Privacy Policy
Last updated: 15 October 2026
This policy explains what Serva POS (“we”) collects, why, and what you can do about it.
What we collect
- Account: your email, business name, country, currency, language and time zone.
- Devices: a random device ID, device name and when it was last online.
- Business data you enter in the cashier: menu, prices, stock, staff names and PINs, orders, shifts and expenses. It is stored on your devices and synced to our cloud so that your devices share it.
- Payments: amount, plan and payment reference. Card and e-wallet details are handled by our payment provider and never reach us.
- Support: messages and screenshots you send us.
- Security: a one-way hash of your IP address, used only to limit abuse (for example repeated sign-in attempts).
Why we use it
To run your account and subscription, sync your devices, process payments, answer support requests and protect the service from abuse. We do not sell personal data and do not use it for advertising.
Who processes it for us
- Cloudflare — hosting and database.
- Resend — sending sign-in codes and support emails.
- Xendit — payment processing.
These providers may store data outside your country; they process it only on our behalf.
How long we keep it
Account and business data — while your account exists. Product photos in the cloud — up to 120 days after they were last changed. Payment records — as long as tax law requires. Support messages — up to 2 years.
Your rights
You can see and change your account details in “My account”, export your business data from the app, and ask us to correct, export or delete your data by writing to support@servapos.app. We reply within 14 days.
Changes
If we change this policy in an important way, we announce it on the website or by email.