Privacy Policy

Last updated: 3 November 2026

This policy explains how JPOS ("we", "us") handles personal information in the JPOS app and at jpos.app. We are based in Sydney, New South Wales, Australia, and we follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Account details: your name, email address and sign in details.
• Business data you enter: shop name and profile, products, prices, costs, stock and expiry dates, sales, expenses, income, offers, and photos you add (for example a product photo or a shop front photo).
• Team and payroll data you enter: staff names, roles, pay rates, hours, pay runs and payslips. If you choose to enter a tax file number, bank details or similar, it is stored only for your business and is visible only to people your owner allows.
• Shared product catalog: when you add a product, its barcode, name and photo may be added to a catalog shared with other JPOS shops. Your prices, costs and stock are never shared.
• Contact messages: what you send through our contact form, and a one-way scrambled form of your network address to limit spam.
• Technical logs: basic security and error logs needed to run the service.

We do not collect your location. We do not use advertising or tracking cookies, and we do not sell personal information.

Camera and photos

The app asks for camera access to scan barcodes and take product or shop photos, and photo library access if you choose a picture. You can turn these off in your phone settings at any time.

How we use it

To run the app for your business, keep it secure, support you, send service messages (such as invites and password resets), meet legal duties, and improve the service. We do not use your business data for advertising.

Who can see your data

Only the people in your business, according to their role (owner, partner, manager, staff, accountant). Owners can remove access at any time. Our platform administrator can switch a business off if required, and may access data only to provide support or keep the service safe.

Service providers

We use trusted providers to run JPOS: Supabase (database, login and file storage), Amazon Web Services (sending email), and Cloudflare (this website). They process data for us under their own security and privacy terms. Data may be stored or processed outside Australia. We take reasonable steps to make sure overseas providers protect your information.

Security

Data is encrypted in transit. Each business is separated from others by database access rules. Invite codes are single use, expire, and are stored only as a scrambled hash. No system is perfectly secure, so please use a strong password.

Keeping and deleting data

We keep data while your account is active. You can delete your account at any time (see Delete your account). Some records, such as payroll and tax records, may need to be kept by your business for the period required by Australian law, so please export what you need first.

Your rights

You can ask to see, correct or delete personal information we hold about you. Contact us and we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

JPOS is a business tool and is not directed to children under 16.

Changes

If we change this policy we will update the date above and, for big changes, tell you in the app or by email.

Contact

Privacy questions: use the contact form and choose the Privacy topic.