Privacy Policy

Last updated: August 12, 2026

Privacy Policy

Effective Date: August 12, 2026 Tillr Go LLC ("Tillr Go") operates the Tillr point-of-sale software platform, including web dashboards, mobile applications, APIs, storefronts, kiosks, AI-assisted workflows, and related services (the "Service"). Tillr Pay LLC ("Tillr Pay") may provide, support, or coordinate payment-related services, terminal onboarding, processor connectivity, and payment facilitation workflows. Tillr Go and Tillr Pay are affiliates and are collectively referred to in this Privacy Policy as "Tillr," "we," "us," or "our" where the context requires. This Privacy Policy explains how we collect, use, disclose, safeguard, and retain information when you use the Service or interact with Tillr Pay payment-related workflows. By using the Service, you acknowledge that we collect, use, disclose, and retain information as described in this Privacy Policy.

1. Information We Collect

Account and Business Information. When you register or administer an account, we collect names, email addresses, phone numbers, business names, business addresses, roles, account settings, and related onboarding details. Payment and Billing Information. We collect subscription billing details, payment status, processor identifiers, terminal/payment setup information, payout or settlement status where applicable, and limited transaction metadata needed to operate the Service and payment workflows. Payment card data is handled by payment processors, gateways, acquiring banks, or other payment providers. Tillr does not store full card numbers or CVV codes on our application servers. Transaction and Commerce Data. We collect point-of-sale, storefront, kiosk, quote, invoice, refund, loyalty, gift card, tax, discount, order, fulfillment, and reporting records needed to provide the Service, generate receipts, support reconciliation, and maintain audit trails. Where payment providers require only amount-level or limited metadata, we limit what is transmitted to those providers accordingly. Employee and Workforce Data. Store owners may add employee names, roles, permissions, PINs, shift activity, schedules, attendance or clock events, training records, workforce messages, and related operational records. PINs are hashed before storage. Customer Data. Store owners may collect customer names, email addresses, phone numbers, loyalty information, order history, delivery or pickup details, communication preferences, support notes, appointment or reservation details, and other information through the Service. Store owners are responsible for providing required notices and obtaining required consents from their own customers and employees before entering their information into the Service. ID Scan, Age Verification, and Sensitive Data. Where enabled, the Service may process government-ID barcode data, date of birth, age-verification results, OCR-extracted fields, scan metadata, or similar information to support compliance workflows. Unless a specific feature or customer configuration says otherwise, Tillr designs ID scanning workflows to use the minimum information needed for the compliance task and not to store full ID images longer than necessary for security, audit, legal, or Payment Provider requirements. Tillr does not currently provide facial recognition or biometric matching as a standard feature. If biometric or identity-matching features are introduced, Tillr will provide additional notices and consent flows where required. Device, Cookie, and Usage Information. We collect device identifiers, device model, app and operating-system version, IP addresses, browser type, approximate location derived from IP address, logs, session events, cookies, local storage identifiers, analytics events, crash/error reports, performance metrics, and security telemetry for diagnostics, reliability, fraud prevention, analytics, and security purposes. On public Tillr pages, optional conversion analytics run only after optional analytics consent. Their allowlisted payloads exclude form entries, personal or account identifiers, query values, notes, meeting links, and raw URLs; declining optional analytics does not block signup, demo booking, contact forms, or required transactional communications. Mobile Camera and Diagnostic Reports. In the current Tillr iOS App Store release candidate, the camera is used only when an authorized user initiates barcode, product-label, or supported-ID scanning. An authorized user may choose to send a diagnostic report, and the application may automatically create a diagnostic report when an unhandled application error occurs. A report may include a diagnostic screenshot of the visible merchant-facing app screen, error and screen-route information, an app-specific device identifier, device model, platform and operating-system version, app version, connectivity and synchronization status, employee/account identifiers and role, and limited cart-state information such as item count and total. Because a screenshot depicts the visible screen, it may incidentally contain merchant, employee, customer, transaction, or other information displayed at the time. Reports may be temporarily stored on the device while offline and uploaded when connectivity returns. Diagnostic capture is blocked during customer-facing kiosk handoff and is handled under access controls and retention limits. The current iOS candidate does not expose or activate mobile security video/audio recording or IP-camera snapshot collection; separately enabled Tillr web, server, or camera products may process camera footage under their applicable notices and controls. Mobile Location. For supported card-present and Tap to Pay workflows, the mobile application and payment SDK may request location while the app is in use. Device location may be processed by Stripe Terminal or another configured Payment Provider to establish reader/payment eligibility, associate a payment device with an authorized merchant location, prevent fraud, and comply with payment-network or legal requirements. Tillr does not use this permission for general background location tracking. AI and Automation Inputs. If you use AI-assisted features, we may process prompts, uploaded files, extracted text, generated drafts, tool outputs, approval decisions, and audit records needed to provide, secure, evaluate, and improve those features. Communications. When you contact us or use in-app messaging, support, email, SMS, or notification features, we retain those communications to provide support, maintain records, and improve the Service.

