Introduction

Tillora Technologies ("we", "us", or "our") operates Tillora POS. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our billing and point-of-sale software and services.

Information We Collect

We collect information that you provide directly to us and information generated through your use of Tillora POS:

• Account information — name, email address, phone number, and business details provided during registration.
• Business data — inventory records, sales transactions, customer information, and vendor details that you enter into the system.
• Payment information — billing details for your Tillora POS subscription (processed securely by our payment partners).
• Usage data — how you interact with the software, feature usage patterns, and performance metrics.
• Device information — browser type, operating system, IP address, and device identifiers.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Tillora POS and its features.
• Process your subscription payments and manage your account.
• Send you technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.

Information Sharing

We do not sell your personal information. We may share data with the following third parties solely to operate and improve our services:

• Supabase — our cloud database and authentication provider, which stores your data securely with encryption at rest and in transit.
• Vercel — our hosting and serverless infrastructure provider for the admin portal and API layer.
• Payment processors — to handle subscription billing securely. We do not store credit card numbers on our servers.

Data Security

We implement industry-standard security measures to protect your data. All data is encrypted in transit (TLS) and at rest. Our infrastructure is built on providers that maintain SOC 2 Type 2 compliance. We conduct regular security reviews and employ role-based access controls to limit data access to authorised personnel.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access and receive a copy of your personal data.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Object to or restrict processing of your data.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@tillora.net.