Privacy Policy

We collect and process various types of personal information to provide and improve our services. This includes: • Personal Identification Information: Full name, email address, phone number, business name, company address • Business Information: Type of business, number of locations, store/branch details, existing POS system information • Transaction Data: Sales records, inventory data, customer purchase history, payment information • Technical Information: IP address, browser type, device information, operating system, usage data • Location Data: Geographic location for service delivery and support • Communication Data: Your inquiries, feedback, support requests, and correspondence with us • Account Credentials: Username, password (encrypted), and authentication data • Financial Information: Payment details, billing information, bank account details for payment processing • Employee Data: Staff information entered into our system for business management purposes By using MxiPOS services, you acknowledge and consent to the collection of all information necessary for providing our point-of-sale solutions.

We use the collected information for the following purposes: • Service Delivery: To provide, operate, and maintain our POS system and related services • Account Management: To create and manage your account, process registrations, and authenticate users • Business Operations: To process transactions, manage inventory, generate reports, and support your business operations • Customer Support: To respond to inquiries, provide technical support, and resolve issues • System Improvements: To analyze usage patterns, improve our services, and develop new features • Communication: To send service updates, notifications, promotional materials, and important announcements • Security: To detect, prevent, and address fraud, security issues, and technical problems • Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights • Marketing: To provide personalized recommendations and marketing communications about our services • Analytics: To understand how our services are used and optimize user experience

We may share your information with: • Service Providers: Third-party vendors who assist in providing our services (payment processors, cloud storage, email services) • Business Partners: Authorized partners who help deliver our solutions • Legal Requirements: Government authorities when required by law, court order, or legal process • Business Transfers: In connection with any merger, sale, acquisition, or transfer of our business • Consent: Other parties when you provide explicit consent We do not sell your personal information to third parties for their marketing purposes. However, we may share anonymized and aggregated data that does not identify you personally.

We implement appropriate technical and organizational security measures to protect your information: • Encryption: Data is encrypted both in transit (using SSL/TLS) and at rest • Access Controls: Strict access limitations to authorized personnel only • Regular Security Audits: Periodic reviews and updates of our security practices • Secure Infrastructure: Cloud-based systems with enterprise-grade security • Employee Training: Staff trained on data protection and privacy practices • Incident Response: Procedures in place to respond to security breaches However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights: • Right to Be Informed: You have the right to know how your data is being collected, used, and shared • Right to Access: You can request access to your personal information we hold • Right to Object: You may object to the processing of your personal data • Right to Erasure or Blocking: You can request deletion or blocking of your data under certain conditions • Right to Rectification: You can request correction of inaccurate or incomplete data • Right to Data Portability: You can request a copy of your data in a structured, commonly used format • Right to File a Complaint: You may file a complaint with the National Privacy Commission (NPC) • Right to Damages: You have the right to claim damages for violations of your rights To exercise these rights, please contact us using the information provided below.

We retain your personal information for as long as necessary to: • Provide our services and maintain your account • Comply with legal, accounting, or regulatory requirements • Resolve disputes and enforce our agreements • Support business operations and record-keeping Transaction data and business records are typically retained for at least five (5) years as required by Philippine law. Account information is retained as long as your account is active. Upon account closure or deletion request, we will delete or anonymize your data, except where retention is required by law.

We use cookies and similar tracking technologies to: • Remember your preferences and settings • Analyze site traffic and usage patterns • Provide personalized content and advertisements • Improve security and prevent fraud • Enable certain features and functionality You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our services.

Our services may integrate with third-party applications and services (payment gateways, accounting software, delivery platforms). These third parties have their own privacy policies and terms. We are not responsible for their privacy practices. We encourage you to review their policies before sharing information with them.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

Your information may be transferred to and processed in countries outside the Philippines. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by: • Posting the updated policy on our website • Sending an email notification to your registered email address • Displaying a prominent notice on our platform The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

By using MxiPOS services, registering for an account, or providing your information to us, you consent to the collection, use, processing, and disclosure of your personal information as described in this Privacy Policy. You may withdraw consent at any time by contacting us, though this may affect your ability to use certain services.