Security and your data
Your bills, stock and customers live on your own computer. This page says what stays there, what can leave it, what we keep online, and how it is protected.
What stays on your computer
- Every bill and every stock entry is saved on your computer first.
- The POS database is encrypted on your device.
- Your customer records (name, phone, address, loyalty points, udhaar balance and bill history) are saved only on your device. We do not sync your customer database to the cloud.
- Automatic backups, and one-click backup and restore.
When customer details leave your computer
- E-bills: the contact is used only to send the message, through your own provider. We keep only a one-way code (a hash) of it, as a log of what was sent.
- The receipt your customer opens: it shows what is printed on the bill, which can include their name and phone number if you added them. The link works for 48 hours, then the PDF is deleted. Receipt pages are kept out of search engines.
Cloud Reporting (optional)
- It is an optional module. If your plan does not include it, none of your business data is sent to our servers, and your POS stays fully offline.
- If your plan includes it, the POS sends a summary for each business day, updated through the day: sales totals, tax and payment splits, top items and categories, hourly sales, stock levels, and shift and cash logs.
- Each time it is switched on (when you first buy it, or when it comes back after it lapsed), the POS also sends your earlier days once, as far back as we keep reports.
- With Advanced Reports, the summary also has staff names with their orders and sales, voided items and discounts with the reason, and cost of goods, expenses and profit.
- With Tips, it also has tips for each staff member.
- Restaurant POS: the summary never includes individual customer bills, customer names or contact details.
- Store POS: the summary also covers returns, discounts, tax, expenses and udhaar, as totals and by age. The customers who owe you are not listed.
- Customer names and phone numbers are never part of a cloud report.
- Each report is signed by your POS with its own key, so we can tell it came from your device.
- If the internet is down, reports wait on your computer and are sent when it is back.
- We keep reports for 395 days. Older ones are deleted automatically, and so are all of a shop's reports 7 days after its plan ends.
- If you cancel or downgrade out of Cloud Reporting, sending stops at once and nothing more is sent.
What we keep online
- Your name, shop name, email and phone number
- Billing details, if you add them: GSTIN, address and state
- The keys you give us for sending SMS, WhatsApp or email, stored encrypted
- Your recovery phrase, stored encrypted. Only you can unlock it, with your account password.
How we protect it
- Your password is stored in a form that cannot be reversed, even by us.
- Your notification keys are stored encrypted on our servers.
- Your recovery phrase is encrypted, and only you can unlock it.
- We watch for suspicious activity, such as a device pretending to belong to another shop, or requests that try to tamper with license data.
No system is 100% secure. We watch for threats and respond to them.
If your plan ends
There is a short grace period. If it ends without renewal, the POS stops creating new bills until you renew. Your data stays on your computer.
Your part
The details of your own customers are your responsibility, the same as if you kept them in a notebook. If a customer asks what you hold on them, or asks you to delete it, that request is yours to handle. RestroPod gives you the tools to store and manage it.
Questions
Where is my data stored?
On your own computer, in an encrypted database. Billing works offline.
Can RestroPod see my customers?
Your customer database stays on your device and is not synced. Cloud Reporting never includes customer names or phone numbers. Only two things touch customer details: the contact for an e-bill (we keep only a one-way code), and the receipt your customer opens.
Is Cloud Reporting required?
No. It is an optional module. Without it, none of your business data is sent to our servers.
What does Cloud Reporting send?
A summary for each business day of sales, tax, payments, top items, stock and shift logs. It never includes individual customer bills. The list above has the details.
What happens to my data if my plan ends?
Your data stays on your computer. After the grace period, the POS stops creating new bills until you renew.
Is my password safe?
Your password is stored in a form that cannot be reversed, even by us.
Who do I contact about a privacy concern?
Our Grievance Officer. The Grievance Officer page has the details.