Privacy Policy

1. Scope

This policy applies to centripos.com, CentriPOS software and mobile experiences, CentriPay tools, customer portals, online carts, receipts, invoices, communications, onboarding, support, and related services that link to this policy (the “Services”). A CentriPOS merchant may provide its own privacy notice for information it collects from its customers; that merchant’s notice also applies to its practices.

2. Information we collect

Information you or a merchant provides

• Business and account details, such as names, company names, roles, usernames, contact information, locations, and support requests.
• Customer, product, order, quote, invoice, receipt, payment-status, fulfillment, delivery, pickup, service, project, and account records entered into the Services.
• Communications and consent records, including calls, messages, email activity, notes, opt-in or opt-out status, timestamps, and related customer-service history.
• Configuration and integration information needed to connect authorized third-party services.

Information collected automatically

• Device, browser, operating system, IP address, timestamps, requested pages, diagnostic logs, security events, feature activity, and similar usage information.
• Cookies or comparable technologies used for authentication, preferences, security, service operation, and measurement. We currently use Google Analytics on the public marketing site.

Payments

Payment card information is submitted to authorized payment processors and gateways. CentriPOS may receive tokens, transaction identifiers, status, amount, card brand, limited card details, settlement information, and related records needed to support the transaction; we do not intentionally store full card numbers or card security codes in the CentriPOS application.

3. How we use information

• Provide, configure, secure, maintain, and support the Services.
• Process and document sales, payments, invoices, recurring payments, returns, customer accounts, fulfillment, projects, and service activity.
• Send requested transactional messages, including receipts, payment links, invoice notices, order, pickup, delivery, service, financing, appointment, and account updates.
• Generate dashboards, reports, business intelligence, CentriAI responses, operational recommendations, and authorized integrations.
• Authenticate users, enforce permissions, prevent fraud and misuse, troubleshoot issues, and maintain audit and compliance records.
• Understand and improve product reliability, usability, onboarding, support, and marketing.
• Comply with law, protect rights and safety, and enforce our agreements.

Where required, we rely on consent, performance of a contract, compliance with law, or legitimate business interests appropriate to the context.

4. How we disclose information

We may disclose information to:

• Service providers that support hosting, infrastructure, analytics, communications, security, customer support, and product operation.
• Payment processors, gateways, merchant acquirers, financing providers, accounting platforms, communications providers, ecommerce, shipping, CRM, and other integrations a merchant chooses to use.
• The CentriPOS merchant that controls the applicable business account, its authorized users, locations, network administrators, and service partners.
• Professional advisers, regulators, law enforcement, courts, or other parties when reasonably necessary to comply with law, protect the Services, or establish or defend legal claims.
• A buyer, successor, or relevant counterparty in a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate safeguards.

We do not sell personal information for money. We do not sell, rent, or share SMS opt-in consent data or originating phone numbers with third parties or affiliates for their independent marketing or promotional purposes. We do not knowingly share personal information for cross-context behavioral advertising.

5. Merchant data and customer requests

For personal information a merchant enters or collects through CentriPOS about its customers, employees, or contacts, the merchant generally determines why and how the information is used, and CentriSoft processes it to provide the Services. Requests concerning those records should usually be directed first to the merchant. We will support merchants with verified requests as required by contract and applicable law.

Merchants are responsible for having a lawful basis to collect and use their data, providing required notices, configuring user access appropriately, and honoring customer choices.

6. SMS and communications

CentriPOS supports transactional messages such as receipts, payment and financing links, invoice and balance notices, order, delivery, pickup, service, appointment, and account updates. Message frequency varies; message and data rates may apply. Recipients can reply STOP to opt out of SMS and HELP for help where supported. Consent to receive SMS is not a condition of purchase.

7. Choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to request access, correction, deletion, portability, restriction, or information about how personal information is used and disclosed, and to appeal a decision. You may also withdraw consent where consent is the applicable basis.

Submit a request to [email protected] or write to the address below. We may need to verify your identity and authority. We will not discriminate against you for exercising applicable privacy rights. Authorized agents may submit requests where permitted by law.

Cookies and browser signals

You can control cookies through browser settings, although essential cookies are required for account and security functions. Because there is not a uniform industry standard for “Do Not Track,” the Services do not currently respond to DNT signals. Where legally required and technically supported, we honor recognized opt-out preference signals such as Global Privacy Control for the browser or device sending the signal.

8. Retention and security

We retain information for as long as reasonably needed to provide the Services, maintain transaction, accounting, tax, consent, audit, security, and legal records, resolve disputes, and enforce agreements. Retention varies by record type, merchant instructions, integration, and legal requirement.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, role-based permissions, secure transport, monitoring, and vendor controls. No system can guarantee absolute security, and users are responsible for protecting credentials and promptly reporting suspected unauthorized access.

9. Children and international use

The Services are designed for businesses and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the public website. If information is processed in another country, it may be subject to that country’s laws; we use appropriate safeguards where required.

10. Changes to this policy

We may update this policy to reflect changes in our Services, practices, or legal requirements. We will post the revised policy with a new effective date and provide additional notice when required.

11. Contact us

Privacy questions and requests: [email protected]