Privacy Policy

When you use CafeCounter at https://cafecounter.store, we store:

• Your name and email address.
• If you sign in with Google: the name, email and profile photo Google shares with us.
• Your business's name and settings (VAT rate, default discount), and the business data you enter to run your shop: menu items, categories and photos, tables, reservations, orders, expenses and sales records.
• Customer details you choose to save, such as a name, email address or phone number.
• If you invite staff: their email address, so they can be linked to your business when they sign up or sign in.

We do not collect payment card numbers or bank details. Pro is paid through PayPal (see "Who we share it with"). If you record a GCash or Maya reference number on an order, we store that reference number only, never the wallet account itself.

Each person gets one free Pro trial. To prevent abuse, when you create a shop we store one-way hashed (scrambled, not readable) forms of your sign-up email address, a random identifier saved in your browser, and your IP address, and we use them only to check whether a trial was already used. We never store those three in readable form for this purpose, and an IP address alone never blocks a trial; at most it flags the sign-up for us to review.

When the internet drops, the POS keeps taking orders. Those offline sales are stored temporarily on the device you are using, and are sent to your account and removed from the device's queue once the connection is back. Your theme and accent color choices are also saved in your browser, along with the random trial identifier described above (in a cookie named cc_dev and in local storage).

To run the service: sign you in, keep your business's data separate from every other business on CafeCounter, and let your staff use the app under the right role. We also send email you would expect from the service, such as sign-in and password reset links, and, on Pro, a daily sales summary to the owner, which you can turn off in Settings. We don't send marketing email today, and if that changes you'll be able to opt out.

We use a small number of service providers to run CafeCounter, and your data passes through them as part of that:

• Supabase: hosts our database and handles sign-in.
• Vercel: hosts the web application.
• PayPal: processes Pro subscription payments. PayPal sees what a payment processor needs to see; we only receive a subscription ID and its status, never your card or account details.
• Resend: delivers the emails described above.
• Google: if you choose to sign in with Google.

We don't sell your data, and we don't share it with anyone else.

CafeCounter uses only the cookies needed to keep you signed in, plus one long-lived cookie (cc_dev, a random identifier) used to check free-trial eligibility. There is no advertising or third-party tracking on the app or on this website.

We keep your account and business data for as long as your account is active. If you want your account and business data deleted, contact us and we'll remove it, other than what we're required to keep for tax or accounting records.

You can ask to see, correct, or delete the personal data we hold about you at any time. Contact us using the email below.

CafeCounter is a business tool. It isn't directed at children, and we don't knowingly collect data from anyone under 18.

If this policy changes in a meaningful way, we'll make a reasonable effort to let existing customers know.

Questions about your data: businessmael@protonmail.com.