Security at POSanalyst
What POSanalyst does to keep your shop's data safe, and who else touches it. Everything here is also in the privacy notice or in how the service is built.
We only read from Loyverse
POSanalyst reads your sales from Loyverse and never changes anything in your Loyverse account.
Your Loyverse access token is encrypted before it is stored. You can disconnect at any time, which deletes the token and the copy of your data (how to delete your data).
Where your data is kept
Data is stored in a database in Singapore. Each shop's data is kept apart from every other shop's. We do not sell or share it.
Deleted data can stay in our encrypted backups for up to one year, until those backups expire and are overwritten. Backups are stored with Cloudflare R2 and may include a copy at our own site in Thailand.
Signing in
Sign-in is handled by Clerk, which keeps sign-in data on its own servers. You can sign in with LINE.
API keys and AI assistants
If you create an API key, it is shown once, when you create it. We keep the key's name and a one-way fingerprint of it, never the key itself.
The API and connected AI assistants can only read your reports. They cannot change anything in POSanalyst or Loyverse. Receipts sent through the API contain items, amounts and payment types only, never customer or staff details. Revoke a key or disconnect an assistant at any time in Settings → API & AI.
We keep a record of each request (when, which report, and whether it worked) for 90 days. We do not keep the answers we sent.
Connections
POSanalyst is served over HTTPS only, and browsers are told to use HTTPS for the next year.
Service providers
These are the services that handle data for POSanalyst, the same as in the privacy notice. Each handles data under its own terms.
- Clerk
- Handles sign-in and keeps sign-in data on its own servers.
- Cloudflare R2
- Stores our encrypted backups.
- Cloudflare Web Analytics
- Counts page views. It sets no cookies and does not identify you.
- LINE
- If you sign in with LINE or use POSanalyst in LINE: sign-in, the chat and the daily summary go through LINE.
- Telegram, email and WhatsApp (Meta)
- Only if you choose one of them for your daily summary. We pass the summary to the service you chose.
- AI assistants
- Only if you connect one (such as Claude or ChatGPT). What we send it is handled by that assistant's provider under its own terms.
Report a security problem
If you think you have found a security problem, write to hello@posanalyst.com.