Privacy Policy
Last updated 27 September 2026
This policy explains what information StoreWave collects, what we do with it, and the choices you have. StoreWave is operated from Colombo, Sri Lanka. Only the StoreWave operator has access to your data; we do not sell it, rent it, or use it for advertising.
Two kinds of data
Your account. When you sign up and run a shop, we collect information about you, and we decide how it is used. This policy covers that.
Your shop's data. The products, sales, customers and staff you record in your shop belong to you. We store and process them only to run StoreWave for you, and you decide what goes in. If you record your own customers' details, you are responsible for telling them and for having the right to do so where you trade.
What we collect
- Account details: your name, email address and password (stored only as a one-way hash), or your Google account's email and ID if you sign in with Google.
- Shop details: your shop's name, address, logo, settings and the details of the staff logins you create.
- Billing details: your plan, subscription status and payment references from our payment provider. We never receive or store your full card number.
- Messages: what you send us through the contact form or by email.
- Technical data: your IP address, browser and device, how you use this website (see cookies below), and error reports when something goes wrong. In the point of sale app, a sample of sessions and every session that hits an error is recorded as a screen replay, so we can see what went wrong and fix it. These replays can show what was on screen, such as product and customer names. Password fields are always hidden from them.
Why we use it
- to run your account and your shops, and keep them secure;
- to take payment for the Pro plan;
- to send the emails the service needs, such as verification, password reset, receipts you ask us to email, and stock alerts you turn on;
- to answer your questions and give support;
- to find and fix errors and improve StoreWave;
- to meet our legal obligations.
We do not send marketing email unless you have asked for it.
Who helps us
We use a small number of service providers to run StoreWave. Each receives only what it needs for its job:
- Hetzner hosts our servers and database, in Finland.
- Resend delivers our emails.
- Cloudinary stores the product images and logos you upload.
- Sentry receives error reports and the screen replays described above.
- PayPal and our card payment provider process subscription payments.
- Google handles sign-in, if you choose to sign in with Google.
- Google Analytics, loaded through Google Tag Manager, measures how people use this website.
Some of these providers are outside Sri Lanka, so your data may be processed in other countries. We will share information with authorities only when the law requires it.
Cookies and browser storage
This website uses Google Analytics, which sets cookies to count visits and see which pages are read, where visitors come from, and roughly which country and device they use. We use it only to understand and improve the website, not for advertising. You can block these cookies in your browser settings, or with Google's opt-out add-on, and the website works the same without them.
Your browser also stores a login token so you stay signed in, and your theme choice. Google's sign-in button may set its own cookies when you use it.
How long we keep it
- Account and shop data: for as long as your account exists.
- A deleted shop: its data is deleted when you delete it.
- An unfinished signup: deleted automatically if the email is never verified.
- Billing records: as long as tax and accounting law requires.
- Error reports and replays: for a limited period, after which they are deleted.
Your choices
You can see and change your account details in your account at any time, export your shop's reports, and delete a shop yourself. To get a copy of your personal information, correct it, or delete your whole account, email support@storewavepos.com. We will answer within 30 days.
Security
Connections to StoreWave are encrypted, passwords are stored only as hashes, and every shop's data is kept separate from every other shop's. No system is perfectly secure, and if a breach affects your data we will tell you promptly.
Children
StoreWave is for businesses and is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we will tell you by email or in your account before the change takes effect.
Contact
Questions about your privacy go to support@storewavepos.com.