2. How We Use Information

We use information to: - Provide, maintain, secure, and improve the Service - Provide POS, store-management, payment-connectivity, reporting, support, security, AI-assisted, and related services - Process or facilitate transactions, payment onboarding, terminal setup, reconciliation, chargebacks, disputes, and related notifications - Send transactional emails and SMS messages, such as receipts, gift card codes, order confirmations, service notices, and security alerts - Send promotional communications where permitted and with consent where required - Operate analytics, diagnostics, performance monitoring, error reporting, audit logging, fraud prevention, and reliability tooling - Support age-verification, ID-scan, workforce, customer messaging, storefront, kiosk, and compliance workflows configured by merchants - Generate anonymized or aggregated analytics that do not identify a merchant, customer, employee, or individual - Comply with legal obligations, Payment Provider requirements, law-enforcement requests, tax/accounting requirements, and enforce our terms

3. AI, Automation, and Model Training

Tillr may offer AI-assisted features for product setup, inventory workflows, marketing drafts, analytics, support, order assistance, operational insights, and other commerce tasks. AI outputs may be inaccurate. AI-generated content, recommendations, predictions, classifications, extracted data, or suggested actions may contain errors or omissions. Merchants remain responsible for reviewing, approving, and validating AI outputs before relying on them or sending them to customers, employees, regulators, or payment providers. Automated actions. Where the Service supports automation, merchants are responsible for configuring permissions, approval workflows, and review settings appropriate for their business. Tillr is not responsible for losses arising from merchant-approved automated inventory changes, pricing suggestions, generated marketing, customer communications, ordering workflows, or other automated actions except to the extent required by law or caused by Tillr's willful misconduct. Third-party AI providers. Tillr may use third-party AI, OCR, transcription, embedding, search, or automation providers to process inputs and outputs as needed to provide AI features. We contractually restrict providers where commercially available and appropriate, but provider-specific terms may apply. Training and improvement. Tillr does not sell Customer Data. Tillr does not intentionally use identifiable merchant Customer Data to train third-party foundation models unless a merchant expressly enables or agrees to that use. We may use anonymized, aggregated, redacted, synthetic, or de-identified data, along with product telemetry and evaluation results, to improve safety, reliability, and product quality.

4. SMS, Email, and Communications

Tillr enables store owners to send SMS, email, and other messages to their customers for receipts, gift card codes, order confirmations, appointment or reservation updates, review requests, loyalty notices, marketing campaigns, and other merchant-configured communications. Consent and compliance. Store owners are responsible for obtaining, recording, and honoring all legally required consents, opt-ins, opt-outs, quiet hours, campaign disclosures, and message content rules under TCPA, CAN-SPAM, CTIA guidelines, carrier rules, state laws, and other applicable requirements. Opt-out. Recipients may opt out of supported SMS messages by replying STOP and may request help by replying HELP where supported. Store owners can manage preferences in Tillr settings and must also honor offline or external opt-out requests. Providers. SMS, email, push, and related communications may be transmitted through service providers such as Twilio, Resend, mobile push providers, carrier networks, and other vendors. Their privacy policies and terms may apply to transmission and delivery.

5. Cookies and Tracking Technologies

Tillr uses cookies, local storage, pixels, SDKs, logs, and similar technologies for authentication, session management, security, fraud prevention, preferences, analytics, performance monitoring, attribution, and error reporting. See our Cookie Policy at tillrhq.com/cookies for additional detail. You can control many cookies through browser settings. Disabling necessary cookies may prevent login, checkout, admin, kiosk, or security features from working correctly. Where required, we will provide additional consent or opt-out mechanisms for analytics, advertising, or similar tracking.

6. How We Share Information

We do not sell personal information. We may share information with: Service Providers and Subprocessors. Vendors who assist in operating the Service, such as cloud hosting, databases, analytics, observability (including Sentry), fraud prevention, customer support, email, SMS, payment and terminal services (including Stripe Terminal where configured), gateway, banking, AI/OCR, storage, and security providers. These providers are authorized to use information only as needed to provide services to us or to you. Where Tillr processes personal information through a provider on Tillr's behalf, we require contractual confidentiality, security, and data-protection obligations appropriate to the processing and applicable law. Payment Providers. Tillr Pay and third-party payment providers may receive information required for underwriting, onboarding, identity verification, risk review, payment authorization, settlement, dispute handling, chargebacks, refunds, compliance, fraud prevention, and terminal support. Depending on the payment method and provider, this may include business, owner, bank, device, transaction, amount-level, settlement, dispute, and compliance information. We avoid sharing product-level item details with payment providers unless needed for compliance, support, risk review, or as required by law or provider rules. AI and Automation Providers. When merchants use AI-assisted or OCR-enabled features, providers may process prompts, uploaded content, extracted text, outputs, or related telemetry solely as needed to provide the feature and maintain safety, security, and reliability. Legal Requirements. We may disclose information if required by law, regulation, legal process, governmental request, Payment Provider rule, or to protect rights, safety, security, and the integrity of the Service. Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of the transaction subject to appropriate confidentiality protections.

