YeposPOS Privacy Policy

Last updated: 20 October 2026

YeposPOS is a business application for authorised staff of merchants that use YEPOS services. Staff accounts are provided by the merchant or its administrator; accounts cannot be created inside the app.

Information we process

• Sign-in and account information: merchant group number, staff account identifier, password during sign-in, authentication token, staff profile, company membership and permissions.
• Business operations: products, customers, orders, payments, discounts, collections, pre-orders, terminal selection and related merchant records needed to operate the point of sale.
• Cloud drive content: files and documents that an authorised user chooses to upload, together with file names, folder locations, ownership and sharing settings.
• Device and printer settings: configured receipt-printer details and operational preferences needed to print receipts and pick slips.

Camera and Bluetooth

The camera is used for barcode, collection-code and document scanning. Barcode and collection-code images are processed on the device; the decoded value is used to find the relevant product or order. A scanned document is uploaded only when the user chooses to save it to the merchant cloud drive. A product photo is uploaded only when the user adds it to a product or uses AI photo recognition (below). Bluetooth access is used to discover and connect to compatible receipt printers.

AI photo recognition (optional)

When creating a product, a user may choose “Scan product by photo”. Before the first use the app explains this feature and asks for consent; nothing is sent unless the user agrees. With consent, the single product or box-label photo the user takes or selects is sent through the YEPOS API to OpenAI, a third-party AI provider, to read product details such as name, barcode, specification and units per box. Only that photo is sent; no account credentials, payment details or other personal data are included. The result is used only to pre-fill the product form, which the user reviews before saving. The provider does not use the photo to train its models. Consent can be withdrawn at any time in the app under Settings → General → AI photo recognition → Turn off; products can still be created by typing the details.

Customer enquiries (optional)

Where a merchant enables customer enquiries, staff with permission can read and reply to messages that the merchant’s online customers send. Messages, images and files in these conversations, staff notes, and the customer’s account details and order history that the merchant already holds are stored on and loaded from the YEPOS servers so that staff can answer the customer; they are kept for as long as the merchant keeps the conversation.

AI reply suggestions (optional)

In customer enquiries a staff member may tap to generate suggested replies or opening lines. Before the first use the app explains this feature and asks for consent; nothing is sent unless the user agrees, and nothing is sent automatically. With consent, each time the staff member taps to generate, the YEPOS API sends DeepSeek, a third-party AI provider, the most recent messages of that conversation (up to ten) and a short summary of the customer held by the merchant (recent orders, outstanding balance and frequently bought products; for opening lines, the page the customer is currently viewing on the merchant’s web shop). This content is used only to produce the suggestions shown to the staff member and is processed under DeepSeek’s API terms. A suggestion is never sent to the customer unless the staff member chooses it and sends it. Consent can be withdrawn at any time in the app under Settings → General → AI suggestions in customer support → Turn off; replies can still be typed by hand.

AI sales analysis (optional)

On the product sales analysis page, a user of a merchant on a plan that includes advanced analytics may tap to generate an AI analysis of the selected period. Before the first use the app explains this feature and asks for consent; nothing is sent unless the user agrees, and nothing is sent automatically. With consent, each time the user taps to generate, the YEPOS API sends DeepSeek, a third-party AI provider, the names, quantities and sales amounts by channel of that period’s top 20 products (and the category, if one is selected) and the merchant’s business type. No customer data is included. The content is used only to produce the analysis shown to the user and is processed under DeepSeek’s API terms. Consent can be withdrawn at any time in the app under Settings → General → AI sales analysis → Turn off.

AI customer insights (optional)

On a customer’s page, staff may tap to generate AI insights or a suggested follow-up message for that customer. Before the first use the app explains this feature and asks for consent; nothing is sent unless the user agrees, and nothing is sent automatically. With consent, each time the staff member taps to generate, the YEPOS API sends DeepSeek, a third-party AI provider, that customer’s name and the purchase summary the merchant holds for them (number of orders, total and average spend, last order date, monthly spending trend, and frequently bought products and categories). The content is used only to produce the insight or message shown to the staff member and is processed under DeepSeek’s API terms. Nothing is sent to the customer unless the staff member chooses to send it themselves. Consent can be withdrawn at any time in the app under Settings → General → AI customer insights → Turn off.

How information is used

We process this information to authenticate staff, enforce merchant permissions, provide point-of-sale and order workflows, synchronise merchant records, transfer files selected by users, print business documents, prevent misuse, diagnose failures and support the merchant.

Storage and service providers

Data is transmitted over encrypted connections to YEPOS-operated services and contracted infrastructure providers that host the business API and cloud-file storage. Authentication credentials are protected by the Apple Keychain. The app may keep operational caches and user-selected offline files on the device and in its private App Group container. We do not sell personal information and do not use the app for third-party advertising or cross-app tracking.

Retention and control

Business records are controlled by the merchant and retained according to its operational, contractual and legal requirements. Local credentials are removed when the user signs out; cached or offline business content may remain until removed in the app, removed by the merchant, or the app is deleted. Staff who need access corrected or removed should contact their merchant administrator first.

Contact

For privacy questions or requests, contact YEPOS at info@yepos.co.uk or call +44 7550 006600.