Privacy Policy

Information we collect

• •Account information: When you create a ClawPOS account, we collect your name, email address, business name, and billing information.
• •Transaction data: We process and store data about sales, orders, inventory, and customers on your behalf as part of the POS service.
• •Usage data: We collect information about how you interact with ClawPOS, including pages visited, features used, and session duration.
• •Device information: Browser type, operating system, IP address, and device identifiers are logged for security and performance purposes.
• •Payment information: Card details are processed by our payment partners (Stripe, Square). We store only tokenised references — never raw card numbers.

How we use your information

• •Providing the service: Your data is used to operate, maintain, and improve ClawPOS, including running AI agents on your behalf.
• •Communications: We send transactional emails (receipts, invoices, agent alerts) and, with your consent, product updates and tips.
• •Security: Usage and device data is analysed to detect fraud, abuse, and unauthorised access.
• •Analytics: Aggregated and anonymised usage data helps us understand how features are used and where to invest product effort.
• •Legal compliance: We may process your data to comply with applicable law, including tax reporting and audit obligations.

Data sharing

• •We do not sell your personal data to third parties, ever.
• •Service providers: We share data with sub-processors (e.g., AWS for hosting, Stripe for payments) under strict data processing agreements.
• •Integrations: When you connect a third-party integration (e.g., Xero, Shopify), data is shared with that service in accordance with your configuration.
• •Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of ClawPOS and its users.

Data retention

• •Account data is retained for the duration of your subscription and for 90 days after cancellation, during which you can request an export.
• •Transaction records may be retained for up to 7 years to comply with financial and tax reporting obligations in applicable jurisdictions.
• •You may request deletion of personal data at any time; some data may be retained where required by law.

Your rights

• •Access: You have the right to request a copy of the personal data we hold about you.
• •Rectification: You may request correction of inaccurate or incomplete data.
• •Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• •Portability: You can export your account and transaction data at any time from the dashboard.
• •Objection: You may object to processing based on legitimate interests or for direct marketing purposes.
• •To exercise any of these rights, email privacy@clawpos.com.

Security

• •ClawPOS is SOC 2 Type II certified and PCI-DSS compliant. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• •Access to production systems is restricted to authorised personnel via MFA and audit-logged access controls.
• •We conduct annual penetration tests and continuous vulnerability scanning.

Cookies

• •We use strictly necessary cookies to maintain your session and security state. See our Cookie Policy for full details.
• •We use analytics cookies (with your consent) to understand usage patterns. These can be disabled via the cookie banner or your browser settings.

Changes to this policy

• •We may update this Privacy Policy from time to time. Material changes will be communicated by email and with at least 30 days notice before taking effect.
• •Continued use of ClawPOS after the effective date constitutes acceptance of the updated policy.

Contact our Data Protection Officer at privacy@clawpos.com or write to ClawPOS Ltd, 12 Bermondsey Street, London SE1 3UD.