Draft — to be reviewed before it is adopted.
Privacy policy
This page explains what the Salamo cloud service (the owner's web dashboard) stores and why. The shop app runs on the shop PC and its data stays there. This policy covers the copy that is uploaded to the cloud after the owner links the shop to the web dashboard.
What we store
- Shop data uploaded by the shop PC after linking, from a fixed list of fields: products, sizes, colors, batches, sell prices and costs, sales and returns, expenses, suppliers and purchase orders, customers with their names, phone numbers, addresses and debts, and the names of the cashier users.
- Web accounts: the email address, the password stored as a hash (bcrypt), never as text, and each member's role in the shop.
- Security log: the kind of event (sign-in, member added, password changed, …), its time and the email concerned. The IP address is stored only as a keyed hash (HMAC-SHA256), never the address itself.
- The shop's link token and license key are stored only as hashes (SHA-256).
What we do not store
Passwords as text, raw IP addresses, product images (only the file name), payment card data. The website has no tracking or advertising scripts.
Where the data is stored
In the European Union, in Frankfurt (Germany): the database at Neon and the server at Vercel. Connections are encrypted (HTTPS) and storage is encrypted.
Why
Only to show the dashboard to the shop owner and the members they add, and to protect the accounts from abuse (for example by limiting sign-in attempts). We do not sell the data or share it for any other purpose.
Who sees the data
Only the shop's members, added by the owner from the shop PC. A member with the viewer role does not see cost or profit. Each shop's data is isolated from every other shop's data.
How long we keep it
- When a shop is unlinked, all of its data is deleted from the cloud within 24 hours.
- Security log: one year.
- Technical deletion records: 30 days. Anti-guessing counters: until they expire.
- Everything else: as long as the shop stays linked.
The cloud never changes shop data
Data goes one way only: from the shop to the cloud. Neither the web dashboard nor anyone on the cloud can change or delete anything on the shop PC.
Your rights
The owner can unlink the shop at any time from the shop PC (Settings → Cloud dashboard), and the data is deleted from the cloud. To ask for a copy of the data, its deletion, or anything else, write to us at the email below.
Contact
Email: info@salamo.ps