Privacy Policy

This policy explains what information PLJ POS collects, how it is used, and how it is protected. It covers the merchant account holders and staff who use PLJ POS. It does not change the separate obligations a merchant has to its own customers.

Who we are

PLJ POS is a point-of-sale service operated by PLJ ONE. For any privacy question, contact support@pljone.com.

What we collect

• Account data — the email address and password you register with, and the staff names and 4-digit PINs an owner creates. PINs are stored only as a one-way bcrypt hash and are never readable.
• Business data — your business and outlet details, products, prices, categories, modifiers, inventory, and settings.
• Transaction data — orders, payments, refunds, shift and cash records, and the reports derived from them. These are the merchant's own operating records.
• Customer data you enter — if you use the customer or loyalty features, the customer names and phone numbers you record.
• Technical data — basic request and error information needed to operate and secure the service.

We do not sell your data, and we do not use your business or transaction data to advertise to your customers.

How your data is processed

PLJ POS runs on established infrastructure providers who process data on our behalf under their own security and privacy terms:

• Supabase / AWS — the application database and authentication. Data is stored in a Southeast Asia region and encrypted at rest by the provider.
• Backblaze B2 — storage for product images and exported files, in a private bucket reachable only through short-lived signed links.
• Stripe — subscription billing between PLJ POS and the merchant. Card details are handled by Stripe and are never stored by us.
• Vercel — application hosting.
• Sentry — aggregated error reporting, used to detect and fix faults. Payloads are scrubbed of sensitive fields.

Security

• All traffic is encrypted in transit (HTTPS/TLS), with HSTS enforced.
• Every merchant's data is isolated at the database level so one merchant can never read another's.
• Access to production systems is restricted and audited.
• Staff PINs and passwords are stored only as one-way hashes.

How long we keep data

Business and transaction records are retained for as long as your account is active, and for a reasonable period afterwards to meet the record-keeping expectations that apply to a point-of-sale system. Completed financial records are never silently altered or deleted.

Your choices

You can access and correct your business data at any time inside the app. To request deletion of your account and associated data, or to ask a question about this policy, contact support@pljone.com. Some records may be retained where required for legitimate business or legal reasons.

Changes

We may update this policy as the service evolves. Material changes will be reflected here with a new "last updated" date.