Privacy Policy

Effective Date: March 17, 2026

1. Overview

Bonsai POS ("we", "our", "us") is a locally-installed point-of-sale application. We are committed to protecting your privacy. This policy explains what data we collect and how we use it.

2. Data That Stays On Your Machine

Bonsai POS stores all operational data — orders, payments, menu items, employee records, inventory, and reports — in a local SQLite database on your computer. This data never leaves your machine. We do not have access to it, cannot read it, and do not transmit it to any server.

3. Data We May Collect

We collect minimal data only for the following purposes:

License activation: License keys are verified entirely offline on your machine using cryptographic signatures. No data is sent to any server during activation.
Update checks: The app periodically checks for software updates by requesting a small manifest file from our server. Only the app's current version number is sent. No personal data, hardware ID, or sales data is transmitted. We do not log IP addresses or create usage profiles from these requests.
Email support: If you contact us at Nath.bonsai.business@gmail.com, we retain your email address and correspondence to provide support.
Support bundles: If you voluntarily generate and send a support bundle, it may contain diagnostic logs and configuration data (not customer payment data).

4. Data We Do NOT Collect

Customer names, addresses, or personal information from your sales
Credit card numbers or payment details
Your sales data, revenue, or order history
Employee personal information
Location or GPS data
Analytics, telemetry, or usage tracking

5. Third Parties

We do not sell, rent, or share your personal information with any third party except as needed to deliver our service:

Stripe (stripe.com/privacy): Processes subscription payments. We never see your full card number.
SendGrid (sendgrid.com/privacy): Delivers transactional emails (license keys only). Your email address is processed by SendGrid according to their privacy policy.

6. Payment Processing

Bonsai POS does not process, transmit, or store credit card data. You use your own standalone payment terminal and payment processor. We have no access to cardholder data and are not subject to PCI DSS requirements. If you pay for your Bonsai POS subscription via Stripe, Stripe's terms and privacy policy apply to that transaction.

7. Data Retention

Since your data is stored locally, you control its retention. You can delete, back up, or export your data at any time from within the app. If you cancel your subscription, your local data remains on your machine.

8. Children's Privacy

Bonsai POS is a business application and is not directed at children under 13.

9. International Privacy Rights (GDPR / CCPA)

For users in the EU (GDPR) or California (CCPA), additional privacy rights may apply. You may contact us to exercise rights to access, deletion, or portability of your personal data. Our data holdings are limited to: email address, name, purchase history, and license records. We do not hold your business data, sales records, or customer information.

To exercise your rights, email Nath.bonsai.business@gmail.com with the subject "Privacy Rights Request."

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

11. Contact

Questions about this privacy policy? Contact us at Nath.bonsai.business@gmail.com.