Privacy policy

Posaro ("the provider") runs Posaro and Posaro Cloud. This policy explains what personal data we collect, why, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Data we collect

  • Cloud sign-up: shop name, contact name, mobile number, email (optional). The owner PIN is stored one-way hashed — the provider cannot read it.
  • License purchase or renewal: shop name, contact, mobile number, email and the machine code (a value derived from the computer, not personal files).
  • Payments: payer name, phone, amount and the transfer slip you attach.
  • Usage data: IP address, last active time, program version and paired terminal details (name, operating system) — used to prevent abuse and troubleshoot.

How we use it

  • To provide the service, verify you with one-time codes, issue and check licenses, take payments and renew.
  • To send due-date reminders, payment results and important service notices by SMS and email.
  • To prevent abuse, such as limiting repeated code attempts.
  • We do not sell data or use it for third-party advertising.

Your shop's data on Posaro Cloud

  • Data your shop records (products, bills, its members and customers) belongs to the shop — the shop is the data controller and the provider processes it only on the shop's instructions.
  • Each shop has its own database, and the shop can download all of its data as a file at any time (Settings → System).
  • The provider accesses shop data only when needed to run, back up or restore the service, or when the shop asks for help.

Service providers

  • We use server/data-center, SMS, email and backup-storage providers only as needed to run the service.

Retention

  • We keep data while you use the service. Daily backups are kept for a rolling period and older ones are deleted automatically.
  • After you stop using the service you can ask us to delete your data, except records we must keep by law (such as payment receipts).

Security

  • Data travels over HTTPS, terminals must be paired with one-time codes, passwords and PINs are stored one-way hashed, and administrators can use two-factor sign-in.

Cookies

  • The website and program only use cookies needed to sign in. There are no tracking or advertising cookies.

Your rights

  • You can ask to access, copy, correct or delete your data, or object to its use, by contacting us below. You may also complain to the Personal Data Protection Committee office.

Privacy contact

Contact details will appear here