Privacy Policy

1. Information We May Collect

• Account information such as name, email address, phone number, profile details, and account credentials.
• Transaction information such as top-ups, payments, refunds, store card activity, balance usage, timestamps, and historical records.
• Merchant and business information such as business name, contact information, public display names, machine setup data, and business configuration details.
• Technical and device information needed to operate the service, support performance, troubleshoot issues, prevent fraud, and maintain platform integrity.

2. Payment and Operational Data

• Digital payment-related data may be processed through third-party services such as Stripe or other payment infrastructure providers used by Kashless.
• Physical kiosk interactions may generate operational records, timestamps, session references, kiosk identifiers, BLE-related events, QR session data, and transaction metadata.
• Kashless may store and synchronize balance, store card, and merchant-related operational data to support user experience, reconciliation, support, and reporting.

3. Machine, Device, and Status Data

• Kashless may process machine-related operational data associated with participating businesses, including machine codes, machine names, business associations, status updates, and related service events.
• Connected devices such as kiosks, controllers, BLE-enabled equipment, relays, or operational reporting devices may send technical and operational events to Kashless.
• Operational device records may include connectivity data, timestamps, machine status events, device identifiers, queue or command events, and service telemetry reasonably necessary to operate or support the platform.

4. Public Business Monitor and Display Data

Kashless may offer businesses the ability to enable operational display tools such as public business monitors. These displays may show machine availability, status, machine names, or machine codes configured by the participating business.

These public operational displays are intended to present equipment or service status and are not intended to display personal customer data.

5. Permissions and Device Access

• Camera access may be used for scanning QR codes.
• Bluetooth access may be used for kiosk communication, nearby device communication, and BLE-supported operational flows.
• Internet access may be used for transaction synchronization, dashboard reporting, payment confirmation, balance updates, business operations, and general system functionality.

6. How We Use Information

• To create, manage, secure, and maintain user and business accounts.
• To process payments, top-ups, refunds, transaction records, and balance operations.
• To operate kiosk, wallet, store card, business dashboard, machine setup, and monitor functionality.
• To support public business monitor features and business-configured operational visibility tools.
• To prevent fraud, abuse, duplication, chargeback risk, technical misuse, and operational manipulation.
• To support diagnostics, reconciliation, security, reporting, analytics, and platform reliability.

7. Sharing of Information

Kashless may share limited information with payment processors, infrastructure providers, cloud service providers, analytics or security providers, and operational service providers where reasonably necessary to operate the platform, process payments, protect the service, or support merchants and users.

Kashless does not sell personal information in the ordinary commercial sense commonly associated with consumer data brokerage.

8. Data Storage and Security

Kashless uses technical and organizational safeguards designed to protect information against unauthorized access, misuse, alteration, or loss. However, no platform, network, or device environment can guarantee absolute security. Users and merchants are also responsible for protecting local access, credentials, and business-side equipment.

9. Retention

Kashless may retain account, business, transaction, payment, operational, technical, fraud-prevention, device, machine-status, and compliance-related records for as long as reasonably necessary to operate the service, investigate issues, resolve disputes, comply with applicable legal obligations, and preserve platform integrity.

10. Your Rights

Depending on applicable law, users and merchants may have rights relating to access, correction, deletion, restriction, or objection with respect to certain personal data. The exact handling of these rights may depend on the legal jurisdiction, business relationship, and applicable regulatory framework.

11. Merchant and Business Responsibilities

Participating businesses are responsible for the accuracy of their own machine naming, public operational display settings, business information, and equipment mapping where they configure or manage those elements through Kashless tools.

12. Changes to This Policy

Kashless may update this Privacy Policy from time to time to reflect product changes, legal developments, business operations, or service improvements. Continued use of the platform after an update may be treated as acceptance of the updated policy where permitted by law.

13. Contact

For privacy-related questions or requests, contact:
contacto@kashlessapp.com