Privacy Policy

Two parties are involved in most of what follows. Your business decides what to record about its customers and employees, and is responsible to them for it. Suiteloom stores and processes that information on your behalf, and only for the purpose of running the service.

Each business's records are kept separate from every other business's. We do not combine one customer's data with another's, and we do not sell any of it.

• Account details — your name, email address, phone number and role, and your business's name, address and tax registration details.
• Sign-in information — your password is stored only as a one-way hash, never in a readable form. We keep a record of your active sessions and the devices they were started from so that you can end them.
• Activity — an audit log of significant actions: who created, changed or deleted a record, and when. This exists so that a business can answer "who did this?" about its own data.

Running a till means recording information about your customers, and giving someone a login means recording information about them. It is worth knowing exactly what that includes:

• Customers — the name and phone number you take at the till, purchase history, and loyalty balances.
• Staff — for each person you let sign in: their name, phone number and email, the role and outlets you assign them, and who they report to. That is all. The system holds no employment records, no bank details, no salary or statutory identifiers, no uploaded documents and no attendance or location tracking.

You decide what of this to collect and you are responsible for having a lawful basis and for telling the people concerned. We provide the tools; we do not decide on your behalf.

• To run the features you have switched on, and to keep your data available to you.
• To calculate what the software is for — invoice totals and GST, stock levels and valuations, and the reports built on them.
• To send the notifications you have asked for, by SMS, WhatsApp or email. You control which of these you receive, per channel.
• To keep the service secure, to investigate misuse, and to support you when you ask.

We do not use your business data to advertise to you or to anyone else.

Only the service providers needed to deliver the features you use, and only the part they need: payment gateways to take a payment, messaging providers to deliver an SMS or WhatsApp message, the GST network to file an e-invoice, and our hosting provider to store the data. We may also disclose information where the law requires it.

For as long as your account is active. Financial and tax records are kept for the period Indian law requires, which is longer than the rest. When you close your account we delete your data after a short grace period, apart from anything we are obliged to retain.

Data is encrypted in transit. Passwords are hashed. Access inside the app is limited by role, so a waiter cannot open the books and only an Owner can change who is allowed to sign in. Sessions expire, and can be revoked. No system is perfect, and if a breach affects your data we will tell you.

• You can see and correct your own account details in settings at any time.
• You can choose which notification channels you receive.
• You can export your business's data while your subscription is active.
• You can ask us to delete your account. Where your business is the one holding an employee's or customer's data, that request goes to your business first — ask your Owner or Manager, who can act on it in the app.

If we change this policy in a way that materially affects you we will tell you through the app or by email before it takes effect. Questions, or a request about your data, can go to us at support@suiteloom.com. See also our Terms of Service.