POSgram.

Privacy Notice

Last updated: 3 November 2026

1. Who we are and what this notice covers

Fainesse Services (003834910-D), Malaysia, operates POSgram. This notice explains how we handle personal data about website visitors, store owners, staff and receipt recipients. Contact admin@faifadz.my for privacy questions. A store business is responsible for its own use of staff and customer information; contact that business first about its sales records.

2. Information and sources

We receive information you provide during Free or Premium registration, account access, store setup and support, including email addresses, business details and messages. Premium stores hold menus, prices, stock, sales, cash movements, shift and staff labels, store settings and any customer email supplied for a receipt. Stripe supplies subscription status, customer and subscription identifiers and billing events; POSgram does not receive full card details from hosted checkout.

3. Free stores and basic usage data

Free store records normally travel directly between your browser and your own Google Sheet through Apps Script. We do not host those records as a Free store database. Importing to Premium copies the selected records into hosted storage. The app also sends basic usage events for Free and Premium, including a pseudonymous client ID, event name, plan, app version, device/browser type, screen size, language, timezone and limited event properties. These are separate from your Google Sheet. Servers process network information such as IP addresses for requests, security and rate limiting. This notice does not describe usage data as anonymous.

4. Why we use information

We use information to run accounts and stores, confirm access, handle subscriptions, send requested account emails and receipts, synchronise sales, support recovery, prevent abuse, answer support requests and understand app use so we can improve it. Supply a working email for Premium access; without necessary account and billing information we cannot provide Premium. A customer receipt email is optional; without it we cannot send that receipt by email.

5. Providers, disclosures and overseas processing

Railway provides hosted application, database and backup infrastructure; Stripe handles subscription billing; Resend sends account and receipt emails; Google provides the Sheets and Apps Script services used by Free owners. Providers may process information outside Malaysia under their own service arrangements. We share information needed for these functions, authorised support and legal or security obligations. We do not sell personal data or use receipt email addresses as a marketing mailing list. If you contact us, the email service handling that conversation also processes your message.

6. Cookies, device storage and choices

The public landing page stores your EN/BM preference locally. It does not load advertising trackers. The POS app uses an owner-session cookie, browser storage and an offline cache for connections, preferences, menus, access checks, unpaid orders and queued sales. Shared devices should be locked and signed out when not in use. Device & privacy controls let you manage remembered details. The usage-sharing switch below controls future app telemetry on this browser. Turning off usage sharing stops future app telemetry; it does not erase earlier records or essential security processing. Sync pending sales before forgetting a device or clearing browser data.

7. Security and retention

We use access controls, protected sessions and encrypted backup files to reduce risk. No system or device can be guaranteed completely secure. Hosted records, delivery records, usage events and support information are retained to operate and support the service, recover data and meet applicable obligations. Account cancellation does not automatically delete store records. There is no single automatic deletion period for all record types. Backup copies expire through backup rotation rather than being removed instantly. Contact us for a retention or deletion request; we will explain any information that must be retained. Your Free Sheet and your own exports remain under your control.

8. Access, correction and privacy requests

Email admin@faifadz.my to request access, correction, deletion, limits on processing or withdrawal of consent where applicable, or to raise a complaint. We may need to verify your identity and authority without asking for your password or PIN. Some requests may affect service availability or be subject to legal retention requirements. For information held only in your own Google Sheet, use your Google controls; for a receipt or sale managed by another business, contact that business. You may also contact Malaysia’s Personal Data Protection Commissioner through pdp.gov.my.

Owner accounts and Free store registration

New Free owners register with Google sign-in or an email and password. We retain the account email, verified status, password hash where applicable, linked Google identity identifier, terms acceptance, security/session records and a small Free store registration. The registration holds the store display name, internal identifiers and a one-way deployment fingerprint. We do not retain your Free Apps Script URL, Sheet URL, store PIN or Apps Script session token in that registration. A supplied deployment URL is processed temporarily to verify deployment control; this does not establish legal ownership of a Sheet. Your device still remembers its connection locally.

Google sign-in requests identity access only, not Drive or Sheets access. Verification and recovery emails support account access; registration does not subscribe you to promotional email. Unverified Free-only registrations may be removed after seven days if they have no billing or store relationship. Existing accountless counters can continue during the gradual transition. Contact us for account or personal-data requests; disconnecting a registration does not delete your Google Sheet or revoke other devices.

The public demo uses sample data in browser memory, resets on reload and does not use a real store, payment provider or email recipient.

9. Updates

We may update this notice as the service changes. We will take reasonable steps to notify affected users of material changes. Both English and Bahasa Malaysia versions are available using the language buttons above.

Your choice on this device

This applies to future app events on this browser. Essential service and security processing continues. Reload an already-open POS tab after changing this preference.