Privacy Policy
Effective date: July 22, 2026
This Privacy Policy describes how VoVi POS ("VoVi," "we," "us," or "our"), the operator of vovipos.com and the VoVi point-of-sale platform (together, the "Service"), collects, uses, discloses, and protects personal information. It applies to visitors of our website, people who join our waitlist or contact us, and merchants and their staff who use the VoVi platform.
We run our website deliberately light: no advertising trackers, no third-party analytics, no marketing pixels, and no sale of your personal information — ever.
1. Information we collect
Information you give us
- Waitlist and contact details. When you ask us to contact you, we collect your name, phone number, and — only if you choose to provide it — your email address, together with the number of locations you told us about.
- Merchant account information. When a business creates a VoVi workspace, we collect the business name, owner name, login credentials (passwords are stored only as salted one-way hashes), staff names and PINs (hashed), and the business configuration the merchant enters (locations, products, prices, and similar operational data).
- Support communications. The contents of emails or calls you exchange with us.
Information collected automatically
- Server logs. Like nearly every website, our servers record basic request data (requested URL, timestamp, browser type) to operate and secure the Service.
- Abuse-control identifiers. When you submit a form, we derive a salted, truncated one-way hash of your IP address for rate limiting and abuse prevention. We store the hash, not your IP address, and the hash cannot be reversed into your IP.
- Local storage. See our Cookie Policy. We use no advertising or analytics cookies. The marketing site uses browser local storage only as a temporary fallback to avoid losing a form you submitted while offline; the app uses one essential, httpOnly authentication cookie after sign-in.
Merchant customer data
Merchants using VoVi may record their own customers' information (for example a customer profile attached to a sale, loyalty balances, or purchase history). For that data, the merchant is the controller/business and VoVi acts as a service provider/processor: we process it solely to provide the platform to the merchant, under the merchant's instructions, and never for our own marketing.
2. How we use personal information
- To respond to your request to be contacted, and to onboard your business onto VoVi;
- To provide, maintain, secure, and improve the Service;
- To communicate service and account information (for example password resets or important changes);
- To prevent fraud and abuse and to enforce our Terms of Service;
- To comply with legal obligations and to establish, exercise, or defend legal claims.
We do not use your personal information for third-party advertising, and we do not build advertising profiles about you.
3. Legal bases (EEA/UK visitors)
Where the GDPR or UK GDPR applies, we process personal information on these bases: consent (when you ask us to contact you — you may withdraw it at any time); performance of a contract (operating a merchant's workspace); legitimate interests (securing and improving the Service, preventing abuse); and legal obligation (where retention or disclosure is required by law).
4. When we share information
We share personal information only with:
- Infrastructure providers that host the Service and store its data on our behalf under contractual confidentiality obligations (our application and database are hosted on Railway Corp. infrastructure in the United States);
- Payment partners, if and when you ask us to set up integrated card processing for your business — at that point the partner's own terms and privacy notice will be presented to you;
- Professional advisers and authorities where required by law, subpoena, or to protect the rights, safety, or property of VoVi, our merchants, or the public;
- A successor entity in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information until you are told otherwise.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months.
5. Communications and your choices
If you submit your phone number, you consent to VoVi contacting you by phone, text message, or email about VoVi. Consent is not a condition of purchasing anything. Message and data rates may apply to texts. You can opt out at any time: reply STOP to any text, use the unsubscribe link in any marketing email, or email us at support@vovipos.com — we will honor the request promptly. Service messages that are necessary to operate your account (for example a password reset you requested) are not marketing and are not affected by a marketing opt-out.
6. Retention
- Waitlist details: until we have onboarded you, you ask us to delete them, or 24 months after our last contact with you — whichever comes first;
- Merchant account and operational data: for the life of the merchant account and up to 7 years afterwards where required for tax, accounting, audit, or dispute purposes;
- Server logs and abuse-control hashes: up to 90 days.
7. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit (TLS), salted one-way hashing of passwords and PINs, role-based access controls inside the platform, owner-approved device authorization for registers, and audit logging of sensitive actions. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal information we will notify you and the relevant authorities as required by applicable law.
8. Your privacy rights
United States (including California)
Depending on your state, you may have the right to know what personal information we have about you, to access it, to correct it, to delete it, and to opt out of its sale or sharing (we do not sell or share personal information, so there is nothing to opt out of). We will never discriminate against you — in price or service — for exercising a privacy right.
EEA / UK
You may have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent at any time, and the right to lodge a complaint with your supervisory authority.
How to exercise any right
Email support@vovipos.com with your request. We will verify your identity against the details we hold (for example by confirming the phone number or email on file) and respond within the time required by applicable law (generally 30–45 days). You may use an authorized agent; we will ask the agent for proof of your written permission.
9. Do Not Track and Global Privacy Control
Our website does not track visitors across other sites, so browser "Do Not Track" and Global Privacy Control signals are honored by design: there is no tracking to disable.
10. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.
11. International visitors
The Service is operated from, and personal information is processed in, the United States. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country. For EEA/UK data we rely on your consent and on contractual safeguards with our infrastructure providers.
12. Changes to this Policy
When we make material changes, we will update the effective date above and post the revised Policy here; for significant changes affecting data we have already collected from you, we will notify you directly using the contact details we hold. The current version always lives at vovipos.com/privacy.
13. Contact us
VoVi POS · vovipos.com
Email: support@vovipos.com