Privacy policy
Last updated: 5 October 2026 · WIFI PALACE FZ-LLC, United Arab Emirates
Palace POS ERP is a point-of-sale service for shops, provided by WIFI PALACE FZ-LLC (“WiFi Palace”, “we”). This policy explains what information we hold, why, and the choices you have. It covers palacepos.com (formerly pos.wifipalace.in) and the Palace POS ERP apps.
1. Who is responsible for which data
Your shop’s records belong to your shop. When a business uses Palace POS ERP, it decides what to record about its own customers and staff. For that information the business is the controller and WiFi Palace only stores and processes it on the business’s behalf. If you are a customer of a shop that uses Palace POS ERP, please contact that shop first about your information.
For the account details of the business owner and their team (below), WiFi Palace is the controller.
2. What we hold
| Information | Examples | Why |
|---|---|---|
| Account details | Business name and type, owner name, email, phone, staff names and logins, passwords and PINs (stored only in hashed form) | To create and secure your account and to contact you about the service |
| Shop records you enter | Products, stock, sales and invoices, expenses, suppliers, staff attendance and pay records, and your customers’ names, phone numbers, dates of birth, addresses, company TRN, purchase history, and job records such as repairs, orders, measurements or prescriptions | To provide the point-of-sale, reports and reminders you use |
| Subscription and billing | Plan, payment status, invoices. Card details are entered on Stripe’s pages and are never seen or stored by us | To charge for the service and keep tax records |
| Technical and security logs | Sign-in attempts, IP address, time of important actions (for example refunds, user changes) | To protect accounts, investigate problems and prevent abuse |
Some shop types can hold sensitive information, for example an optical shop’s eye prescriptions. The shop is responsible for collecting it lawfully and with its customer’s agreement; we store it only to provide the service.
3. Cookies and data on your device
We use one essential cookie to keep you signed in. So the till keeps working without internet, the app also keeps a copy of your shop’s recent records in your browser’s storage on that device. We do not use advertising or tracking cookies.
4. Who we share it with
We do not sell personal information and we do not use your shop’s customer list for our own marketing. We use these service providers, who process data only to deliver their service:
- Hostinger – hosting of the application and its database. Servers may be located outside the UAE.
- Stripe – card payments for your subscription.
- Anthropic – only if the owner uses the optional Palace AI assistant: the question, and the summary of the shop’s own records needed to answer it (for example sales totals, stock levels or a customer’s purchase history), or a supplier bill photo the owner uploads, are sent to Anthropic’s Claude API to produce the answer. Under Anthropic’s commercial terms this data is not used to train their models. Palace AI can only read data and is available to the owner and accountant only.
- Resend – sending account emails such as verification and password reset.
Website visit statistics. On the sales, demo and sign-up pages we count visits, demo shops opened and sign-ups to see how people find Palace POS ERP. We use no cookies for this and keep no IP addresses: each visitor is counted with a code that changes every day and cannot be traced back to a person. Counts are kept for up to 400 days.
WhatsApp messages are sent from your own WhatsApp when you tap a WhatsApp button; Palace POS ERP only opens the chat with the text filled in. We may disclose information when the law of the United Arab Emirates requires it.
5. How long we keep it
We keep your shop’s records for as long as your account is active. If your subscription ends, your records are kept for 90 days so you can return or ask for an export, and may be deleted after that. Tax invoices and billing records for your subscription are kept for the period required by UAE tax law. Backups are overwritten on a rolling basis.
6. Security
Connections are encrypted (HTTPS), passwords and PINs are stored hashed, each business’s records are separated from every other business, and staff logins can be limited by role. No system is perfectly secure: keep your passwords private and your devices locked, and tell us at once if you suspect misuse.
7. Your choices and rights
- The owner can correct or delete most records inside the app, and can export sales and reports.
- You can ask us for a copy of your account data, for correction, or for deletion of your account and its records.
- Customers of a shop should ask that shop; we will help the shop respond.
Write to sales@wifipalace.in. We answer within 30 days. Rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) apply where that law applies.
8. Children
Palace POS ERP is a business tool and is not intended for use by anyone under 18.
9. Changes
If we change this policy in a way that matters, we will tell account owners by email or in the app before the change takes effect.
10. Contact
WIFI PALACE FZ-LLC, United Arab Emirates · sales@wifipalace.in · WhatsApp +971 58 582 3467