QuickPOS Privacy Policy
This Privacy Policy explains how QuickPOS — operated at pos.allshop.ng by Desk Tools — collects, processes, stores, and protects the personal and commercial data of Shop Owners, Staff Members, and the end-consumers whose data flows through the QuickPOS point of sale and inventory platform. This policy aligns with the Nigerian Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.
By using QuickPOS, you acknowledge the practices described here. This Privacy Policy should be read together with our Terms of Service.
Information We Collect
QuickPOS collects only the information needed to deliver the service. We do not collect sensitive personal information speculatively — only what is required for POS functionality, account management, and security.
1.1 Information Provided by the Shop Owner
- Account Details: Full name, email address, phone number, shop name, and shop location.
- Billing Information: Payment details are transmitted directly to our secure processors (Paystack / Stripe). QuickPOS servers never store raw card numbers or CVV codes.
- Staff Information: Names, assigned roles (Cashier, Manager, Pharmacist, Bar Staff), and cryptographically hashed 4-digit Staff PINs. Plaintext PINs are never stored.
1.2 Commercial and Customer Data You Enter
As you operate QuickPOS, you input data about your business and customers. In this context, QuickPOS acts as a Data Processor while you (the Shop Owner) are the Data Controller and are responsible for how this data is collected from your end-customers.
- Customer Data: Names, phone numbers, email addresses, debt balances, and purchase histories of walk-in or returning customers.
- Inventory & Financial Data: Product pricing, cost prices, supplier details, expense logs, stock movements, and revenue metrics.
- Pharmacy Data: In Pharmacy Mode — patient names, NAFDAC numbers, controlled substance logs, and expiry tracking. Treated as highly sensitive with strict access controls.
- Bar / Restaurant Data: Table tabs, server assignments, and service charge records.
- Wholesale Data: B2B client profiles, credit limits, and debtor aging records.
1.3 Automatically Collected Data
- Device and Usage Information: IP addresses, browser types, device IDs (used by the Host Lease architecture), and operating systems.
- Audit Logs: Timestamps of logins, sales, voids, stock corrections, and offline-sync conflict resolutions. These power the QuickPOS Audit Trail and are key for theft prevention.
- Offline Storage Metrics: Size and sync status of your local IndexedDB cache, used to keep the PWA running during internet outages.
- Analytics: Aggregated, anonymized usage statistics via Google Analytics to improve the service.
How We Use Your Information
QuickPOS uses collected data only to operate, improve, and secure the service. We do not use your data for advertising, profiling, or purposes you have not consented to.
- Core POS Functionality: Facilitating transactions, inventory syncing across multiple devices, and offline-to-cloud reconciliation.
- Service Communications: Subscription renewal notices, low-stock alerts via Telegram, and critical system updates.
- QR Menu Operations: Routing customer orders from the QuickPOS QR Menu to your designated WhatsApp number.
- Analytics & Product Improvement: Aggregating anonymized data to improve search algorithms and system performance.
- Security and Fraud Prevention: Monitoring audit logs to detect unauthorized access or brute-force PIN attempts.
- Customer Support: Responding to your inquiries through WhatsApp, email, or in-app support channels.
QuickPOS does not use your business or customer data to train AI models, serve advertisements, or build targeting profiles. Your sales data is not shared with competitors, market research firms, or data brokers.
Data Storage & Security
QuickPOS uses a layered security model: strong encryption for data in transit and at rest, hashing for sensitive credentials, and role-based access to limit who inside QuickPOS can even see your data.
| Layer | Method | What It Protects |
|---|---|---|
| Data In Transit | TLS (Transport Layer Security) | All data moving between your device and our servers |
| Data At Rest | AES-256 Encryption | All stored business and customer data on our cloud servers |
| Staff PINs | SHA-256 Hashing | 4-digit PINs — never stored in plaintext, even internally |
| Payment Data | Paystack / Stripe (PCI-DSS) | Card numbers never touch QuickPOS servers |
| Access Control | Role-Based (Owner / Manager / Cashier) | Each staff role can only access permitted features |
| Audit Trail | Immutable Log | Every sensitive action is timestamped and attributed |
3.1 Local Storage (IndexedDB & Offline Mode)
To enable Offline Mode, QuickPOS stores your commercial data locally in the browser's IndexedDB. This allows cashiers to keep selling when internet drops. You are responsible for securing the physical devices running QuickPOS — using device lock screens, PIN codes, and controlling physical access.
