Privacy Policy

Personal Identification Information: Name, email address, phone number, business details, billing address, and other data collected when you register for our Services, create an account, or process a transaction.

Usage and Device Information: Details of how you use our Services, including interaction data, device type, operating system, IP address, browser type, and session durations. On mobile devices, this may include device model and app version.

Financial Information: Payment history for transactions processed through our POS systems and payment processing services. Card payments are handled by our payment processor; we keep only limited card details such as the card brand, the last four digits, and the cardholder name printed on the receipt, never the full card number.

Employee and Business Data: Information about your employees, time entries, shift reports, products, inventory, vendors, and invoices as entered into our POS systems, dashboard, or mobile application.

Invoices and Documents: Vendor invoices you upload or email to us (PDFs and photos) are read by an AI document processing service so that items, quantities, and costs can be matched to your products. The service processes these documents on our behalf to provide this feature.

ID and License Scans: When a cashier scans a customer's driver's license or ID at the register for an age-restricted sale, the scan is used only to check the customer's age for that sale. The register keeps only the result of the check for the current sale. The ID data is not stored, not saved with the transaction, and not sent to our servers.

Crash and Error Reports: When our apps or servers encounter an error, we collect technical details such as the app version, device type, and the error itself so we can diagnose and fix problems. These reports are not used for advertising.

Push Notification Data: If you use our mobile application, we collect a device token to send push notifications about your business activity (such as transaction alerts). You can opt out of push notifications at any time through your device settings.

Cookies and Similar Technologies: Information collected through cookies, web beacons, and other tracking technologies on our web-based dashboard to understand usage patterns and preferences.

Our Services rely on third-party service providers in the following categories, which process data on our behalf only to provide their service to us:

Hosting and authentication: Cloud hosting for our servers and databases, and sign-in and account management. These providers may process device identifiers, IP addresses, and authentication tokens.

Push notifications: Delivery of notifications to our mobile application. These providers may process device tokens and notification interaction data. You can opt out of push notifications through your device settings at any time.

Email delivery: Sending transactional emails such as email verification, password resets, and reports. These providers process your email address for delivery.

Crash reporting: Collecting error and crash details from our apps and servers so we can fix problems.

Payment processing: Authorizing and settling card and other electronic payments taken at the register.

AI document processing: Reading vendor invoices you upload or email to us so they can be matched to your products.

Each provider operates under its own privacy policy and is permitted to use the data only to provide its service to us.

Service Delivery: To provide, maintain, and improve our POS systems, payment processing, dashboard, and mobile application.

Customer Support: To communicate with you, respond to your inquiries, and provide technical support.

Notifications: To send push notifications about business activity, transaction alerts, and important account updates through our mobile application.

Marketing and Communications: To send promotional messages, product updates, and other relevant information. You may opt out at any time.

Research and Development: To analyze trends, usage, and interactions for product development and enhancement.

Legal Compliance: To comply with legal and regulatory obligations.

Service Providers: We engage third-party companies and individuals to facilitate our Services (e.g., payment processing, data analysis, email delivery, push notifications).

Legal Requirements: We may disclose your information if required by law, in response to lawful requests by public authorities, or to protect our rights and property.

Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred.

You have the right to access, correct, update, or request deletion of your personal information. You can also object to the processing of your personal data, request the restriction of processing, or request portability of your personal information.

Account Deletion: You may delete your account at any time from within the Ceyyo Merchant mobile application by navigating to Profile and selecting "Delete Account." Upon deletion, your user account and authentication credentials will be permanently removed. Business data associated with your account (such as transaction history and employee records) may be retained as required for legal, regulatory, or business continuity purposes.

To exercise any of these rights, you may use the in-app features or contact us at support@ceyyo.com.