Your data, in plain words

This policy covers the AUREUM website, the AUREUM Back Office app and the AUREUM POS app (together, “AUREUM”). AUREUM is a point of sale and inventory service for businesses. The business that signs up (“the owner”) decides what is recorded about its own customers and staff.

What we collect

• Account details: the owner’s name, email address, country, business name and password. Passwords are handled by our sign-in provider and are never visible to us in plain text.
• Business records you enter: shops, products, prices, costs, stock, suppliers, purchase orders, customers (for example name, phone, email), employees (name, role, PIN), shifts, sales, receipts, refunds, expenses and settings. Product and logo images you upload are stored too.
• Support messages you send to us through Help & support.
• Subscription status: whether a trial or subscription is active, its dates and the number of shops. Card payments are taken on Stripe’s own page. We never see or store your card number.
• Technical data needed to run the service, such as sign-in sessions and error information held by our hosting and database providers.

AUREUM does not show advertising, does not sell personal information, and does not include advertising trackers. The public website uses Vercel Web Analytics for anonymous visit counts; it sets no cookies and builds no profile of you. The apps do not use it.

Why we use it

To provide the service you asked for (selling, stock control, reports, staff, receipts), to keep your business data safe and synchronised across your devices, to manage your trial or subscription, to answer support requests and to prevent misuse.

Device permissions in the apps

• Camera (POS): only to scan product barcodes, and only when you tap Scan. Images are not saved or sent.
• Bluetooth / nearby devices (POS): only to connect to a receipt printer or cash drawer you choose.
• Photos / files: only when you choose a product or logo image, or save or share a report or receipt.
• Internet access: the apps need it to sign in and synchronise.

Who processes the data

AUREUM uses these service providers to run the service: Supabase (database, sign-in and file storage), Vercel (hosting of the app and website) and Stripe (card subscription payments, on the web). They process data on our behalf. We share data with others only if the law requires it.

Security

Data is sent over HTTPS. Access to each business’s records is restricted to that business’s signed-in users, and staff permissions limit what each person can do. No system is perfectly secure, but we take care to protect your information.

How long we keep it

We keep business records while the account is active so that your sales history and accounts stay complete. If you delete your account, your data is deleted as described on the Delete your account page. Some records may be kept for a limited time where the law requires it or for security and backups.

Your choices and rights

You can view and correct your business information in the Back Office, export reports, and ask us to delete your account and data at any time. Customers or staff of a business should ask that business first, because the business controls those records. Depending on where you live, you may have further rights, such as access or objection; ask us and we will help.

Children

AUREUM is a business tool and is not directed at children.

Changes

If we change this policy we will update the date above, and tell account owners inside the app when the change is important.

Contact

Email info@aureumpos.com, or send a ticket from Help & support inside the Back Office.