Privacy Policy

Who this applies to

Tintora POS is a cloud service that dry cleaners and laundries use to manage orders, customers, cash drawers and notifications. This policy explains what data we process when you visit this site, when a business uses the system, and when you’re a customer of a business that uses it.

Two different roles

Each dry cleaner is responsible for its own customers’ data: it decides what to record and why. Tintora POS stores and processes that data on the dry cleaner’s behalf, solely to provide the service.

If you’re a customer of a dry cleaner and want to access, correct or delete your data, please contact that business. We’ll help them take care of it.

Data we process

• Business account: business name, country, time zone, currency, the owner’s name and email and, if provided, a phone number.
• Staff: name, role and a PIN stored in a non-reversible form.
• The dry cleaner’s customers: name, phone number, email if provided, language, notification preferences, orders, recorded payments, notes and any garment photos the store takes.
• Devices and sessions: an identifier for each registered device, usage dates and an encrypted fingerprint of the IP address to prevent abuse.
• Activity history: who performed each payment, void, discount or change, and when.

How we use it

We don’t sell personal data or use it for advertising. We use it to:

• Provide the service: orders, tags, production, pickups, cash drawer and reports.
• Send the notifications the store turns on, such as “your order is ready.”
• Protect accounts: block repeated attempts, detect abuse and make backups.
• Provide support when the business asks for it.
• Comply with legal obligations.

Text message notifications

Notifications are only sent to customers who agreed to receive them. Anyone who replies STOP stops receiving messages right away.

Who we share it with

Only with the providers we need to run the service, and each one receives only what its task requires:

• The cloud infrastructure that runs the service and stores the database, files and backups.
• Our text message provider (Twilio), to deliver notifications.
• Cloudflare Turnstile, for bot protection on the sign-in and sign-up screens.
• Authorities, only when required by law.

Cookies

We only use essential cookies: your session, the registered device, protection against forged requests and the language you choose. We don’t use advertising or tracking cookies. To count site visits, we use Cloudflare’s anonymous, cookie-free analytics.

Security

Encrypted connections, passwords and PINs stored in a non-reversible form, two-step verification, each business’s data kept separate, a tamper-proof activity history and encrypted daily backups.

No system is perfect. If we detect an incident affecting personal data, we’ll notify the affected businesses without undue delay.

How long we keep it

For as long as the account is active. Backups are kept for 30 days. If a business closes its account, it can download its data first; after that, the data is deleted from our active systems, and from backups once those 30 days pass, except for anything the law requires us to keep.

Your rights

You can request access to, correction, a copy or deletion of your data, and object to certain uses. A business owner can download their data at any time from Settings.

Depending on where you live, such as California or Latin American countries like Mexico or Colombia, local law may give you additional rights. We honor them.

International processing

Your data may be processed on servers outside your country. We apply the same protections wherever it’s processed.

Children

The service is for businesses and isn’t directed at anyone under 18.

Changes to this policy

If we make a material change, we’ll let you know inside the app before it takes effect.