed by Firebase to enable sign-in functionality and improve app stability
• With Mixpanel: Usage and analytics data is shared with Mixpanel to help us improve the Service
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests

We do not sell your personal information to third parties.

For EU/UK users: Our third-party service providers process your data under GDPR-compliant terms with appropriate safeguards in place.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Specific retention periods:

• Account and transaction data: Retained for legal, tax, and financial compliance requirements
• Analytics and diagnostic data: Retained for service improvement purposes
• Marketing preferences: Retained until you withdraw consent

You may request deletion of your data as described in Section 7, subject to our legal obligations to retain certain information.

7. Your Rights and Choices

7.1 General Rights

You have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information
• Object to or restrict certain processing of your information
• Withdraw consent where processing is based on consent
• Request data portability (receive your data in a structured, machine-readable format)

7.2 Additional Rights for EU/UK Users

If you are located in the European Union or United Kingdom, you also have:

• The right to object to processing based on legitimate interests
• The right to lodge a complaint with your local data protection authority

7.3 Exercising Your Rights

To exercise these rights, please contact us at legal@alfapos.ca. We will respond to your request within 30 days (or as required by applicable law). We may request additional information to verify your identity before processing your request.

7.4 Marketing Communications

We may send you marketing emails about AlfaPOS features, updates, and offers. For EU/UK users: We will only send you marketing communications if you have given us explicit consent. You can withdraw this consent at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at legal@alfapos.ca

For all other users: You can opt out of marketing communications at any time using the methods above. Service-related emails (transaction confirmations, security alerts, account notifications) are not considered marketing and cannot be opted out of while you use the Service.

8. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us at legal@alfapos.ca.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Canada and countries where our service providers operate.

For EU/UK users: When we transfer your personal data outside the European Economic Area or United Kingdom, we ensure appropriate safeguards are in place as required by GDPR and UK GDPR.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Data Protection Contact

For questions related to data protection and privacy, you may contact us at:

Email: legal@alfapos.ca

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at legal@alfapos.ca.