verified_user Data Protection & Privacy

Privacy Policy

Learn how TILLR POS protects, processes, and safeguards merchant operations and customer transaction data across cloud registers, sync pipelines, and retail integrations.

calendar_today Effective Date: September 1, 2026 history Version: 2.4 (Enterprise Edition) corporate_fare Operator: Tillr
shield Executive Privacy Summary

Key Principles & Highlights

check_circle
We Never Sell Data Your customer lists, sales records, and inventory margins are never monetized or sold to third parties.
lock
PCI-DSS Certified We do not store raw credit card numbers or CVVs. All card transactions are tokenized at terminal level.
database
You Own Your Catalog Export your complete inventory, order records, and analytics anytime in standard CSV/JSON format.
security
AES-256 Cloud Encryption Enterprise-grade cryptographic protection across rest, in-transit telemetry, and offline register sync.
Section 01

Scope of Services & Entities Covered

This Privacy Policy governs all software, cloud services, and mobile checkout applications operated by Tillr under the TILLR POS platform brand (collectively, "TILLR", "we", "us", or "our").

This policy applies to:

  • arrow_right_alt Retail Merchants: Business entities, managers, and cashiers utilizing TILLR POS terminals, tablets, barcode scanners, and thermal receipt peripherals.
  • arrow_right_alt Consumer End-Users: Retail buyers who complete transactions, request digital SMS/email receipts, or participate in merchant store loyalty programs powered by TILLR.
  • arrow_right_alt Platform Visitors: Anyone accessing our marketing portals, documentation libraries, API developer endpoints, or live demonstration environments.
Section 02

Information We Collect & Process

To ensure high-speed checkout, accurate multi-outlet inventory synchronization, and regulatory compliance, we collect data across three distinct categories:

store A. Merchant Account Information

Business legal entity name, corporate registration tax numbers, store branch locations, registered manager names, business email addresses, contact phone numbers, billing billing profile, and assigned terminal staff PINs.

receipt_long B. Transaction & Inventory Telemetry

SKUs sold, quantity counts, discounts applied, sales timestamps, cash drawer opening events, split payment breakdowns, return/refund records, and real-time inventory level deltas between physical shelves and online channels.

devices C. Device & Hardware Diagnostics

Terminal hardware serial numbers, operating system versions, IP addresses, network latency metrics, peripheral printer connectivity status, offline cash register caching events, and crash logs.

Section 03

How We Use Merchant & Customer Data

We process data solely for legitimate business purposes and in strict accordance with your merchant service agreement:

POS Checkout Execution: Processing instant line-item ringing, price calculation, tax computation, discount validation, and printing fiscal-compliant receipts.
Automated Stock Sync: Real-time stock decrementing across all connected physical outlets, warehouses, and synchronized WooCommerce or Shopify stores.
Financial Auditing & Reporting: Generating shift-end Z-reports, cashier balancing, sales tax statements, margin analytics, and accounting reconciliations.
Security & Fraud Prevention: Detecting unauthorized cash register opens, unusual refund spikes, duplicate transactions, and suspicious login attempts.
Section 04

Payment Processing Security & PCI-DSS Compliance

verified
Strict Zero-Card-Storage Policy: TILLR software does NOT receive, process, or store Primary Account Numbers (PANs), magnetic stripe data, or card verification values (CVV/CVC) on merchant terminal drives or TILLR cloud servers.

When an EMV chip, contactless NFC (Apple Pay, Google Pay), or card swipe occurs, the card details are directly encrypted at the certified hardware PIN pad level and transferred securely to our PCI-DSS Level 1 payment processing partners (such as Stripe, Square, Adyen, or local acquirers). TILLR receives only an opaque token (e.g., tok_9x8f...) and the last 4 digits for merchant receipt printing.

Section 05

Third-Party Integrations & Authorized Disclosures

TILLR seamlessly connects to leading retail platforms. When you enable integrations, data is exchanged strictly per your configuration:

E-Commerce Platforms (Shopify, WooCommerce, Magento):

Exchanging SKU quantities, online order fulfillment status, and customer shipment details.

Bi-Directional Sync
Accounting & ERP Software (QuickBooks, Xero):

Synchronizing daily journal entries, sales revenue totals, tax liabilities, and accounts receivable.

Daily Reconciliation
Fiscal Tax Authorities:

Transmitting signed digital invoice hashes where mandated by national fiscal retail laws.

Legal Compliance
Section 06

Data Storage, Cloud Security & Offline Encryption

All TILLR cloud infrastructure is hosted in ISO 27001 and SOC 2 Type II certified data centers. We implement defense-in-depth protocols:

lock_clock

At-Rest Encryption

Encrypted with AES-256 keys managed by enterprise hardware security modules (HSMs).

cable

In-Transit Protection

Enforced TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).

wifi_off

Offline Register Vault

Local database cache is secured via SQLite cryptographic extensions until network restores.

We retain active merchant transaction records for the duration of the active subscription plus required statutory tax retention periods (typically 7 years for fiscal audit compliance).

Section 07

Merchant Rights & Complete Data Portability

Under applicable privacy frameworks (including GDPR, UK Data Protection Act, and CCPA), you maintain full control over your business data:

download
Right to Export (Portability): You can download your complete inventory catalog, vendor profiles, and historical transaction journals directly from the TILLR Backoffice portal at zero cost.
delete_forever
Right to Erasure ("Right to be Forgotten"): Merchants and consumers can request removal of personal contact and loyalty records, subject to non-waivable statutory tax retention laws.
edit_note
Right to Rectification: Easily update and correct any inaccurate merchant account, outlet address, or tax registration information directly within the settings dashboard.
Section 08

Data Protection Officer & Contact Channels

For any privacy inquiries, data subject access requests (DSAR), or compliance verification, please contact our Data Governance Office:

Corporate Headquarters

Tillr POS Solutions Group
United Arab Emirates

Direct Privacy Channels

Email: privacy@gettillr.co
Support: support@gettillr.co
Phone: +971 50 473 0391