Obsius POS

Privacy policy

Effective date: 21 October 2026 · Operator: Salientt Maldives

This policy covers the Obsius POS Android and iOS apps, our web POS and management service, and the account and order services that support them. Contact hello@salientt.co about privacy, access, correction or deletion requests.

1. Business workspaces and your account

Obsius is a business operations service for authorized owners and staff. A business determines which staff can access its workspace and what customer and transaction records it enters. Your account can belong to more than one business, with separate roles and permissions. Removing membership in one business does not remove your other memberships or delete your entire account.

If you are a customer of a business using Obsius, contact that business about its use of your information. You may also contact us to help route a request to the appropriate business.

2. Information we process

  • Account and staff details: names, email addresses, optional contact numbers, login credentials in protected form, business/branch memberships and permissions.
  • Customer and delivery details entered by a business: names, phone numbers, optional emails, delivery addresses, delivery areas and order notes.
  • Business and transaction records: products, order items, amounts, payment method/status/references, preparation and delivery progress, and staff actions. Obsius does not ask for payment-card numbers in the current mobile app.
  • Service and security information: authentication/session records, request and error logs, timestamps, and network information such as IP addresses where processed by our servers or hosting providers.
  • Device-local information: sign-in tokens in operating-system secure storage, sale drafts, delivery-card ordering preferences, and temporarily generated receipt PDFs.

3. Why we use this information

We use information to authenticate users, enforce business and branch permissions, manage sales and stock, support preparation and deliveries, record payments, generate receipts and reports, provide support, and protect the service against misuse. Account/security messages support login, invitations and password recovery.

Customer order notifications by SMS, WhatsApp or email are optional and depend on the business administrator enabling the relevant module, channels and events. Enabled SMS and WhatsApp order events apply to customers with a valid phone number unless an opt-out has been recorded; Obsius does not require a separate per-customer activation step. Businesses are responsible for obtaining any permission required by their messaging providers and applicable rules. Customers can ask the business to stop order updates on either channel. Security and authentication messages are separate from optional order notifications.

4. Who can receive information

Authorized staff in the relevant business can view information permitted by their role, including customer contact/address information needed for a delivery. Platform support may access business information where needed to administer or support the service.

We use service providers to host and operate Obsius, including Convex for backend/database/file services and Vercel for web hosting. Depending on the features used, Resend processes emails, MsgOwl processes SMS, and Wawp and WhatsApp/Meta process WhatsApp messages. These providers receive information needed to perform their services, such as message recipients and message content.

When you choose Call customer or Share receipt, your device opens its phone or sharing service. A receipt shared to another app is handled by the recipient and that app under their own practices. We may also disclose information when required by law or to protect the service and users. We do not sell personal information or use the current mobile app for targeted advertising.

5. Device permissions and local files

The current mobile app does not perform live GPS tracking or request access to your address book. Delivery addresses are business records, not GPS readings. Calling is user-initiated through the phone app. Receipt sharing uses the operating-system share sheet.

Receipt PDFs are generated on the device; the receipt-sharing flow does not upload the generated PDF to Obsius storage. The underlying order remains on our backend. The app attempts to remove its own temporary receipt PDFs older than 24 hours at startup, when returning to the foreground and around sharing. Cleanup is best-effort, does not run while the app is closed, and does not remove copies you saved or sent elsewhere. Local drafts and delivery ordering preferences remain until cleared by the app, device settings or uninstalling, subject to device/platform behavior.

6. Retention

We retain account and business records while providing the service and supporting recovery, security and business operations. Archiving a business or removing a staff membership does not automatically erase its records. We currently use a request-based deletion process rather than an automatic inactivity purge: inactive or archived records may remain until a verified deletion request is processed or the business instructs us to remove them.

We review deletion requests against account ownership, the rights of the business and other users, and applicable legal, accounting, fraud-prevention or security requirements. Records needed for those purposes may be retained for as long as necessary; other requested information can be deleted or de-identified. Copies in provider backups may remain for their backup lifecycle and are not treated as active business records. We explain relevant limitations when handling your request.

7. Access, correction and deletion

Email hello@salientt.co from your account email, with the subject “Obsius POS privacy request”. Tell us whether you want to access/correct information, leave one business, or delete your Obsius account and associated personal data. We verify your identity and authority before making changes. Do not send passwords, verification codes, full card details or unnecessary customer information.

Account deletion and business-record deletion are different. Deleting a staff account does not necessarily delete a business’s sales, accounting or audit records. Where such records must be retained, we assess whether the staff identity can be removed or de-identified. Business owners should arrange ownership transfer or workspace closure when requesting deletion of their own account.

Account and data deletion instructions →

8. Security and international processing

Obsius uses encrypted network connections, authenticated sessions, role/business/branch access controls and protected credential storage. No system can guarantee absolute security. You should protect your login, review staff access and use device security controls. Our service providers may process information outside your country; their processing locations and applicable protections depend on the provider and service used.

9. Children and advertising

Obsius POS is intended for adult business users and staff, not children. We do not knowingly create accounts for children under 18. The current mobile app does not include advertising SDKs, Meta Pixel or advertising-based tracking. If a business operates a separate online store, it is responsible for explaining any additional tracking it deploys there.

10. Changes and contact

We may update this policy as the service or our practices change. The effective date above identifies the current version. For questions or requests, contact Salientt Maldives at hello@salientt.co.