Privacy Policy

Last updated: 4 November 2026

This policy explains how JPOS ("we", "us") handles personal information in the JPOS app and at jpos.app. We are based in Sydney, New South Wales, Australia, and we follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Account details: your name and email address. You sign in with a one-time 6 digit code or a one-time link we email to you, so most accounts have no password. Our review accounts use a password.
• Business data you enter: shop name and profile, products, prices, costs, stock and expiry dates, sales, expenses, income, offers, and photos you add (for example a product photo or a shop front photo).
• Team and payroll data you enter: staff names, roles, pay rates, hours, pay runs and payslips. If you choose to enter a tax file number, bank details or similar, it is stored only for your business and is visible only to people your owner allows.
• Shared product catalog: when you add a product, its barcode, name and photo may be added to a catalog shared with other JPOS shops. Your prices, costs and stock are never shared.
• Product information from open data: the shared catalog also holds product names, barcodes, sizes and pictures taken from Open Food Facts, a community database made available under the Open Database Licence and Creative Commons Attribution-ShareAlike licence. We thank its contributors. We do not collect any personal information from that data.
• Receipts: when a shop sends a customer a receipt by email, we use that email address once to send it and do not keep it. A receipt page can be opened only with its long private link.
• Contact messages: what you send through our contact form, and a one-way scrambled form of your network address to limit spam.
• Technical logs: basic security and error logs needed to run the service.

We do not collect your location. We do not use advertising or tracking cookies, and we do not sell personal information.

Camera and photos

The app asks for camera access to scan barcodes and take product or shop photos, and photo library access if you choose a picture. You can turn these off in your phone settings at any time.

How we use it

To run the app for your business, keep it secure, support you, send service messages (such as sign in codes and invites), meet legal duties, and improve the service. We do not use your business data for advertising.

Who can see your data

Only the people in your business, according to their role (owner, partner, manager, staff, accountant). Owners can remove access at any time. Our platform administrator can switch a business off if required, and may access data only to provide support or keep the service safe.

Service providers

We use trusted providers to run JPOS: Supabase (database, login and file storage), Amazon Web Services (sending email), and Cloudflare (this website). They process data for us under their own security and privacy terms. Data may be stored or processed outside Australia. We take reasonable steps to make sure overseas providers protect your information.

Security

Data is encrypted in transit. Each business is separated from others by database access rules. Invite codes are single use, expire, and are stored only as a scrambled hash. Sign in codes and links expire after 10 minutes and work once. No system is perfectly secure, so please keep your email account secure.

Keeping and deleting data

We keep data while your account is active. You can delete your account at any time (see Delete your account). Some records, such as payroll and tax records, may need to be kept by your business for the period required by Australian law, so please export what you need first.

Your rights

You can ask to see, correct or delete personal information we hold about you. Contact us and we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

JPOS is a business tool and is not directed to children under 16.

Changes

If we change this policy we will update the date above and, for big changes, tell you in the app or by email.

Contact

Privacy questions: use the contact form and choose the Privacy topic.