Data Collection Policy

Last updated: 10 September 2026

This document details every category of data PourPOS handles, where it lives, how long it is kept, and how it is removed. See the Privacy Policy for the companion overview.

Data inventory

Category	Examples	Where stored	Retention
Identity	Name, email, role	Cloudflare D1	Until account deletion
Work records	Sessions, tastings, sales, people counters, ratings	Cloudflare D1	Tenant audit trail (kept; deleted on company deletion)
Scheduling	Shifts, shift acceptance, unavailability	Cloudflare D1	Until deletion by tenant
Venue data	Location name/address, sign-in QR URL, venue coordinates (captured once on-site)	Cloudflare D1	Until tenant deletion
Photos	Stock estimation photos, brand logos	Transient processing / D1 metadata	Photos are used for estimation and are not retained as user media
Passkeys	Credential ID + public key + counter	Cloudflare D1	Until credential or account deletion
Payments	Stripe customer/payment IDs, Apple transaction IDs, invoices	Cloudflare D1 + Stripe/Apple	Tax-invoice retention period (7 years, AU)
Communications	Team messages, booking threads, notification history	Cloudflare D1 + Resend	Until tenant deletion
Telemetry	Error reports (Sentry, PII-scrubbed)	Sentry	90 days
Transient location	Device GPS at venue-match time	Memory only — not stored	Not retained

On-device data (iOS app / PWA)

• Active session state, cached tenant data and the offline tasting queue are stored in browser/app local storage and sync to the server when connectivity returns.
• Deleting the app or clearing site data removes this device-local cache. Server records are unaffected.

Cross-border processing

Cloudflare D1 primary regions and edge delivery may process data in Australian and United States data centres. Resend, Stripe, Apple and Sentry process data under their own regional policies. We do not transfer data to advertisers — ever.

Deletion paths

• Self-service: Settings → Delete Account (in the app). Removes credentials, tokens and identity; deactivates the user; deletes the entire tenant dataset if you are the last active member.
• By admin: tenant admins can remove staff via the Admin dashboard.
• By request: email us via pourpos.app/help — completed within 30 days.

Payment data

We never receive or store card numbers. Stripe stores payment methods (PCI DSS Level 1). Apple In-App Purchases are verified via App Store Server Notifications v2; we retain only transaction identifiers and credit amounts.

Privacy Policy · Terms of Service