Privacy Policy

Index POS is a point of sale and business management platform operated by Index Hosting Limited ("Index", "we", "us"). This policy explains what we collect when a business uses the platform, what we do with it, and the choices available to you.

What we collect

Account details: the email address and password used to sign up, or the identity provided by Google sign-in, together with the name and role of each staff member added to a business.

Business data you enter: products, stock levels, sales and receipts, customers and their balances, suppliers and purchase orders, expenses, cash shifts, branches, dining tables and kitchen tickets, and the tax details you supply for electronic fiscal reporting.

Payment records: subscription payments made through our payment provider. Card and mobile money credentials are handled by the provider; we store only the reference, amount, method and status.

Activity records: an internal audit log of changes made to business data, including who made the change and when, so owners can review staff activity.

How we use it

We use the data only to run the service you signed up for: taking sales, keeping stock accurate, printing and storing receipts, producing reports and dashboards, notifying owners of expiring subscriptions, and — where a business enables it — transmitting fiscal invoices to the tax authority as required by law.

Who can see it

Each business's data is kept separate from every other business. Access is restricted by the business's own roles: owners and managers see the full record, cashiers see only what their role allows. Our staff access business data only where needed to keep the service running or to investigate a problem a business has reported.

What we do not do

We do not sell business or customer data, we do not use it to advertise other companies' products, and we do not use a business's sales records to answer questions about platform revenue — revenue summaries use subscription payments and plan information only.

Security

Access requires a signed-in session, data is separated per business at the database level, and sensitive items such as fiscal signing keys and payment provider credentials are stored outside the reach of the browser and are never displayed again once saved.

Your choices

Business owners can correct or remove records at any time from within the app, and can export or request deletion of their business data. Removing a business removes its operational records; receipts and audit entries may be retained where retention is required for tax or accounting purposes.

Changes to this policy

If this policy changes in a way that affects how data is used, we will notify business owners in the app before the change takes effect.