Privacy policy

1. Who we are

This policy covers the Mauzo Plus app and our website and services. The operator is Mauzo Plus. [Postal address not set yet] Contact for privacy questions: [Privacy contact email not set yet]

2. What information we collect

Your account

• Name, username, email address, optional phone number, and a password (stored only as a one-way hash).
• If you sign in with Google, the name, email address and Google account identifier that Google shares with us.
• Two-factor authentication settings, if you turn them on.
• Sign-in sessions and the device name and device identifier of each device you use, and a push-notification token if you allow notifications.

Your shop and business records

• Shop details: name, category, address, city, country, phone, email, currency, tax rate, and logo.
• Products, prices, stock, and product photos you add.
• Sales, refunds, discounts, expenses, and receipts, including receipt photos you attach to expenses.
• Customers you record: name, email, phone, address, city, postal code, country, notes, and any credit limit.
• Staff records: name, phone, email, employee number, department, hire date, salary structure, allowances and deductions, attendance check-in and check-out times, and payroll.
• Messages and any files you send in shop group chats, and support requests you submit.

Payments

• Subscription payments are taken inside the Android app through Google Play Billing. Google processes the payment and shares with us a purchase token and the subscription product you bought, which we use to activate your plan. We never see or store your card details; Google's own privacy policy covers information Google collects to process the payment.

Camera, photos and Bluetooth

• The camera is used only when you choose to take a photo for a product, expense or staff record, or to scan a barcode. Photos are stored only for the record you attached them to.
• Bluetooth is used only to find and connect to the receipt printers you choose. We do not collect your location. On older Android versions, Android requires location permission to scan for Bluetooth devices; the app does not read your location.

Technical data

• Server logs record requests with timestamps, the IP address the request came from, and error details, to keep the service secure and working.
• Crash and error reports are sent to Sentry. We turn off sending of personal information in those reports.

3. How we use it

• To provide the app: sign-in, sales, stock, reports, payroll, and shop management.
• To take payments for subscriptions and to confirm them.
• To keep accounts secure, prevent abuse, and fix faults.
• To send you account and security messages, and notifications you have allowed.
• To meet our legal and tax obligations.

We do not sell your personal information, and we do not use it for advertising. The app shows no ads.

4. Who we share it with

We share information only with service providers that run the service for us, and only as far as they need it:

• Google Play Billing: subscription payments made inside the Android app.
• Render: hosting of our servers and database.
• Google Firebase: push notifications, and Google sign-in if you use it.
• Pusher: live updates in shop chat.
• Sentry: error reports (without personal information).
• Cloudflare Turnstile: a check that password-reset and one-time-code requests are made by a person, not a bot.

We may disclose information if the law requires it.

5. How long we keep it

• While your account is active, we keep the information above so the service works.
• When you delete your account, your personal details are removed (see section 7). Business records that tax and accounting law requires us to keep, such as sales, expenses and payroll, are kept for the period the law requires and are no longer linked to your login.
• Server logs are kept for a limited period for security.

6. Your choices

• You can view and change your profile, and remove products, customers, staff and expenses that you no longer need, inside the app.
• You can turn notifications off in your device settings or in the app.
• You can ask us for a copy of your personal information, or ask us to correct it, by contacting us at the address above.

7. Deleting your account

You can delete your account inside the app (More → gear icon (Settings) → Data → Delete account) or by following the steps on the account deletion page. Deletion removes your personal details and signs you out everywhere. It is blocked while a shop you own still has a paid plan running, so that you do not lose paid access by accident; end that plan first or contact us.

8. Children

Mauzo Plus is for business owners and their staff. We do not knowingly collect information from anyone under 18.

9. Security

Passwords are stored as one-way hashes. Traffic between the app and our servers is encrypted with HTTPS. Access to shop data is limited by the role each person holds in the shop.

10. Changes to this policy

When we change this policy we update the date at the top and, for important changes, tell you in the app.