Privacy Policy

Data we collect about you

As our customer:

• Account — business name, contact name, email, phone, country, and the login credentials of each user you create.
• Billing — plan, user count, invoices and payment status. Card details are handled by the payment provider; we never see or store a full card number.
• Support — the messages, screenshots and files you send us.
• Technical — IP address, device and app version, and error logs. We use these to keep the service running and to diagnose faults.

Data you put into the service

Running a business in MCPOS Cloud means storing records that often contain other people's personal data: customers with names, phone numbers and purchase history; staff with contact details, attendance, salary and payslips; vendors and their contacts.

We do not decide what you store or how you use it. We process it to provide the service, to support you when you ask, and for nothing else. Specifically we do not sell it, do not share it for advertising, and do not use it to train AI models.

Why we use it

• To provide the service you subscribed to, including syncing your devices.
• To bill you and collect payment.
• To provide support you have asked for.
• To keep the service secure, detect abuse and prevent fraud.
• To send service messages — renewals, outages, material changes. These are not marketing and you cannot opt out of them while you hold an account.
• To improve the product in aggregate, using statistics that do not identify a business or a person.

Where the law requires a lawful basis, ours is performance of our contract with you, our legitimate interest in running and securing the service, and consent where consent is what applies — for example marketing email you opted into.

AI features

AI Assistance answers questions about your own business data. When you ask a question, the relevant records are sent to the AI provider to produce the answer.

• Your data is not used to train the provider's models.
• Answers are generated for you and returned to your account only.
• If you would rather no data left your account this way, do not enable the AI add-on — it is optional and off by default.

WhatsApp and messaging

If you use WhatsApp features, messages are sent through WhatsApp Business on your own number, so the conversation and the customer relationship stay yours. Delivery is subject to WhatsApp's own terms and privacy policy.

You are responsible for having a lawful basis to message the people you message, and for honouring opt-outs.

Who else processes data

We use a small number of providers to run the service. Each processes data only as needed for its function:

• Cloud hosting — running the application and storing your data.
• Payment providers (including Stripe and UPI providers) — taking payment. They receive what they need to process the transaction.
• WhatsApp Business — delivering the messages you send.
• AI provider — generating answers, only when the AI add-on is on.
• Google Play and the Apple App Store — distributing the mobile apps and their own crash and install analytics.
• Google Analytics — website traffic on mycodlabs.com only. It does not run inside the POS.

For an enterprise procurement review we can provide the current sub-processor list with named entities and hosting regions. Email mcpos@mycodlabs.com.

International transfers

We operate in the UAE and serve customers in more than twenty countries, so data may be processed outside the country where it was collected. Where that happens we rely on the safeguards available to us, including contractual protections with our providers. If your jurisdiction requires data to stay in-country, tell us before you subscribe so we can confirm whether we can meet that.

Security

• Traffic between your devices and the cloud is encrypted in transit (HTTPS/TLS).
• Access is controlled by role-based permissions you configure, so staff see only what their role allows.
• Edits and deletions are recorded in an audit trail.
• Our own access to customer data is limited to what support requires.

No system is perfectly secure. If a breach affects your data we will tell you without undue delay and describe what happened and what we are doing.

How long we keep it

• While you are a customer — for as long as the account is open.
• After termination — available for export for 90 days, then deleted from active systems, with backups ageing out on their normal cycle.
• Invoices and accounting records — kept as long as tax law requires, regardless of account closure.

You can ask for earlier deletion; we will do it except where we are legally required to retain a record.

Your rights

Depending on where you live you may have the right to access, correct, export, delete or restrict the use of your personal data, and to object to certain processing.

Exercise any of these by emailing mcpos@mycodlabs.com. We respond within 30 days and do not charge for a reasonable request.

If your request is about data a business holds about you in their MCPOS account — for example you are a customer of a shop that uses MCPOS — contact that business. They control it; we will assist them.

Cookies

mycodlabs.com uses cookies for basic site function and for Google Analytics traffic measurement. You can block them in your browser without losing access to the site.

The MCPOS applications use local storage to keep you signed in and to hold offline records on the device. That is required for the product to work and is not advertising tracking.

Children

MCPOS Cloud is business software and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child's data has reached us, tell us and we will remove it.

Changes to this policy

We may update this policy. The "last updated" date at the top reflects the current version, and we will give notice of material changes by email or in the product before they take effect.