Privacy Policy

1. Information We Collect

We collect information you provide directly, information generated as you use the Service, and information from third parties that help us operate.

• Account data: your name, email address, phone number, and business details.
• Purchase and support data: the plan you buy, the activation key we issue, and the messages you send us by email or WhatsApp.
• Payment data, handled by our payment processors: we do not store full card numbers.
• Usage and device data such as IP address, browser type, pages viewed, and interactions.
• Cookies and similar technologies (see our Cookie Policy).

2. BelloPOS: Local Data & Diagnostics

BelloPOS is an offline-first application that runs on your own device. Your business data (products, sales, customers, suppliers, and stock) is stored locally on that device. Parts of it may be included in the diagnostic data described below, and our support team may use it to help you. We cannot recover it for you if the device is lost or damaged, which is why we recommend keeping regular backups.

To keep the software reliable, we may collect diagnostic and usage data from the application. This helps us identify bugs and problems, understand which features are actually used, and deliver software of a consistently high quality.

• Crash reports, error messages, and technical logs describing what the application was doing when a problem occurred.
• Usage and performance data such as the screens and features used, session length, application version, operating system, and interface language.
• A pseudonymous installation or device identifier, which lets us group reports from the same till without identifying you personally.
• On mobile builds, screen recordings of the application interface may be captured to help us reproduce an issue.
• Licensing data: the machine code generated by your installation, together with the business details you provide when requesting an activation key.
• When the application checks for updates, it requests a version file from our public update repository; as with any download, your IP address is visible to that host.

3. How We Use Diagnostic Data

Diagnostic and usage data is used solely to operate, secure, and improve our software: to detect and fix bugs, to prevent and diagnose crashes, to measure and improve performance and usability, and to prioritise the features our users rely on most.

We do not sell diagnostic data, we do not use it for advertising, and we do not use it to build profiles of your customers. Technical logs are collected for troubleshooting rather than for their content, but because they describe real operations they may incidentally include details of the transaction or record being processed when the problem occurred. We treat them as confidential, restrict access to the staff who need it, and retain them only as long as needed to investigate and resolve issues.

To request access to, or deletion of, the diagnostic data associated with your installation, contact us at privacy@bellocloud.com with the machine code shown in the application settings.

4. Ares AI Assistant (Hosted Trial)

Ares, the AI assistant built into BelloPOS, is optional. A shop can connect its own AI key or, if it has none, try Ares on BelloCloud's keys ("hosted Ares").

When you use hosted Ares, the questions you type or dictate, and the shop data Ares reads to answer them (for example sales figures, product names and customer names), are sent to BelloCloud. Phone numbers and email addresses are removed before sending. BelloCloud forwards this content to a third-party AI provider, Google (Gemini) or DeepSeek, which generates the answer. BelloCloud keeps these conversations for up to 90 days to improve the service, then deletes their text; only aggregate counts and costs are kept.

If your shop uses its own AI key, Ares sends its requests directly to your AI provider, under your own agreement with that provider, and the conversations do not pass through BelloCloud. We only record anonymous usage counts, never the text.

To avoid hosted Ares, simply do not use Ares, or set your own AI key in Settings → AI (Ares). For any question, contact BelloCloud LLC and Rankaya Media LLC at privacy@bellocloud.com, which answers on behalf of both companies.

The AI providers process this data under their own terms and privacy policies. BelloCloud has no control over how Google or DeepSeek process, store or use the data sent to them and, to the fullest extent permitted by law, accepts no liability for it. Their official terms and policies:

• Gemini API Additional Terms of Service (Google): https://ai.google.dev/gemini-api/terms
• Google Privacy Policy: https://policies.google.com/privacy
• DeepSeek Privacy Policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
• DeepSeek Open Platform Terms of Service: https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html

5. How We Use Your Information

• Provide, operate, secure, and maintain the Service.
• Process orders, shipping, and payments, and send WhatsApp and Telegram notifications you configure.
• Provide customer support and respond to your requests.
• Analyze usage to improve features and performance.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

6. Newsletter & Marketing Emails

If you subscribe to our newsletter on bellopos.app, we collect your email address, the language of the page you signed up on, your country (estimated from your IP address, which we do not store) and the page you signed up from. We use them only to send you our newsletter, in your language: practical tips, news about BelloPOS and our offers.

We send it only with your consent (Art. 6(1)(a) GDPR). You confirm your subscription through the link in a confirmation email (double opt-in). You can withdraw your consent at any time with the unsubscribe link in every email or by writing to us; this does not affect emails sent before.

The newsletter is sent through Mailchimp (Intuit Inc., USA), which processes these data on our behalf. Mailchimp records whether an email is opened and which links are clicked, so we can measure and improve our emails. Transfers to the United States are covered by the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses.

We keep your subscription data until you unsubscribe. After that, we keep only your email address on a suppression list, so that you are never emailed again.

7. Website Analytics

To understand how our website is used and to give you a better experience, we record the pages you visit on bellopos.app, how you arrived (for example a search engine, a link or a campaign), when you visited and how long you stayed on each page, your approximate location (country and city, estimated from your IP address) and your browser and device type.

We use this information to measure and improve our website, content, offers and support, to recognise returning visitors, and to connect a visit to the orders, requests or giveaway entries made from it, so we can serve you better. We do not sell it and we do not use it for third-party advertising.

If you accept analytics cookies, we store a random identifier in a first-party cookie on bellopos.app so we can recognise your browser on later visits; it is kept for up to 13 months. If you decline, we do not set this cookie and rely only on a pseudonymous identifier computed from your IP address and browser, which cannot be reversed. Full IP addresses are kept for 90 days, then shortened. To change your choice, clear the cookies and site data of bellopos.app in your browser; to have your analytics data deleted, write to privacy@bellocloud.com.

8. Your Rights Under GDPR

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the legal bases of performance of a contract, your consent, our legitimate interests, and compliance with legal obligations.

You have the right to access, rectify, erase, restrict, or port your data, to object to certain processing, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority. To exercise these rights, contact us using the details below.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request access to or deletion of that information, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information.

We do not sell your personal information, and we will not discriminate against you for exercising any of your privacy rights.

10. How We Share Information

We share personal information only as needed to run the Service. We never sell your personal data.

• Service providers and subprocessors, including shipping companies, payment processors, WhatsApp/Meta, and hosting and analytics providers.
• Authorities or third parties when required by law or to protect our rights and users.
• A successor entity in connection with a merger, acquisition, or asset sale.
• Other parties when you give us your consent to do so.

11. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. We may retain and use certain information as required to comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymized.

12. Data Security

We use administrative, technical, and organizational measures such as encryption in transit, access controls, and monitoring to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. International Transfers & Children

We may process data in the countries where we or our providers operate; where required, we rely on appropriate safeguards for cross-border transfers. The Service is not directed to children under 16, and we do not knowingly collect their personal information.

14. Changes & Contact

We may update this Privacy Policy from time to time; material changes will be reflected by the "Last updated" date above. For any privacy question or to exercise your rights, contact BelloCloud LLC and Rankaya Media LLC at privacy@bellocloud.com, which answers on behalf of both companies.