Privacy
Last updated 5 November 2026. This page explains what buyOS stores, why, and which companies process it for us. Questions: [email protected].
What we store
- Your account: your email address and the name you show on orders.
- Your shop: business name, country, time zone, tax rate, items, prices and stock.
- Sales: orders, order lines, payment status, tips and refunds.
- Customers you add to buyOS Pass: the name, phone and email you enter, points and visit history.
We do not store card numbers. Card details go directly to Stripe.
Why, and on what basis
- To run the register for you (our contract with you): record sales, take payments, keep stock, show your numbers and answer your questions about them.
- To build anonymous benchmarks (our legitimate interest in helping independent shops, which you can switch off): we combine numbers from at least 10 shops into totals and averages that cannot be traced back to one shop or person. See our Data promise.
- To keep the service safe (legitimate interest and legal obligations): prevent abuse and meet tax and payment rules.
We do not sell data and do not use it for advertising.
Your customers’ details
When you add customers to buyOS Pass, your shop decides why and how their details are used, and buyOS processes them on your behalf. We never use a customer’s details across shops unless that customer has agreed to it themselves.
Who processes it
- Supabase hosts the database and sign-in, in the EU (Frankfurt).
- Cloudflare serves the website and stores our visit statistics.
- Stripe processes card payments and verifies businesses that connect a Stripe account.
- Google (Gemini API) writes the answers in Ask buyOS. It receives a summary of your shop’s sales numbers when you ask a question, never customer names or contact details.
- Resend delivers our sign-in emails.
Who can see your shop’s data
Only people signed in as members of your shop. Every database request is checked against your membership.
Your choices and rights
You can edit or delete items and customers in the register at any time, and switch off anonymous benchmarks in Settings. You can ask for a copy of your data, a correction, deletion, or to object to a use; email us and we will act within 30 days. If you are in the UK or EU you can also complain to your data protection authority.
Where data is stored
Our database is in the EU (Frankfurt). Some providers above may process data in other countries under standard contractual safeguards.
Visit statistics on this website
On our public pages (this website, not the register itself) we count visits with our own simple tool, so we can see which pages help and where people get stuck. It records the page, where the visit came from, the device type, an approximate city from the network, how far the page was scrolled, what was clicked and how the pointer moved. It never reads anything you type. Each browser gets a random number instead of a name, the data stays with us on Cloudflare and is never shared or used for advertising, and detailed recordings are deleted after 60 days.
We skip this completely if your browser sends Global Privacy Control or Do Not Track. You can also switch it off here:
Cookies and storage
We use your browser’s storage to keep you signed in, remember settings such as the selected shop, and hold the random visit number described above. No advertising or third-party tracking cookies.