PosWavePrivacy policy
Effective 22 October 2026
PosWave is point-of-sale, web shop and booking software for shops. This policy explains what data PosWave handles in its app, in the web shops and booking pages it runs for shops, and on this website, and what you can ask us to do with it.
Who we are
PosWave is operated by [company legal name, commercial registration number and address in Kuwait]. You can reach us at support@pos-wave.app.
Two kinds of data
- Shop data. Shops that use PosWave (our customers) keep their business records in it: products, prices, stock, sales, staff, and details of their own customers such as names, phone numbers, addresses, orders and bookings. The shop decides what it records. We handle this data on the shop's behalf, only to provide the service to that shop.
- Account data. The names, email addresses, phone numbers and sign-in records of shop owners and staff, and anything you send us when you contact us.
What we collect and why
- Sign-in details, to let each person into their shop with the rights their role allows.
- The records you enter, to show them on your devices, sync them between devices, and run your web shop and booking page.
- Technical logs (IP address, device or browser type, time, and the action taken), to keep accounts secure and fix problems. We keep them for up to 30 days.
- When a customer orders or books on a shop's web page, the details they type (name, phone, address, order notes), so the shop can fulfil the order or booking.
We do not sell data, we do not show advertising, and this website does not use advertising or tracking cookies.
The app on your device
- The app keeps a copy of your shop's data on the device so it can keep selling without internet. Protect the device with a screen lock.
- On Android, the app asks for Bluetooth permission only to connect to receipt printers. On Android 11 and older, Android also requires location permission for Bluetooth scanning; the app does not record your location.
- A shop owner can sign out every other device and erase its copy of the shop's data at any time.
Who we share data with
Only with the services we need to run PosWave, and only for that purpose:
- DigitalOcean, which hosts our servers in Frankfurt, Germany.
- Cloudflare, for our domain, file storage and encrypted backup copies.
- Payment companies a shop chooses to connect (MyFatoorah, Tap or UPayments). Card details go directly to them and never reach PosWave.
- Messaging services a shop chooses to connect (WhatsApp by Meta, Twilio, or an email provider), to send its customers order and booking messages.
- Authorities, when the law requires it.
Because our servers are outside Kuwait, data is transferred to Germany and to our providers' facilities.
How we protect it
- All connections use HTTPS. Passwords are stored only as secure hashes.
- Each person's actions are checked on the server against their role. Past sales and refunds cannot be edited.
- Payment keys are stored encrypted. Backups are encrypted, run daily, and a copy is kept outside the server.
- Our administrator access requires a password and a code from an authenticator app.
How long we keep it
- Shop data: while the shop's account is open. When a shop is closed, we delete its data within 30 days. Backup copies that still contain it expire within a further 30 days.
- Technical logs: up to 30 days.
Your choices
- If you are a customer of a shop, ask that shop to see, export, correct or erase your details. In PosWave the shop can export everything about you in one file, or erase you; your past purchases stay in its accounts without your name.
- If you are a shop owner or staff member, email us and we will help with any request about your account data.
Deleting an account
- A staff account: the shop owner removes the person in the app, under Users. Their sign-in stops working on every device straight away.
- A whole shop: the owner emails support@pos-wave.app from the owner's email address and asks us to close the shop. We confirm by reply and delete the shop's data within 30 days, as described above. Export anything you want to keep first.
- Your details as a shop's customer: ask the shop, which can erase you in PosWave.
Children
PosWave is a tool for businesses. It is not meant for children, and we do not knowingly collect children's data for our own purposes.
Changes
We will post any change to this policy on this page with a new date, and tell shop owners about important changes by email or in the app.