Privacy Policy for PointlessPOS Point of Sale Software, developed by Coast to Coast Business Solutions.
Thank you for choosing PointlessPOS , Point of Sale Software. We value your trust in us and understand that privacy is an important aspect of your business. This Privacy Policy explains how we collect, use, and protect information about you and your business.
Information We Collect
When you use PointlessPOS , we collect information that is necessary for the software to function properly. This includes the transaction data such as payment amount, payment method, and transaction time. Coast to Coast does not collect customer information for its own use. Merchants enter customer information into PointlessPOS, and the software stores and processes it only on the merchant’s behalf, as described under Android & Microsoft Store Applications below. We do not collect user passwords or any other data that is specific to the merchant’s business for our own use.
Use of Information
We use the information we collect to provide our Point of Sale Software services to you. We may also use the information for internal purposes, such as improving our software and services, and to comply with legal requirements. We do not share, sell, or rent any information we collect with any third-party service providers.
Data Security
We take data security seriously, and we implement appropriate measures to protect your information against unauthorized access, alteration, or destruction. We use industry-standard encryption and secure data storage methods to safeguard your information.
Data Backups
According to agreements we will participate in data back up. We will store it in the same facility as the server, unless otherwise determined. You may also make arrangements for data backup. For any hosting solution we provide, we perform backups.
AWS Services & Twiliio
Certain services will store your data separately from Pointless. It is your responsibility to manage and update these services, even if you use them with Pointless.
METRC
For METRC we send sales information Daily to METRC.
We also retain customer information, including their patient number, and their caregiver number. You may be requested to purge this information periodically.
The solution reads your package information into your database, it is not shared with other locations or other services.
Oracle
For the purposes of Oracle integration, we pull reservation information. However we only store the Name and Reservation ID of the guest. This data can be later purged, or retained if you desire. It doesn’t contain other identifying details about the guest.
Other data services
AWS Some data, such as AWS services is not part of the backup of data. This data may be logs that are intended for the operations of the Point of sale, and will not contain user info or large amounts of sales data.
Updates to Our Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the updated Privacy Policy on our website. We encourage you to review our Privacy Policy periodically to stay informed about how we protect your privacy.
Device Info
We collect basic device information to set up the device for in-store use, such as receipt printers, credit card devices and barcode scanners, and when a customer signs for a receipt.
E Commerce
Where GDPR / California & Other privacy policies apply, for E commerce users are prompted with Privacy Policies. These are per site and should be addressed by each Merchant when establishing their site.
Use of Bluetooth and Camera:
The use of Bluetooth is employed to connect to printers, scales, credit card readers.
The use of Cameras is for barcode scanning purposes, and product image capture and upload for product catalogs maintained by the merchant.
You may use a Camera for Driver License data retrieval. We can scan a Driver License barcode. You can also use AWS services to read the text from the Driver’s license. This is an additional plugin and would require additional acknowledgements.
Android & Microsoft Store Applications
This section applies to PointlessPOS applications distributed through Google Play and the Microsoft Store (the “Apps”). The Apps are published by Coast to Coast Business Solutions, Inc. (“Coast to Coast”, “we”). They are business tools, installed on point-of-sale terminals and devices owned or managed by a restaurant, retailer, or other establishment (the “Merchant”). They are operated by the Merchant’s employees, not by the general public, and are not directed to children.
Who controls the data. The Apps are self-hosted: customer and transaction data is stored on the Merchant’s own server and devices, not on Coast to Coast systems. The Merchant decides what information is entered, why, how long it is kept, and when it is purged, and is responsible for meeting the privacy laws that apply to it. The Merchant’s own privacy policy governs that information. Coast to Coast provides the software and, when the Merchant asks, technical support.
Information the Apps may access, collect, or transmit
| Category | Examples | Why |
|---|---|---|
| Employee sign-in data (accounts are set up in the Merchant’s Admin, not in the Apps) | Name, employee ID, PIN or login, role, clock-in and clock-out times | Sign-in, permissions, time clock |
| Customer records (customers sign up outside the Apps) | Name, email, phone number, address, loyalty and account notes | Orders, receipts, loyalty, delivery and pickup |
| Transaction data | Items, amounts, payment method, date and time, receipt signature | Completing and recording sales |
| Identity document data (optional plugin) | Driver’s license barcode or image: name, date of birth, ID number, address | Age and identity verification required by law, where the Merchant enables it |
| Reservation data | Oracle guest name and reservation ID | Reservation lookup, where the Merchant connects Oracle |
| Device information | Device model, OS version, app version, device identifier, IP address | Setting up the device for in-store use: receipts, card readers, barcode scanners |
| Camera | Barcode scans and product photos | Scanning products and IDs; building the Merchant’s catalog |
| Bluetooth and nearby devices | Printer, scale, cash drawer, and card reader connections | Connecting store hardware |
No accounts are created in the Apps. Employee accounts are set up in the Merchant’s Admin, and customers sign up through a link sent by text, outside the Apps; the phone number used to send that link is not saved by the Apps. The Apps do not access or collect device location, do not read contacts, messages, or files outside the App, and do not serve advertising. Full payment card numbers are handled by the Merchant’s payment processor and its certified card reader; the Apps do not store them.
How information is shared. We do not sell or rent personal information, and we do not use it for advertising. Information is shared only to run services the Merchant has turned on:
- payment processors, to authorize and settle card payments;
- messaging providers such as Twilio, when the Merchant turns on text or email receipts;
- cloud services such as Amazon Web Services, when the Merchant turns on features that use them, such as reading text from an ID;
- integrations the Merchant connects, such as Oracle reservations; and
- authorities, where the law requires it.
Security. Data stays on the Merchant’s own server and devices, and connections between the Apps and that server are encrypted in transit using TLS. The Merchant is responsible for securing its server, backups, and staff access. Coast to Coast staff access a Merchant’s system only for support or maintenance the Merchant requests.
Retention. The Merchant decides how long customer and transaction data is kept and when it is purged, following its own policies and the laws that apply to it. Coast to Coast does not keep a copy of this data. The licensing and diagnostic information we receive contains little or no personal information and is kept only as long as needed for licensing and support.
Sensitive information and consent. Identity document scanning is off by default. A Merchant that enables it must tell customers why the ID is being scanned and obtain any consent required by law.
Children. The Apps are not intended for use by children under 13, and we do not knowingly collect their information.
Account & Data Deletion Requests
PointlessPOS Apps are self-hosted, so your information is held by the business that uses them, not by Coast to Coast. Deletion requests go directly to that business.
If you are a customer of a store or restaurant that uses PointlessPOS, contact that business to ask for your information to be deleted. The business controls its own system and handles your request under its own privacy policy and local law. Coast to Coast cannot access or delete information held on a business’s system.
If you are an employee, ask your employer to remove your information from its PointlessPOS Admin.
What the business can delete: your name, email address, phone number, address, loyalty and account notes, saved signatures, and stored identity document data.
What may be kept: records the business must keep under the laws that apply to it, such as sales and tax records, and payment records held by its payment processor.
Questions about this policy can be sent to [email protected] or 866-973-8099.
Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us at [email protected]. We are committed to protecting your privacy and will do our best to address your concerns.
Effective Date
This Privacy Policy is effective as of 01/01/2023.
Last updated 11/4/2026
We are Coast to Coast Business Solutions, Inc.
You may reach us by phone at 866-973-8099 with any questions.