Privacy policy

1. Who we are

Brella ("we," "us") is a point-of-sale and business management platform for small and growing businesses, covering sales, inventory, staff, and customer loyalty. This policy explains what data we collect through our dashboard, POS app, and API, and how we handle it.

Questions about this policy or your data can be sent to support@mybrella.io.

2. Data we collect

We collect data you and your staff provide directly, and data generated by using the platform:

• Account data — name, email address, and a securely hashed password. We never store passwords in plain text.
• Business and branch profile — business name, address, contact details, tax settings, and branding.
• Sales and inventory records — transactions, items, stock levels, purchase orders, and supplier information entered through the dashboard or POS app.
• Staff attendance — clock-in/clock-out records and shift history for employees your business adds to the platform.
• Customer loyalty records — loyalty account details and point balances for customers your business chooses to enroll, if you use that feature.
• Device information — a device name, type, and model when a POS tablet or terminal is registered to a branch, so it can be identified and managed by the business owner.

3. Camera

The POS app requests camera access solely to scan product barcodes at checkout. Camera images are processed on-device to read a barcode and are never stored, transmitted, or retained by Brella.

4. Local network

The POS app requests local network access solely to send receipt data to a thermal printer connected to the same Wi-Fi network. This is used only to communicate with the printer you configure and is not used to scan or access other devices on your network.

5. Payments

Subscription billing for Brella is processed by Stripe, our payment processor. Card and payment details are handled directly by Stripe under its own privacy policy — Brella servers never receive or store your full card number.

6. How we share data

We do not sell your data. We share data only with the service providers that operate the platform on our behalf — for example, our hosting infrastructure, database, and Stripe for payments — and only to the extent needed for them to provide that service. We may also disclose data if required to by law.

7. Data retention and deletion

We retain business, sales, and account data for as long as your business's account remains active, so records like sales history and reports stay available to you. If you'd like your business's data deleted, contact support@mybrella.io and we will process the request, subject to any records we're legally required to retain.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or request deletion of your personal data. To exercise any of these rights, email support@mybrella.io and we'll respond as soon as we can.

9. Changes to this policy

We may update this policy as Brella evolves. If we make material changes, we'll update the effective date above. Continued use of Brella after a change means you accept the updated policy.

Contact: support@mybrella.io