Privacy Policy for FIT POS Master
Effective Date: January 1, 2026 • Last Updated: October 2026 • Application Slug: pos-master
1. Introduction & Scope
This Privacy Policy describes how FIT Apps ("we", "us", or "our") collects, processes, stores, and protects merchant and customer data when you install or use the FIT POS Master application on your e-commerce store.
2. API Scopes & Information We Access
To deliver its core functionality (High-speed in-store POS register & multi-branch billing.), FIT POS Master requests only the minimum required API permissions:
read_products- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.write_products- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.read_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.write_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.read_draft_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.write_draft_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.read_customers- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.read_locations- Used strictly to synchronize and process store records configured by the merchant inside FIT POS Master.
3. Mandatory GDPR & Privacy Webhooks
FIT POS Master implements and verifies all mandatory privacy webhooks using HMAC-SHA256 cryptographic validation:
customers/data_request: Exports all stored records associated with the requested customer ID within 72 hours.customers/redact: Permanently anonymizes and purges personal customer data upon request.shop/redact: Automatically deletes all store configuration tokens, logs, and cached metadata within 48 hours of app uninstallation.
4. Infrastructure Security & Data Retention
All data transmitted by FIT POS Master is encrypted in transit via TLS 1.3 and encrypted at rest (AES-256) on Google Cloud Run infrastructure. We never sell, rent, or monetize merchant or buyer data.
5. Data Protection Officer & Contact
For privacy inquiries, data subject access requests (DSAR), or security audits regarding FIT POS Master, contact our Data Protection Officer at support@fit-apps.dev.