Privacy Policy

1. Who we are

RetailAxo is a point-of-sale application made by Triaxo ("we", "us"). Triaxo is the data controller for the information described here. You can reach us at support@retailaxo.com.

This policy covers the RetailAxo app on Windows, macOS and Android, and the website at retailaxo.com. It is written for the shop owner who creates the account. If you are a customer of a shop that uses RetailAxo, that shop is responsible for how it handles your details; section 3 explains what we hold on its behalf.

2. What we collect

Account information

When you create a store we collect your email address, a password (stored only as a one-way hash — we cannot read it), your store name and address, and optionally a phone number and a store logo. These identify your account and appear on your receipts.

Device information

A RetailAxo licence is tied to one device. To enforce that, the app sends us a device identifier, the device's name, model and operating-system version, the app version, a hashed fingerprint of stable hardware characteristics, and whether the device offers hardware-backed secure storage. We use these only to recognise your device and to detect an account being copied onto another one. The fingerprint is a one-way hash; we do not receive the underlying identifiers.

Licence and billing

We record your plan, your trial and subscription dates, and — when you tell the app you have paid — a payment claim containing the plan, the amount, an optional bank reference you typed, and the time. Payment is by bank transfer directly to us; we never see or store card numbers, bank logins or any payment credentials.

Technical and support information

Our servers keep short-lived request logs (time, endpoint, outcome) to keep the service running and to investigate problems. If you email us, we keep the correspondence so we can help you.

3. Your store's data

Your store's records — products, sales, customers, suppliers, expenses, register sessions, team members and settings — are stored in an encrypted database on your own device. Where they go beyond that depends on your plan:

Cloud backups exist for one purpose: to give your store back to you. We do not read, analyse, sell or use them for advertising. You can stop backing up at any time by moving to Local Solo, and you can ask us to delete your backup (section 8).

4. How we use your information

• To create and operate your account and licence, and to tie it to your device.
• To verify your payment and unlock or renew your plan.
• To back up and restore your store, if you are on Cloud Solo.
• To tell the app where to download an update and whether an update is required.
• To answer your support requests.
• To keep the service secure — for example, limiting repeated failed sign-in attempts.

We do not use your information for advertising, and we do not build profiles of you or your customers.

5. Who we share it with

We do not sell personal information. We share it only with:

• Hosting. Our servers and database run on Microsoft Azure in the West Europe region. Microsoft processes data on our behalf under its own terms.
• Google Play. If you install through Google Play, Google handles the download and any purchase you make there under its own policies. We do not receive your Google Play account details from it.
• Your bank. When you pay by transfer, your bank sees the transaction. We see only what arrives in our account and the receipt you send us.
• When the law requires it, or to protect our rights or someone's safety.

6. Security

• Your store's database is encrypted at rest on the device with a key held in the device's own secure store (Keychain, Keystore or Credential Manager).
• All communication with our servers uses HTTPS.
• Passwords are stored only as scrypt hashes; nobody at Triaxo can read your password.
• Session tokens are stored as hashes on our side, and a sign-in on a new device invalidates the old one.
• Repeated failed sign-in attempts are rate-limited.

No system is perfectly secure. Keep your password private, keep your device locked, and set a till PIN for each member of staff.

7. How long we keep it

• Account and licence records — for as long as your account exists, and for a short period afterwards to resolve any billing question.
• Cloud backups — until you delete your account, ask us to remove them, or move to Local Solo and request deletion.
• Payment claims — as long as needed for our accounting obligations.
• Server logs — a limited rolling period, typically no more than 90 days.

8. Your rights, and deleting your account

You can ask us to show you the information we hold about you, correct it, or delete it. To delete your account and everything we hold for it — including any cloud backup — email support@retailaxo.com from the email address on the account with the subject "Delete my account". We will confirm the request and complete the deletion within 30 days. Deleting your account ends your licence; the data on your own device is yours to keep or erase.

If you are in a jurisdiction that grants you additional rights, such as the right to data portability or to object to processing, you may exercise them by contacting us the same way.

9. This website

retailaxo.com is a static site. It sets no tracking cookies and runs no analytics. The only thing it stores in your browser is your light/dark theme preference, and the only network requests it makes on your behalf are to load fonts from Google Fonts and to ask our server for the latest Windows build number on the download page. The contact form opens your own email app; nothing you type is sent to us until you choose to send that email.

10. Changes to this policy

If we change how we handle your information we will update this page and, for material changes, tell you in the app. The effective date at the top is the version you are reading.

11. Contact

Privacy questions or requests: support@retailaxo.com. Anything else: contact@retailaxo.com.

RetailAxo is a product of Triaxo — triaxo.com.