Privacy Policy

KOI POS, Inc., a Nevada corporation (“KOI POS,” “we,” “us”), provides an AI-powered point-of-sale application for iOS and Android. This policy covers the KOI POS application, our websites, and the merchant storefronts we host.

When a merchant uses KOI POS to serve their own customers, the merchant decides what customer information to collect, and we process it on the merchant’s behalf.

Account information

Name, email address, phone number, password, and role, for merchants and their staff.

Merchant business information

Business name, address, hours, menu or service catalog, pricing, staff records, tax settings, and similar operating details.

Customer contact information entered at checkout

Name, and — where the customer provides it — email address and mobile phone number, so the merchant can send a receipt or tell the customer an order is ready.

Transaction data

Items purchased, amounts, taxes, tips, discounts, refunds, timestamps, order and pickup numbers, and the last four digits and card brand of a payment card.

Device and usage data

IP address, browser and device type, pages and screens viewed, actions taken, and diagnostic logs, collected to operate and secure the Service.

• To provide the Service: process orders, take payments, print and send receipts, run the kitchen and pickup screens, and keep inventory and staffing records.
• To authenticate users, including sending one-time verification codes.
• To send the transactional messages a user has asked for, such as a receipt or an order-ready alert.
• To provide support and respond to questions.
• To secure the Service, detect and prevent fraud and abuse, and troubleshoot problems.
• To improve the Service and understand how it is used, in aggregate.
• To comply with legal obligations, including tax and accounting requirements.

• Service providers. Hosting, database, email, and text-messaging providers that process information on our instructions and only to deliver the Service.
• Payment processors. Card payments are handled by PCI-compliant third-party processors.
• The merchant you bought from. If you are a customer, your order and any contact details you give go to that merchant.
• Legal requirements. When we believe disclosure is required by law, subpoena, or court order, or is necessary to protect rights, safety, or property.
• Business transfers. In a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Full payment card numbers are handled by our PCI-compliant payment processor and are not stored by KOI POS. We retain only what is needed to show and reconcile a transaction, such as the card brand, the last four digits, and the processor’s reference.

We do not sell, rent, or share mobile phone numbers or SMS opt-in data and consent with third parties or affiliates for marketing or promotional purposes.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

A phone number you give us is used only to deliver the messages you consented to receive — one-time verification codes, digital receipts, order-ready alerts, and account or service alerts. We share numbers with our text-messaging provider solely to send those messages, and for no other purpose.

You can stop messages at any time by replying STOP; we will send one confirmation message and nothing further. Reply HELP for help, or contact hi@koipos.com or 888-910-9552. Message frequency varies. Message and data rates may apply. See our SMS Messaging Terms and our SMS opt-in page.

We keep information for as long as an account is active and afterwards for as long as we need it to provide the Service, resolve disputes, meet tax, accounting, and other legal obligations, and enforce our agreements. Transaction records are generally retained for at least the period required by applicable tax law. When information is no longer needed, we delete it or de-identify it.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls and role-based permissions, PIN protection for point-of-sale actions, and audit logging of sensitive operations such as refunds. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access the personal information we hold about you, to request correction of inaccurate information, to request deletion, to request a portable copy, and to opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising.

California residents have these rights under the California Consumer Privacy Act, as amended by the CPRA, including the right not to be discriminated against for exercising them. Residents of other states with comprehensive privacy laws have similar rights.

To make a request, email hi@koipos.com or call 888-910-9552. We will verify your request before acting on it. If your information was collected by a merchant using KOI POS, we will refer you to that merchant or act on their instructions.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact hi@koipos.com and we will delete it.

We may update this policy. When we do, we will change the effective date at the top of this page and, where the change is material, give notice in the Service or by email. Continued use after a change takes effect means you accept the updated policy.

Questions, requests, or complaints about privacy can go to: