POINT OF SALE ANALYTICS PRIVACY AND DATA POLICY
Effective Date: 2024-10-31
This “Privacy Policy” explains how Top Line Decisions (d.b.a. Point of Sale Analytics) (“Company” or “we”) collects, uses, discloses, and otherwise processes personal data on behalf of our customers – typically, merchants (any, a “Merchant”) – in connection with our application, Report Mailer (“App”), which runs on the Clover Point of Sale system (“Clover POS”). This Privacy Policy does not apply to Company’s privacy practices in any other context.
Company’s processing of personal data in connection with our application is governed by this Privacy Policy and our agreements with Merchants. In the event of any conflict between this Privacy Policy and a customer agreement, the customer agreement will control to the extent permitted by applicable law.
This Privacy Policy is not a substitute for any privacy policy that a Merchant may be required to provide to their customers, personnel, or other individuals.
Information that we collect
We may collect personal data from or on behalf of Merchants. Merchants determine the scope of the personal data transferred to us or that we collect, and the information we receive may vary by Merchant. Typically, the information we collect on behalf of Merchants includes:
Information that we collect when the Merchant interacts with our web application
The Merchant interacts with our web application to configure which reports to generate and what email addresses will receive the reports. During this interaction, we collect the following information:
-
Email addresses of report recipients
Information that we collect from the merchant API
When a merchant installs the app, we collect the following information.
-
Merchant business name
-
Merchant account email
-
Merchant ID
-
Merchant settings: default currency, time zone, and summary hour
We update this information when a report is created. At this time, we also collect employee information.
-
Employee Names
-
Employee IDs
Information that we collect about customer payments to a Merchant from the orders and payment APIs
When a merchant report is created, we collect the following information. This information is deleted from our servers after the report is created and sent.
-
Amount paid: cash back, gross, tip, & taxes
-
Discounts & refunds
-
Gift card transactions
-
Tender type (eg, cash, credit card)
-
Credit card brand (eg, Visa, Discover)
-
Note: we do not collect or store credit card numbers, expiration dates, or CVV
-
Order payment state (eg, open, paid)
-
Payment results (eg, success, voided)
-
Device ID
Information that we collect from the device API
We collect the following information from the device API. This information is deleted from our servers after the report is created and sent.
-
Device ID
-
Device name
Information that we collect from the cash events API
We collect the following information from the cash events API. This information is deleted from our servers after the report is created and sent.
-
Type (load, unload)
-
Amount
-
Note
-
Device ID
-
Timestamp
-
Employee ID
Information that we collect about personnel of a Merchant
We may collect information about Merchants’ personnel and interactions with the Clover POS, such as clock-in, clock-out time, tips earned, and register actions (sales, cash out, etc.).
How we use the information we collect
We use the information that we collect for various purposes to:
-
Conduct the operation of the App (eg create reports and send reports to proper recipients
-
Measure performance of and improve the application
-
Provide information about the application, such as important updates or changes to the application and security alerts
-
Respond to inquiries, complaints, and requests for customer support
In addition, Company may use personal data as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern our application; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
How we share information
We may share personal data that we collect with:
-
The Merchant from whom or on whose behalf we collected the personal data
-
The platform on which our application runs, the Clover POS. You may view Clover’s Privacy Notice here.
-
With third parties as a Merchant may direct
-
With third party service providers that help us manage and improve the application
-
With Company subsidiaries and corporate affiliates for the purposes described in this Privacy Policy or in our agreement with a Merchant
Company may disclose personal data to government or law enforcement officials or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern our application; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
Company may sell or transfer some or all of its business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Your rights and choices
Data subject rights
To the extent that applicable law provides individuals with rights pertaining to their personal information, such as to review and request changes to their personal information, individuals should contact the Merchant with any requests pertaining to the Merchant’s use of our application. To the extent that Clover is responsible for responding to data subject rights requests under applicable law, individuals may contact Clover with applicable requests as explained in Clover’s Privacy Notice, https://www.clover.com/privacy-policy. Company will assist a Merchant, or Clover, as applicable, in responding to such requests subject to our contract with a Merchant or Clover.
Complaints
If you have a complaint about our handling of personal data, you may contact us via the contact information provided below.
Updates
We reserve the right to modify this Privacy Policy at any time. We will notify you of updates by updating the date of this Privacy Policy.
Contact us
You may contact us with any questions, comments, or complaints, about this Privacy Policy or our privacy practices via:
Mail:
1315 Ileagnes Rd
Raleigh, NC 27603
Phone:
919-695-3865
Email:
info@pointofsaleanalytics.com
Your California privacy rights
As a California resident, you have the rights listed below. However, these rights are not absolute, and we may decline your request as permitted by the CCPA.
-
Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
-
The categories of Personal Information that we have collected.
-
The categories of sources from which we collected Personal Information.
-
The business or commercial purpose for collecting and/or selling Personal Information.
-
The categories of third parties with whom we share Personal Information.
-
Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of recipient.
-
Whether we’ve sold your Personal Information; and, if so, the categories of Personal Information received by each category of recipient.
-
Access. You can request a copy of the Personal Information that we maintain about you.
-
Deletion. You can ask us to delete the Personal Information that we maintain about you.
-
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as by denying you goods or services, increasing the price/rate of goods or services, decreasing the service quality, or suggesting that we may penalize you as described above for exercising your rights. However, the CCPA allows us to charge you a different price or provide a different service quality if that difference is reasonably related to the value of the Personal Information we are unable to use.
How to exercise your rights
You may exercise your California privacy rights as follows:
Right to information, access and deletion
You can request to exercise your information, access and deletion rights in the following ways:
-
Call 919-695-3865.
-
Identity verification. The CCPA requires us to verify the identity of the individual submitting the request before providing a substantive response to the request. A request must be provided with sufficient detail to allow us to understand, evaluate and respond. The requester must provide sufficient information to allow us to reasonably verify that the individual is the person about whom we collected information. A request may also be made on behalf of your child under 13.
-
Authorized agents. California residents can empower an “authorized agent” to submit requests on their behalf. We may require the authorized agent to have a written authorization confirming that authority.
Sale of personal information
We do not sell, as defined under CCPA, your Personal Information to third parties.
In the preceding twelve (12) months, we have not sold any personal information.
Personal information that we collect, use and share
The chart below summarizes our collection, use and sharing of Personal Information during the last 12 months before the effective date of this Privacy Policy. We describe the sources through which we collect your Personal Information in section above titled The Personal Data We Collect, and describe the purposes for which we collect, use, sell and share this information in section above titled How We Use Your Personal Data and The Parties With Whom We Share Your Personal Data.
Category (see the glossary below for definitions) |
Do we collect this information? |
Do we share this information for business purposes? |
Identifiers |
yes |
yes |
Online Identifiers |
yes |
no |
Protected Classification Characteristics |
no |
no |
Commercial Information |
yes |
no |
Biometric Information |
no |
no |
Internet or Network Information |
yes |
no |
Geolocation Data |
no |
no |
Sensory Information |
no |
no |
Professional or Employment Information |
no |
no |
Education Information |
no |
no |
Inferences |
no |
no |
Financial Information |
no |
no |
Medical Information |
no |
no |
Glossary
Category |
Definition |
Categories of Personal Information |
Date Elements within the Category |
Biometric Information |
An individual’s physiological, biological or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish an individual’s identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a face print, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. |
Transaction History |
Products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Financial Information |
Bank account number, debit or credit card numbers, insurance policy number, and other financial information. |
Geolocation Data |
Precise location, e.g., derived from GPS coordinates or telemetry data. |
Identifiers |
Real name, alias, postal address, unique personal identifier, customer number, email address, account name other similar identifiers. |
Government-issued ID |
Social security number, driver’s license, passport, or other government-issued ID, including an ID number or image. |
Medical Information |
Personal information about an individual’s health or healthcare, including health insurance information. |
Internet or Network Information |
Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement. |
Online Identifiers |
An online identifier or other persistent identifier that can be used to recognize a person, family or device, over time and across different services, including but not limited to, a device identifier; an Internet Protocol address; cookies, beacons, pixel tags, mobile ad identifiers, or similar technology; customer number, unique pseudonym, or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers (i.e., the identification of a person or a device to a degree of certainty of more probable than not) that can be used to identify a particular person or device. |
Physical Description |
An individual’s physical characteristics or description (e.g., hair color, eye color, height, weight). |
Professional or Employment Information |
Information relating to a person’s current, past or prospective employment or professional experience (e.g., job history, performance evaluations), and educational background. |
Protected Classification Characteristics |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
Sensory Information |
Audio, electronic, visual, thermal, olfactory, or similar information. |
Contact Information
1315 Ileagnes Rd
Raleigh, NC 27603
919-695-3865
info@pointofsaleanalytics.com