7. Data Processing Roles, DPA, and International Transfers

For merchant Customer Data, Tillr generally acts as a service provider or processor processing data on behalf of the merchant, and the merchant generally acts as the business, controller, or similar responsible party for its own customers, employees, and business records. For account, billing, security, analytics, and Tillr business operations data, Tillr may act as an independent controller or business. Where required by applicable privacy laws or an enterprise agreement, Tillr may provide a Data Processing Addendum covering processor obligations, confidentiality, subprocessors, security measures, audit/support commitments, international transfer terms, Standard Contractual Clauses or UK transfer addenda where applicable, and CCPA/CPRA service-provider terms. Tillr and its providers may process information in the United States and other locations where we or our subprocessors operate. We use commercially reasonable transfer safeguards where required by applicable law.

8. Privacy Rights

Depending on your location and relationship to Tillr or a merchant, you may have rights to: - Know or access categories and specific pieces of personal information processed - Request correction of inaccurate information - Request deletion of information, subject to legal, security, tax, accounting, payment, dispute, audit, backup, and legitimate-business retention requirements - Receive certain information in a portable format - Opt out of marketing communications - Opt out of sale or sharing of personal information where applicable - Limit the use or disclosure of sensitive personal information where applicable - Object to or restrict certain processing where applicable - Appeal a denied privacy-rights request where applicable - Be free from unlawful discrimination for exercising privacy rights - Use an authorized agent where permitted by law If you are an employee, end customer, loyalty member, storefront shopper, appointment guest, or other individual whose information was entered by a Tillr merchant, we may need to route your request to that merchant or act on the merchant's instructions. To exercise rights, contact [email protected]. We may need to verify your identity and authority before fulfilling a request.

9. Data Security and Incident Response

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect information, including: - HTTPS/TLS encryption for data in transit - Hashed passwords and PINs where applicable - Tenant isolation controls for multi-tenant merchant data - Encryption or protected storage for sensitive secrets, API keys, and tokens - Access controls, role-based permissions, audit logging, and monitoring - Security reviews for payment, authentication, and high-risk workflows No method of transmission or storage is 100% secure. If we confirm a security incident involving information for which we are responsible, we will investigate, take reasonable mitigation steps, and notify affected customers or individuals as required by applicable law, contract, or Payment Provider rules. Merchants are responsible for promptly notifying Tillr of suspected account compromise, credential misuse, payment-data incidents, or unauthorized use of merchant-configured integrations.

10. Data Retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, support payment, tax, accounting, audit, fraud-prevention, chargeback, and regulatory requirements, and maintain backups. Typical retention categories include: - Account, subscription, and business records: while the account is active and for a reasonable period afterward for accounting, legal, and audit purposes - Transaction, receipt, tax, payment, settlement, refund, dispute, and chargeback records: as needed for payment-network, tax, accounting, fraud-prevention, and legal requirements - Audit logs, security logs, and access records: for security, compliance, and investigation needs - Support communications: as needed to resolve support matters and improve service quality - Diagnostic screenshots and associated diagnostic metadata: only as long as reasonably needed to investigate and resolve the reported issue, enforce security controls, and maintain a limited audit trail - Marketing suppression and opt-out records: as long as needed to honor consent and opt-out requirements - ID-scan and sensitive compliance records: only as long as necessary for the configured compliance workflow, audit, legal, security, or provider requirement - Backups: retained for a limited backup lifecycle and then overwritten or deleted in ordinary course Account closure, subscription cancellation, and privacy-rights deletion are separate requests and may have different verification, timing, and retention consequences. If you close your account, we will delete or anonymize data that is no longer required within a commercially reasonable period, except where retention is required or permitted by law, Payment Provider rules, tax/accounting obligations, backups, audit logs, dispute records, or legitimate business needs.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children through Tillr's own account-registration workflows. Merchants are responsible for ensuring their own customer, employee, loyalty, appointment, delivery, and age-verification workflows comply with laws applicable to minors. If we become aware that we have collected personal information from a child in violation of law, we will delete it promptly or assist the relevant merchant in doing so.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy and update the date above. Where required by law, we will provide additional notice or obtain consent before revised processing begins.

13. Contact Us

If you have questions about this Privacy Policy, privacy rights, data processing, or subprocessors, contact us at: Tillr Go LLC / Tillr Pay LLC Email: [email protected] Security: [email protected] Website: tillrhq.com