Privacy Policy
Effective date: 1 January 2025 · Last updated: 1 May 2026
1. What data we collect
We collect information you provide directly: your name, email address, restaurant details, and billing information during registration. We also automatically collect usage data (pages visited, features used, device type, IP address) and restaurant operational data (orders, products, table data) that you enter into FranjoPos.
2. How we use your data
We use your data to provide and improve FranjoPos, send transactional emails (receipts, invoices, account updates), provide customer support, generate aggregate analytics to improve our product, and comply with legal obligations. We do not sell your data to third parties.
3. Data storage & security
Your data is stored on servers in the EU (Frankfurt, Germany) operated by Hetzner Cloud. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We perform daily encrypted backups retained for 30 days.
4. Third-party processors
We use a limited number of trusted sub-processors: Stripe (payments), Resend (transactional email), Cloudflare (CDN and DDoS protection), and Sentry (error monitoring). All processors are GDPR-compliant and bound by data processing agreements.
5. Your rights (GDPR)
Under GDPR you have the right to: access your personal data, correct inaccurate data, delete your data (right to be forgotten), export your data in a portable format, restrict or object to processing, and withdraw consent at any time. To exercise any of these rights, email [email protected].
6. Data retention
We retain account data for the duration of your subscription plus 90 days after cancellation. Operational data (orders, products) is retained for 3 years for accounting purposes. You may request early deletion by contacting us.
7. Cookies
We use essential cookies (session management, CSRF protection) and analytics cookies (Plausible Analytics — privacy-friendly, no cross-site tracking). See our Cookie Policy for full details.
8. Changes to this policy
We will notify you by email at least 30 days before any material changes to this Privacy Policy. Continued use of FranjoPos after the effective date constitutes acceptance.
9. Contact
Data Controller: FranjoPos GmbH, Berlin, Germany. Data Protection Officer: [email protected]. For privacy requests: [email protected].