Last updated: [date]
This policy explains how Sifer Solutions Inc. ("SiferPOS", "we") collects, uses and protects personal information.
1. Two roles
- Our own customers (store owners and their staff): for account, billing and support information, we are responsible for that information.
- Your customers' data in your store: when a store puts its own customers' or employees' information into SiferPOS (for example customer profiles, house accounts, emails for receipts), the store is responsible for it. We process it on the store's behalf, only to provide the Service. Questions about that information should go to the store first.
2. What we collect
From you at sign-up and while you use SiferPOS: - Business name, your name, email, phone, store address (yourstore.siferpos.com) and your chosen plan. - Login details. Passwords are stored only in hashed (scrambled) form. - Billing information. Card details are entered on Stripe's page and held by Stripe. We only receive things like card brand, last four digits, expiry and payment status. - Support messages you send us.
Automatically: - Technical data such as IP address, device and browser type, app version, error logs and access times, used to keep the Service secure and working. - Bot-protection signals on the sign-up page (Cloudflare Turnstile) [once added]. - [If the marketing site uses analytics or cookies, list them here. Currently: essential cookies only for sign-in.]
Data you put into your store (processed for you): products, sales, payments, staff accounts, and your customers' details you choose to record.
3. How we use it
- To create and run your store, and provide the desktop and mobile apps.
- To bill you, including trials, renewals and failed-payment notices.
- To send service emails: welcome, trial reminders, billing, security notices, and reminders before data deletion. These are required for the service and can't be turned off while you have an account.
- To give support, and to keep the Service secure (detect fraud and abuse, investigate errors).
- To improve the Service using aggregated or de-identified information.
- Marketing emails about new features only with your consent; you can unsubscribe anytime [confirm whether we'll send these; CASL applies].
We do not sell personal information.
4. Who we share it with (service providers)
We use trusted providers who process data for us under contract:
| Provider | Purpose | Where data may be stored |
|---|---|---|
| Render | Hosting the application, database and backups | United States [confirm region] |
| Cloudflare | DNS, security, and file storage (R2) for images and app updates | Global network / [R2 region] |
| Stripe | Subscription billing and card details | Canada / United States |
| [Email provider] | Sending service emails | [ ] |
| Paymentree (only for stores that enable integrated card terminals) | Card terminal processing under the store's own agreement | Canada [confirm] |
We may also share information if the law requires it, to protect rights and safety, or as part of a sale or merger of our business (with the information still protected by this policy).
5. Storage outside Canada
Some of our providers store or process information outside Canada, mainly in the United States. While there, it can be accessed by courts, law enforcement and national security authorities of that country under its laws. [Lawyer: confirm Alberta PIPA s.13.1 notice requirements are met by this wording.]
6. How long we keep it
- While your account is active, we keep your information to provide the Service.
- After cancellation or a non-payment pause, we keep your store data for 60 days, so you can export it or reactivate. We remind you by email about every 2 weeks, with a final notice 3 days before deletion. Then we permanently delete your store and its data. Backups are overwritten in the normal backup cycle [within N days].
- We keep billing and invoice records as long as tax law requires [typically 6 years in Canada; confirm].
- Server logs are kept for a short time [about 7–30 days].
7. Security
We protect information with encrypted connections (HTTPS), hashed passwords, separate data sections for each store, access controls, staff PINs and audit logs, and regular backups. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as the law requires.
8. Your rights
You can ask to access or correct your personal information, or withdraw consent (which may mean we can no longer provide the Service). Store owners can export their store data from within SiferPOS. If you are a store's customer, please contact that store; we'll help the store respond. We reply within 30 days.
9. Children
SiferPOS is a business service and is not meant for children.
10. Changes
We'll post updates here and email account owners about material changes.
11. Contact
Privacy questions: info@siferpos.com · [Mailing address]. Our privacy contact is [name/title]. If you're not satisfied, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.