Privacy Policy

Storm Software ("we", "our", or "us") operates the Storm POS application and the Storm Software website at stormsoftware.co.za. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using our services - including the Storm POS web app, Windows desktop app, or Android app - you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you register for Storm POS, we collect:

• Full name and email address
• Company name
• Password (stored securely as a hashed value - never in plain text)
• Subscription plan details

Business Data

As you use Storm POS, we store data you enter into the system:

• Sales records and transaction history
• Product and inventory information
• Customer names, email addresses, and phone numbers
• Staff account details
• Invoices and quotes
• Business settings, logo, and branding

Technical Information

When you access our service, we may automatically collect:

• IP address and device type
• Browser type and operating system
• Pages visited and features used (for improving the service)

2. How We Use Your Information

We use your information solely to provide and improve the Storm POS service:

• To create and manage your account
• To store and display your business, sales, and customer data within the POS system
• To send transactional emails (e.g. welcome email, account notifications)
• To process subscription billing
• To provide customer support
• To diagnose technical issues and improve the application

3. Data Sharing

We do not sell, rent, or trade your personal information to any third party.

We may share limited information only in the following circumstances:

• Service providers: We use trusted infrastructure providers (e.g. database hosting, email delivery) that process data strictly on our behalf and under confidentiality agreements.
• Legal obligations: If required by South African law or a valid legal process, we may disclose information as necessary.

4. Data Storage and Security

Your data is stored in a secure, encrypted PostgreSQL database. We apply industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Password hashing using bcrypt
• Access controls limiting who can view your data
• Regular security reviews

While we take security seriously, no system is completely immune to risk. We encourage you to use a strong, unique password for your account.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will permanently delete your data within 30 days, except where we are required to retain it for legal or accounting purposes.

6. Storm POS Android App

The Storm POS Android app is a WebView-based application that loads the Storm POS web service at stormsoftware.co.za. The app itself does not collect any additional data beyond what the web service collects as described in this policy.

The app does not:

• Access your device contacts, camera, microphone, or location
• Store any data locally on your device beyond standard browser cache
• Track you across other apps or websites

7. Your Rights

Under the Protection of Personal Information Act (POPIA) of South Africa, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Object to certain processing of your data
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at the email address below.

8. Cookies

Our web application uses session cookies to keep you logged in. We do not use third-party tracking cookies or advertising cookies. You may disable cookies in your browser settings, but this will prevent you from logging in to Storm POS.

9. Children's Privacy

Storm POS is a business application intended for use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our services after any changes constitutes your acceptance of the updated policy.