Zirel POS

Privacy Policy

Last updated: 2026-09-03

Zirel POS (“Zirel”, “we”, “us”, “our”) is a point-of-sale application for small businesses. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and how you can exercise your rights. It applies to the Zirel mobile app, the web portal at https://zirelpos.com, and any related services (collectively, the “Service”).

Where this Policy refers to “personal data”, we mean any information that relates to an identified or identifiable natural person, as defined under applicable data-protection laws (including the EU and UK General Data Protection Regulation, the California Consumer Privacy Act / CPRA, Brazil’s LGPD, Japan’s APPI, Korea’s PIPA, Singapore’s PDPA, and similar laws).

1. Who is responsible for your data

For data we collect about you, the account holder (your email, business profile, device information, subscription status, and similar) we act as the controller. For data you enter about your customers, employees, suppliers, or other third parties through the Service, you act as the controller (or the equivalent role under applicable law) and we act as your processor: we process that data only on your behalf and on your instructions to provide the Service. You are responsible for having a lawful basis to collect that data, for providing any required notices to the individuals concerned, and for honoring their rights requests.

2. What we collect

3. How we use your data and the legal bases

We do not sell your personal data, and we do not use it for cross-context behavioral advertising or profiling.

4. Who we share data with

We share data only with service providers we rely on to operate the Service, and only to the extent necessary for them to perform their function. Each is bound by appropriate confidentiality and data-processing obligations.

We may also disclose data when required by law, valid legal process, or a binding order from a competent authority, or to protect the rights, safety, or property of Zirel, our users, or the public. If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and we will notify you before it becomes subject to a different privacy policy.

5. Where your data lives and international transfers

We store operational data encrypted at rest on servers operated by us and by our hosting providers. Backups are encrypted and retained for up to 30 days. Some of our service providers (including those listed above) operate globally, which means your data may be transferred to, stored in, or accessed from countries other than the one in which you reside, including countries that may not provide the same level of data-protection law as your own. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms.

6. How long we keep your data

We retain your data for as long as your account is active and for as long as we need it to provide the Service. After you delete your account via https://zirelpos.com/account/delete, we delete or irreversibly anonymize your account and operational data from production systems within a reasonable period (typically 30 days), and remove it from encrypted backups within a further 30 days. We may retain certain information for longer if required to comply with a legal obligation, resolve disputes, or enforce our agreements.

Zirel AI retention. Chat message text is kept in short-lived operational logs for support and abuse review: up to 90 days for anonymous website help sessions and up to 14 days for signed-in app sessions, after which it is automatically deleted. Separate usage metrics (such as token counts, model name, latency, and outcome codes) may be retained longer in aggregated form for reliability, billing controls, and abuse prevention.

7. Data loss and Free-tier storage

Free-tier data is stored only on your device. We do not back it up and we cannot recover it if your device is lost, stolen, damaged, factory reset, or if the app is uninstalled. The Service is offline-first: changes you make while offline are queued locally and uploaded the next time the device successfully reaches our servers. If the device is wiped, replaced, or reinstalled before that upload completes, the queued changes are lost. You are solely responsible for maintaining your own backups using the export, local backup, and Google Drive backup features available in the Service. Please see our Terms of Service for the full allocation of responsibility regarding data loss.

8. Security

We use technical and organizational measures designed to protect your data, including encryption in transit (TLS) and at rest, access controls, audit logging, device pairing, and the ability to remotely deactivate a paired device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials, your staff PINs, and the physical security of the devices on which the Service is installed.

9. Your rights

Depending on the data-protection laws that apply to you, you may have the following rights with respect to personal data we hold about you as the account holder:

For requests relating to data we process on behalf of a business (for example, customer or staff records that a Zirel user has entered into the Service), please contact that business directly. We will assist them in responding to you, but we are not authorized to act on the underlying data without their instructions.

For users in California: we do not sell or share personal information as those terms are defined under the CCPA/CPRA. You have the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

10. Children

The Service is intended for use by businesses and is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Zirel AI

Zirel AI is an in-product assistant that helps you learn how to use Zirel POS and, on eligible plans, answer questions about your business using data you already store in the Service.

12. Changes to this Policy

We may update this Policy from time to time. We will indicate the date of the most recent revision at the top of this page, and where the changes are material we will provide additional notice in the app or by email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.

13. Contact

Questions, requests, or complaints about this Policy or our handling of your data? Email [email protected].