Template for review: this policy is a starting template written from what the OneSell website and apps actually collect. It is not legal advice. Please read it, check every detail against how you really run the service, and have it reviewed before you launch. Then delete this notice.
This Privacy Policy explains what information OneSell collects, why, who can see it, how we keep it safe and what choices you have. OneSell is a cloud point-of-sale service for businesses in the Maldives. It should be read together with our Terms of Service.
1. Two kinds of information
- Information about you and your business. We collect this to run your account. For this we are responsible for how it is used.
- Information about your customers and staff that you put into OneSell. This is your business's information. We look after it for you and use it only to provide the service. You decide what to enter and you are responsible for having the right to enter it.
2. What we collect
When you sign up and use your account
- Your name, email address, mobile number and password (we store the password in a scrambled form, never as typed).
- Your business name, type, island and atoll, GST registration details, currency and branch details.
- Staff names, roles, optional phone numbers and PINs (stored scrambled).
- Your plan, trial and payment history, and the bank-transfer slips you upload.
- Messages you send us and notes from support.
Business records you enter or create in OneSell
- Products, prices, stock, suppliers and purchases.
- Sales, receipts, refunds, payments, cash counts and expenses.
- Customer details such as name, phone number, email, address, credit balance, loyalty points and the marketing-consent choice.
- Orders, tables, bookings, repair or garage jobs (for example a phone IMEI or a vehicle plate number), photos and signatures.
- Cargo parcels, senders, receivers, trips and labels.
- Staff records such as roster, attendance and payroll, if you use those add-ons.
Delivery and location
- For delivery orders: the delivery address and, if the customer shares or picks it, their map location. The cash note a customer says they will pay with.
- For drivers: the position of a driver's phone while the driver chooses to share it during deliveries. It is used only to show the order's progress and to plan the route, is kept only as the latest position, and stops when the driver stops sharing.
Technical information
- Sign-in times, the device and browser type, IP address and basic logs, used to keep the service safe, find faults and show you which sign-ins are active.
- On our public website: messages you type into the chat helper, with any name or contact you give so we can reply, and the number of times a form is sent from one internet address, which we keep briefly to stop spam. Our forms also contain a hidden field that only automated programs fill in.
- An activity log of who did what in your account.
We do not sell your data and we do not use advertising trackers. Our public website can use Google Analytics to count visits, as described in sections 5 and 7.
3. How we use it
- To provide OneSell: sell, print receipts, keep stock, run orders, deliveries and reports.
- To create and manage your account, check payments, switch plans on and off, and send service messages such as a plan reminder or a payment decision.
- To give support and to fix problems.
- To keep the service secure, prevent fraud and misuse, and to keep one business's data away from every other business.
- To improve the service, using information that does not identify your customers.
- To follow the law and to protect our legal rights.
We do not use your customers' details to market our own products to them, and we do not sell or rent personal information to anyone.
4. Who can see it
- Your own staff, according to the role you give each person. Owners and managers see more than cashiers. Staff of one business cannot see another business's data.
- Your customers, but only what they need: a receipt, an order-tracking page for their own order, or a parcel-tracking page for their own parcel. A customer reaching a tracking page sees that order and, for deliveries, the driver's name and live position while the delivery is on its way.
- Drivers, through their private link, see only their own deliveries: the customer's name, phone number, address and what to collect.
- OneSell support and admin staff, only as needed to run the service or to help you, and only when you ask or when we must keep the service safe.
- Service providers that help us run OneSell, such as cloud hosting and storage, email, and messaging services. They may handle information only to do that work for us.
- Authorities, when the law requires it or a court orders it.
5. Other services your use may involve
- Maps. Maps use OpenStreetMap tiles. When a map is shown, your browser contacts the OpenStreetMap servers, which can see the browser's IP address and the area being viewed. Navigation buttons open Google Maps in a new page, which is governed by Google's policies.
- Messages. If you use messaging features, the recipient's phone number and the message text are passed to the WhatsApp, Viber, SMS or email service that delivers it.
- Website visits (Google Analytics 4). When it is switched on, our public website uses Google Analytics to count visits. Google receives the pages visited, the time, your approximate location, your device and browser type, and a cookie identifier, with the last part of your IP address removed. Google may process this outside your country. If you are in the EU, the UK or Switzerland it starts only after you press Accept in the banner. Pressing Decline keeps it off. Analytics is not used inside the till, the admin area or customer links.
- Fonts. The till loads its text fonts from Google Fonts, so Google can see your browser's IP address when the page opens.
- WhatsApp. Buttons that say WhatsApp open WhatsApp with your message ready. WhatsApp's own policy then applies.
- Menu reading (optional). If you upload a photo or PDF of a menu so OneSell can read it, the file is sent to Google's Gemini service to read the items.
- Team alerts. Our team receives alerts about new sign-ups, payments and support requests through Telegram. These contain the business name, plan and the message, and no passwords.
- Payments. Customers pay you directly. You pay us by bank transfer. We do not collect your customers' card numbers.
6. Where it is stored and how we protect it
- OneSell runs on cloud servers. The servers may be outside the Maldives. We take reasonable steps to protect information wherever it is held.
- Every business's data is kept separate from every other business, and every request is checked against the business that makes it.
- Connections to OneSell are protected in transit and passwords and PINs are stored scrambled.
- Sign-in sessions end when you sign out. You can sign out of every device from Settings, and a password reset signs out older logins. Changes to a staff member's role take effect straight away.
- We make daily backups.
- No system is completely secure. If we learn of a problem that puts your information at risk we will tell you as the law requires.
7. Information on your device
- OneSell stores a sign-in token in your browser so you stay signed in. By default it lasts for the browser tab. If you choose "Keep me signed in on this device" it stays on that device until you sign out.
- To keep selling when the internet drops, OneSell keeps a copy of what it needs, such as your product list and unsent sales, on the device. It is removed when you sign out. Sign out on shared computers.
- On our public website we keep your cookie choice (accept or decline) in your browser so we do not ask again. If you accept, Google Analytics sets its own cookies, such as _ga, to tell visits apart. You can delete them in your browser settings at any time.
- We do not use advertising cookies.
8. How long we keep it
- We keep your information while your account is open and after it becomes read-only, so you can still see and export it.
- If you ask us to close your account we will delete or anonymise your business records within a reasonable time, which we aim to make 90 days, except what we must keep by law (for example payment and tax records), what we need to settle a dispute, and backups, which are replaced as new backups are made.
- Payment slips and payment records are kept for as long as the law and our accounts require.
- Live driver position is kept only as the latest position and is cleared when the driver stops sharing.
9. Your choices and rights
You can ask us to:
- show you the information we hold about you;
- correct information that is wrong;
- export your business data (you can also do this yourself from the app);
- delete your information or close your account, subject to section 8;
- stop sending you messages that are not needed to run your account.
If you are a customer of a business that uses OneSell and you want to see, correct or delete your details, please ask that business first. It decides what it stores. We will help the business to deal with your request.
You can also see and end your active sign-ins, remove staff, and switch off features you do not use, from Settings.
10. Children
OneSell is for businesses and is not meant for children under 18. We do not knowingly collect information from children.
11. Changes
We will update this policy when our practice changes and show the date of the latest version at the top of this page. For an important change we will tell you in the app or by email.
12. Contact
For any question about privacy or to use your rights, see our Contact page.