1. Introduction
VIDHUVIC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use Cafe Sync. By using the Service, you consent to the practices described in this policy.
2. Data We Collect
We collect the following categories of information:
- Business Information: Business name, location, industry type, and operational settings you configure.
- POS Transaction Data: Sales records, product purchases, payment amounts, and transaction timestamps.
- Staff Information: Names, PINs (hashed), roles, shift schedules, and performance data.
- Product & Inventory Data: Product names, prices, stock levels, recipes, and supplier information.
- Settings & Preferences: Tax configuration, receipt templates, currency settings, and UI preferences.
- Technical Data: Browser type, device information, IP address, and usage logs for service improvement.
3. How We Use Your Data
Your data is used to:
- Provide and operate the Cafe Sync service.
- Process transactions and generate reports.
- Enable cloud synchronization across your devices.
- Improve service quality through aggregated analytics.
- Ensure security and prevent fraudulent activity.
- Communicate with you about your account and service updates.
- Process billing and subscription payments.
4. Data Storage & Security
Your data is stored using a dual-storage architecture:
- Local Storage (SQLite): A local database on your device provides fast access and offline capability. This data remains on your device unless cloud sync is enabled.
- Cloud Storage (Neon Postgres): When cloud sync is active, data is securely stored in our Neon PostgreSQL cloud database with TLS encryption.
We implement industry-standard security measures including TLS encryption, AES-256 at rest, bcrypt-hashed PINs, HMAC-SHA256 JWTs, and role-based access control.
After account deletion, data is retained for 30 days to allow for export, then permanently deleted.
5. Data Sharing
We do not sell your personal or business data. Data may be shared only with:
- Payment Processors: Stripe, PayPal, and Favara for transaction processing.
- Legal Requirements: When required by law, court order, or government regulation.
- Service Providers: Trusted third parties who assist in operating the service (hosting, CDN), bound by strict data protection agreements.
6. Cookies & Session Management
Cafe Sync uses HttpOnly, SameSite=Lax cookies for:
- Device Tokens: Persistent authentication tokens for device recognition.
- Session Data: Theme preferences, business name, and workspace identifiers.
- We do not use tracking cookies or third-party analytics cookies.
7. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request permanent deletion of your account and data.
- Portability: Export your data in standard formats.
- Restrict Processing: Request limitation of how we process your data.
Requests will be addressed within 30 days. Contact us at admin@vidhuvic.com.
8. Children's Privacy
Cafe Sync is a business-to-business service and is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Continued use after changes constitutes acceptance.
10. Contact Us
- General: admin@vidhuvic.com
- Technical: dev@vidhuvic.com
- Business: gtm@vidhuvic.com