Privacy Policy

Last updated 31 August 2026

The short version. Payotie is a point-of-sale app for venues. We store the information a venue needs to run its business — its catalog, staff, sales, customers and event tickets — and nothing else.

We do not sell data, we run no advertising, and the app contains no analytics or tracking scripts of any kind. We never see or store card numbers. Questions: support@payotie.com.

1. Who this policy is for

Payotie ("we", "us") provides software to businesses — bars, restaurants, cafés and theatres ("the venue"). This policy covers two different groups, and the distinction matters:

Venue owners and staff who hold a Payotie account. We decide how that account data is handled, so for this we are the data controller.
A venue's own customers and guests — the people whose names and contact details a venue records in Payotie. The venue decides what to collect and why. We only hold and process it on the venue's behalf, so for this we are a processor and the venue is the controller.

If you bought a ticket or gave your details to a venue that uses Payotie, that venue is responsible for your information. Contact them first — and we will help them respond.

2. What we hold

What	Why it exists
Account — sign-in email and password, business name, address, phone, settings, tax rate, currency, receipt branding and logo	To run your account and print your receipts. Passwords are handled by Google Firebase Authentication; we never see them.
Staff — name, a 4-digit register code, role and permissions, and an optional email for their welcome message	So staff can unlock the register and only reach what their role allows.
Customers — name, email, phone, loyalty points and purchase history, as recorded by the venue	The venue's own customer list, for loyalty and for reaching its customers.
Event bookings — booker's name, email and phone, attendee names, ticket codes, whether a ticket is paid, and check-in times	To issue tickets, email them, and let the door verify who has arrived and what is owed.
Sales and shifts — items, totals, discounts, tips, payment method, the employee who served, timestamps and cash-drawer counts	Receipts, reports and end-of-shift reconciliation.
Device — your language choice, the register's name, and data cached so the app keeps working when the internet drops	Kept on the device itself. If you switch on the store-network restriction, we also record your venue's public IP address so the register only works on your premises.

What we deliberately do not hold

Card numbers. Payments are handled entirely by Stripe, PayPal or Mercado Pago. Card details go to them, never to us.
Photographs from your camera. Scanning a ticket QR code happens on the device. The image is never uploaded or stored — only the ticket code is read from it.
Location. The app does not request or track location.
Behavioural or advertising data. There are no trackers, no advertising identifiers, and no third-party analytics in the app or on this website.

3. Payments

There are two separate money flows, and they are worth separating clearly:

Your subscription to Payotie. Billed through Stripe, PayPal or Mercado Pago. They process the payment and we receive confirmation and renewal dates — not your card.
Ticket sales for your events. The money goes directly into your own Stripe, PayPal or Mercado Pago account using keys you provide. Payotie never holds, routes or takes a cut of your ticket revenue.

4. Who else touches the data

We use a small number of service providers, and only these:

Google Firebase — sign-in, database and file storage. This is where account and venue data lives.
Hostinger — website hosting and the email we send on your behalf, such as tickets and welcome messages.
Stripe, PayPal, Mercado Pago — payments, as described above.
OpenAI — only if you switch on the AI Product Images add-on and supply your own OpenAI key. The item description you type is sent to generate a picture. Leave the add-on off and nothing is ever sent.

We do not share data with anyone else, and we do not sell it. We may disclose information if the law requires it.

5. Email we send

We send email that the service needs to work: ticket confirmations to a venue's guests, welcome messages to staff, receipts when a venue chooses to email one, and messages a venue writes to its own attendees. These are sent on the venue's behalf. Payotie does not send marketing email to a venue's customers.

6. How long we keep it

Venue data is kept while the account is active, because a business needs its own sales history. You can delete customers, attendees, shifts and events yourself at any time from within the app. Deleting a shift also deletes the sales recorded during it, and cannot be undone. If you close your account, ask us at support@payotie.com and we will delete your data, keeping only what we must for tax and accounting records.

7. Your rights

You can ask us to give you a copy of your data, correct it, or delete it. Write to support@payotie.com. If your request concerns information a venue collected about you as their customer, we will pass it to that venue, since it is their record to act on.

8. Security

Data is encrypted in transit. Access to the register can be locked to staff codes, restricted by role, and optionally confined to your venue's own internet connection. No system is perfectly secure, but we keep the moving parts few and the data we hold small on purpose.

9. Children

Payotie is a tool for businesses and is not intended for children.

10. Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.

11. Contact

Payotie — support@payotie.com