Privacy policy

1. Who we are

Bouk Cashier is a cloud point-of-sale and accounting service. For privacy matters: support@boukcashier.com.

The details of the legal entity operating the service (registered name, commercial registration number and address) will be published before the public commercial launch.

2. Our role and the business’s role

We are responsible for the data of business accounts, their users and their subscriptions.

The data of a business’s own customers (such as names and phone numbers on orders and in the customer list) is the business’s responsibility; we process it on the business’s behalf only to provide the service.

3. Data we collect

Business account: name, email, phone and VAT number if entered.

Users: name and email or username. Passwords are stored hashed and cannot be recovered.

Security: IP address, device description and audit logs of sensitive actions.

Operational data entered by the business: products, orders, inventory, expenses and reports.

Subscription: plan, term, amount, payment method and transfer reference. We do not collect payment card data, and online card payment is not enabled yet.

4. Why we use it

To provide the service and run your account, to protect accounts and prevent misuse, to send service messages (welcome, subscription reminders and security alerts), and to meet legal obligations such as tax invoicing requirements.

We do not sell data, do not use it for advertising, and do not use third-party analytics or tracking tools.

5. Where it is stored and who it is shared with

The database and its encrypted backups are on servers in Riyadh, Saudi Arabia, with the hosting provider Oracle Cloud Infrastructure.

Service emails are sent through the email provider Resend, which processes them in Ireland; this includes the email address, store name and message text.

Domain management and routing of incoming support email are handled by Cloudflare.

The Zakat, Tax and Customs Authority when electronic integration is enabled, as required by law.

Any integration the business enables itself (such as webhooks) sends data to the destination the business chooses.

6. Cookies and browser storage

We use only necessary cookies to keep your sign-in session secure and to link approved cashier devices, and browser storage for language and theme preferences and to keep sales made while offline.

We do not use advertising or analytics cookies.

7. Retention

We keep account data while the account exists. When a subscription ends, your data remains available to view and export.

Tax documents, financial records and audit logs are never edited or deleted because they are statutory records, and they are kept for the period required by law.

Duplicate-prevention keys are deleted automatically after 30 days. A detailed retention schedule per category is being finalised and will be published here.

8. Your rights

You can ask to access, correct or delete your data, or to receive a copy of it, by emailing support@boukcashier.com.

A business owner can export their customers’ data or anonymise them from within the system.

Deletion does not cover what the law requires us to keep (such as tax invoices); in that case we remove the personal data and keep the document.

9. Security

Connections are encrypted (HTTPS), passwords are hashed, sensitive secrets are encrypted in the database, each business is isolated from the others at the database level, platform administrators use two-step verification, and backups are encrypted.

10. Changes

We publish any change to this page with its date and notify account owners of material changes by email.