This Privacy Policy is designed for the Treo cloud-based ERP/POS platform serving retail, wholesale, bakery, café and restaurant businesses, with an optional Human Resource Management (HRM) module. It is drafted for use in the Maldives and is intentionally future-facing.
Scope
This Policy applies to the Treo website, applications, dashboards, POS terminals, mobile/tablet applications, APIs, support channels, analytics and related services (collectively, the “Services”). It applies to information about business customers (“Merchants”), their authorized users, employees, customers, suppliers, delivery personnel and other individuals whose information is entered into the Services by a Merchant or otherwise processed through the Services. Where a Merchant uses Treo to process information about its own customers or employees, the Merchant ordinarily decides why that information is collected and how it is used. In that context, Treo generally acts as a service provider/processor on the Merchant’s instructions. For account, billing, security, support and direct commercial relationship information, Treo may act independently as a controller of that information.
Privacy principles
Treo will seek to apply the following principles: lawful and fair processing; purpose limitation; data minimization; accuracy; storage limitation; confidentiality and security; accountability; transparency; and respect for individual privacy.
Information we collect
- Account details: your name, business name, email address, phone number and login information.
- Business data you enter: products, sales, customers, suppliers, staff records and similar information you store in TreoPOS.
- Usage and device information: pages visited, features used, browser type, IP address and error logs, used to run and improve the service.
- Payment information for your subscription, handled by our payment provider.
Who we share it with
We do not sell personal information. We share it only with service providers that help us run TreoPOS, for example hosting, email delivery, SMS delivery through Twilio, messaging through Telegram and address suggestions through Google Places, and only when the feature is in use. We may also disclose information when the law requires it.
How long we keep it
We keep account and business data for as long as your account is open and for [90] days after closure, unless the law requires us to keep it longer.
How we use it
- To provide, secure and support the service you signed up for.
- To send service messages such as receipts, alerts and account notices.
- To understand how TreoPOS is used and improve it.
- To meet legal, tax and accounting obligations.
POS and transaction information
Product and SKU information, prices, discounts, taxes configured by the Merchant, purchase/order records, refunds, voids, returns, stock movements, customer account identifiers, loyalty information, receipts, table/order information, delivery information and cashier/user audit records. Treo should not require a Merchant to store full payment-card credentials in the platform where a separate licensed payment processor can handle them. If a payment integration transmits payment data, processing is also subject to that provider’s terms and security controls.
HRM information
Where the HRM add-on is enabled: employee name, contact information, employment details, job title, department, attendance, leave, payroll-related fields entered by the Merchant, performance or disciplinary records, emergency contact information and other employment records configured by the Merchant. Sensitive information should only be entered where necessary, lawful and supported by appropriate safeguards. The Merchant is responsible for determining whether it is legally permitted to collect each HR field.
Data you store about others
When you record your own customers or staff in TreoPOS, you decide what is collected and why. We process that information on your behalf and only to provide the service.
Technical and usage information
IP address, device/browser information, operating-system information, application version, login timestamps, security logs, approximate location derived from technical data where applicable, crash reports, audit events and usage analytics.
Information received from third parties
Information may be received from Merchant administrators, payment providers, accounting integrations, identity/verification providers, cloud infrastructure providers, support vendors or other integrations authorized by the Merchant.
Security
Data is sent over encrypted connections and access is limited to people who need it. No system is perfectly secure, so please use a strong password and tell us about anything suspicious.
Your choices and rights
You can view and update most of your information in your account settings. You can ask us for a copy of your personal information, or ask us to correct or delete it, by contacting [contact email].
Cookies
We use cookies and similar storage that the service needs to work, such as keeping you signed in, and to remember preferences like a dismissed announcement.
Changes to this policy
We may update this policy and will change the date above when we do. Significant changes will be announced in the service.