Privacy Policy

Last updated: 29 September 2026

This policy explains what data LeonPOS collects, how it's used, and how it's protected. It covers two kinds of people: the businesses that run on LeonPOS ("you", if you're a business owner or staff member with a login), and the end customers of those businesses, whose data a business may store in LeonPOS to run their own operations.

1. Who controls what

If you run a business on LeonPOS, you are the data controller for the information you store about your own customers, employees, and sales — names, phone numbers, purchase history, and so on. LeonPOS acts as the processor: we store and process that data on your behalf, under your instructions, and we don't use it for our own purposes.

2. What we collect

Account information: your name, email address, and business details when you sign up.
Business data you enter: products, sales, customers, suppliers, expenses, and staff you add.
Usage data: basic technical logs (like sign-in times and error reports) used to keep the service running and to fix problems.
Payment information for your LeonPOS subscription, handled by our payment processor — we don't store your card details ourselves.

3. How we use it

To provide the service — running your POS, generating your reports, printing your bills.
To communicate with you about your account, billing, or support requests.
To improve LeonPOS — understanding which features are used, and fixing bugs.
We do not sell your data, or your customers' data, to anyone.

4. How it's protected

Every business's data is isolated at the database level (row-level security), not just hidden in the app — one business cannot query another's data even in principle.
All connections to LeonPOS are encrypted (HTTPS).
Data is hosted on managed cloud infrastructure (Supabase), which handles backups and database security at the infrastructure level.
Access within our own team is limited to what's needed to provide support or maintain the service.

5. Data retention & deletion

Your business data is retained for as long as your account is active. If you close your account, you can request deletion of your data, subject to any records we're required to keep for legal or accounting reasons. You can also export your own data at any time.

6. Your rights

Depending on where you're located, you may have rights to access, correct, or delete personal data we hold about you. To exercise any of these rights, or if you have questions about this policy, contact us using the details on our Contact page.

7. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page.