HBComputers
PRIVACY NOTICE
Last updated: October 17, 2026
1. Controller
HBComputers is the controller of personal data used to manage accounts, provide support and protect SITIUS POS. When a business enters customer, supplier or employee data, that business determines its purposes and acts as controller; HBComputers processes it to provide the service under its instructions. Contact: support@sitiuspos.com.
2. Account and access
We process email, profile data, access information, account identifiers and subscription status to create accounts, authenticate you and provide the service, based on performance of the contract. Employee names, roles, PINs and attendance records support access and attendance management under the business's instructions. If you enable fingerprint access, we use a device credential identifier: SITIUS POS does not receive an image of your fingerprint.
3. Business data
The service stores the data you enter: business profile and logo, customers and suppliers (names, contact details, addresses and tax identification), employees, sales, invoices, orders, inventory and reports. It is used to operate the point of sale, synchronize and retain records, generate reports and send closing summaries to configured recipients, based on performance of the contract. The business must have a lawful basis for recording third-party data and inform them of its processing.
4. Contact, support and security
We process names, phone numbers, business names, emails and contact-form messages to respond to requests, based on legitimate interests or steps before entering a contract. Questions sent to the assistant are processed by AI providers to respond; do not include confidential information. We may process IP addresses, device information, error logs and technical usage for security, fraud prevention and reliability improvement, based on legitimate interests. We comply with legal obligations where applicable. If commercial communications or optional tracking requiring consent are introduced, consent will be requested beforehand and can be withdrawn.
5. Recipients
We share necessary data with hosting, storage, authentication, email, support and AI providers that enable the service, including Lovable Cloud services. Paddle acts as Merchant of Record to sell the product and manage subscriptions, payments, taxes and invoicing; it handles purchase data under its own policy. Card payments from your customers, if you configure Stripe for your business, are processed by Stripe, not Paddle. We may also share data with legal or accounting advisers and authorities when required by law. Email reports are sent to recipients configured by the business.
6. Retention
We retain account and business data while needed to provide the service; historical records and period closings are retained to maintain records requested by the business. Messages are retained while handling a request and as needed to resolve complaints. Security logs are kept while necessary to investigate incidents. Additional information may be retained for legal obligations or the defence of claims for applicable periods. When no longer needed, data is deleted or anonymized; backups are removed according to their retention cycle. You can request information or deletion at support@sitiuspos.com.
7. Security and local storage
We apply appropriate technical and organizational measures, including access controls and encryption of communications in transit. No system guarantees absolute security. SITIUS POS also stores business information in the device's browser for operation and synchronizes it with the account. Protect the device, restrict physical access and keep backups; clearing browser storage may delete local copies.
8. Cookies and preferences
Cookies or equivalent storage necessary for sessions, security, language and point-of-sale operation are used. We do not add our own advertising cookies to this service. Paddle and sign-in providers may use necessary storage in their own flows under their notices. You can manage cookies and storage through your browser, although blocking essentials may prevent access or operation. If non-essential analytics or marketing cookies are introduced, consent will be requested where required and preferences can be changed.
9. International transfers
Our providers may process data in countries other than yours. Where EEA or UK rules apply, we will use adequacy decisions, standard contractual clauses or other valid safeguards for such transfers. You may ask about applicable safeguards by emailing support@sitiuspos.com.
10. Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability or objection to processing, and withdraw consent without affecting prior processing. Email support@sitiuspos.com; we may verify your identity. Where the GDPR applies, we will respond within one month, except for a legally justified extension that we will communicate, and you may complain to your data protection authority. For data recorded by your employer or a business in its account, contact that business first; we will assist it in handling your request.