Privacy policy

• Staff, guest, loyalty and sales records belong to the business; we process them only to provide the service.
• We do not sell personal data or use it for ad targeting.
• Guests use the QR menu without an account and join the loyalty program only with explicit consent.
• Staff PINs are never stored in raw form; only an irreversible digest is kept.
• Card details never reach PergePOS: for subscription payments they stay on the payment institution's page, for business sales they stay on the business's payment terminal.
• Analytics cookies run only if you consent.

Business owners and teams. The name, e-mail and phone you provide when creating an account; business, branch, team and billing details; subscription, quote and payment records; sign-in and transaction logs created while using the service; the messages you send us.

Staff. The name and role entered by the business, an irreversible digest of the PIN, shift, sales and transaction records. The data controller of these records is the business.

Guests and loyalty members. Your table and order details, payment method and amount, the name and phone you provide for a payment link or reservation; if you joined the loyalty program, your phone number, point and campaign activity. The data controller of these records is the business.

Partner program applicants and website visitors. The details on the application form; what you write in the contact and quote forms; analytics data if you consent. The full list is in the KVKK privacy notice.

• To create your account, verify you and keep your session secure.
• To run the panel, POS and kitchen devices, the QR menu, the modules and notifications.
• To manage subscriptions, issue receipts and invoices, and prepare quotes.
• To answer your support requests.
• To block abuse, find bugs and improve the service; improvement measurements use aggregate, non-identifying data.
• For product news and campaigns, if you opted in.

PergePOS subscription payments. Subscriptions are paid on the web by card through iyzico or Stripe; on the basis of a quote they can also be paid by bank transfer or EFT. Card details stay with those institutions; PergePOS never sees or stores card numbers. The billing details you enter at checkout are saved to the order and appear on your invoice.

Sales of the business. Payments guests make to a business are between the business and the guest; PergePOS does not collect money from guests and does not intermediate these payments. Card payments are taken on the business's payment terminal or the payment institution's page; PergePOS only receives the result and the amount.

Fiscal documents. PergePOS does not produce fiscal documents on its own; the check slip is not a fiscal document. Cash register (ÖKC) and e-document integrations run through separate modules under the responsibility of the business.

AI features send the content needed to fulfil a request to an artificial intelligence provider:

• PergePOS Assistant: the report and menu questions you ask in the panel, together with the aggregate data needed for the answer, are sent to a language model. The assistant only looks at records you are authorised to see and asks for your confirmation before saving or sending anything.
• Reporting insights: aggregate, non-identifying data from sales and product reports is used.
• Live support draft reply: the first reply in live support may be drafted by AI; your message is sent to the provider for that purpose and the conversation is handed to our team when needed.

Guest and staff personal data is sent to AI providers only to the minimum extent; loyalty members' phone numbers and staff PIN digests are never sent. AI output may contain errors; check the source before important decisions.

Account verification codes may be sent by e-mail or SMS. SMS and e-mails sent to guests and loyalty members on behalf of a business (e.g. campaigns, reservation reminders, payment links) go through the business's own connected provider account (e.g. Netgsm, Twilio); managing those permissions is the business's responsibility. Mobile app notifications are delivered through Firebase and Apple notification services. You may withdraw the permission you gave for PergePOS's commercial messages at any time; mandatory notices about subscription, payment, security and your account are sent regardless of these preferences.

We use the cookies necessary for your session; analytics tools run only if you consent. Details are in the cookie policy.

Connections are encrypted; passwords and staff PINs are stored irreversibly; team members and staff are authorised according to their roles; important actions (voids, refunds, complimentary items, discounts, opening the cash drawer, permission changes) are written to the audit log. A device session is tied to a single branch and carries no panel permissions; a guest session is limited to its own table and orders. Payment institution and integrator keys are stored encrypted; card data and PINs are never written to logs.

You can delete your account from the account settings in the app; billing and payment records subject to statutory retention are kept for that period. When a subscription ends, the business records are kept read-only for 90 days so you can export them; after that they are deleted or anonymised, subject to statutory retention obligations. Loyalty members may ask the business or us to delete their data; we forward the request to the business and carry it out on the business's instructions.

This policy is updated when necessary; we notify important changes to the e-mail address registered to your account. For questions and KVKK requests: info@pergepos.com.