Clearing your browser cache or using Incognito / Private mode while offline may cause loss of unsynced data. For best reliability, use QuickPOS in a normal browser session, not private mode.
3.2 Server Infrastructure
QuickPOS hosts cloud data with infrastructure providers operating data centres that meet recognized international security standards (ISO 27001 or equivalent). Where data is processed outside Nigeria, we ensure adequate safeguards consistent with the NDPR.
Your Rights Under the NDPR
The Nigerian Data Protection Regulation grants you enforceable rights over your data. QuickPOS has built most of these directly into the Dashboard so you can exercise them without needing to contact us.
View all your data inside QuickPOS. Export any report as CSV from the Reports module at any time, with no additional charge.
Edit customer data, supplier records, product names, and staff details directly inside the platform.
Request account deletion. Upon verification, your shop data, transactions, and customer databases are permanently removed from active servers within 30 days.
Request that we pause processing of your data while a dispute is being resolved.
Receive your data in a structured, machine-readable format (CSV) to move to another platform.
Object to processing for analytics or product improvement that is not strictly necessary for operating the service.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.
Customer Data Management (For Shop Owners)
As the merchant, you are the Data Controller for your customers' data. This is an important distinction under the NDPR.
When you add a customer's phone number, email, or name to QuickPOS for debt tracking, credit sales, or digital receipts — you are responsible for having obtained appropriate consent from that customer. QuickPOS is not liable for a merchant's violation of local privacy or marketing laws in how they handle their own customers' data.
Display a brief consent notice at your counter or POS screen when you first record a customer's contact details — something like "We record your name and phone for payment tracking." This simple step keeps you compliant with the NDPR.
Data Retention
QuickPOS retains your account data for as long as your subscription remains active. After account closure:
- Commercial data is removed from active servers within 30 days.
- Financial records may be retained longer where Nigerian tax or pharmacy regulations require it.
- Aggregated, anonymized analytics data may be kept indefinitely — it can no longer identify any individual or business.
Children's Privacy
QuickPOS is a business tool intended for users aged 18 and over. We do not knowingly collect personal information from children. If we discover that data from a person under 18 has been submitted, we will delete it promptly. If you believe a minor's data has been entered into the system, contact us at privacy@pos.allshop.ng.
Policy Changes
As QuickPOS adds features — such as new AI Insights, new analytics, or additional API integrations — this Privacy Policy will be updated to reflect changes in our data practices. Material changes will be communicated through an in-app Dashboard alert or by email at least 14 days before they take effect. The "Last Updated" date at the top of this page always reflects the latest revision.
Frequently Asked Questions About Privacy
These are the questions we hear most from Nigerian business owners using QuickPOS. Each answer reflects how the platform actually works.
Contact Our Data Protection Officer
For any questions, concerns, or formal NDPR requests regarding your data or our security practices, contact our Data Protection Officer:
Data Protection Officer — QuickPOS / Desk Tools
- privacy@pos.allshop.ng
- Subject Line
- "Data Privacy Request — [Your Shop Name]"
- Response Time
- 7 business days for general inquiries · 30 days for formal NDPR requests
- Parent Company
- Desk Tools — the technology company that develops and operates QuickPOS
- Regulator
- Nigeria Data Protection Commission (NDPC) — for complaints we cannot resolve
Looking for usage terms and subscription rules? Read the QuickPOS Terms of Service →