1. Who we are
SkyPos is a cloud point-of-sale and repair management service for cellphone and repair shops, built and operated by Articsoft in South Africa (“SkyPos”, “we”, “us”). This policy covers our website at spos.co.za, the SkyPos app (including shop subdomains and the desktop app) and related services.
We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer can be reached at hello@articsoft.co.za.
2. Shops and their customers
Shops use SkyPos to run their business. When a shop records information about its own customers (for example a name, phone number, email address, device details or a repair job), the shop decides what is collected and why. For that information the shop is the responsible party and we act as its operator: we process it only on the shop’s instructions to provide the service.
If you are a customer of a shop that uses SkyPos, contact that shop first about your information. We will help the shop respond to your request.
3. Information we collect
Account and shop information
- Names, email addresses, phone numbers and roles of shop owners and staff.
- Shop details such as trading name, address, VAT or tax details, logo and banking details for slips.
- Login and security data: hashed passwords, two-factor and device PIN settings, trusted devices.
Business data entered by shops
- Sales, quotes, repairs, stock, suppliers, expenses, cash-ups, payroll and similar records.
- Customer records the shop chooses to keep, and documents or images it uploads.
Billing information
- Subscription and payment records. Card details are entered directly with our payment providers; we do not store full card numbers.
Technical information
- IP address, browser and device type, and an audit log of actions taken in the app (for security and troubleshooting).
- Essential cookies that keep you signed in. We do not use advertising cookies.
4. Information from Google accounts
A shop can choose to connect a Google account to SkyPos. We only ask for the access a feature needs, and only when the shop turns that feature on.
| Feature | Google access requested | What we do with it |
|---|---|---|
| Send email from Gmail | Your Google account email address and basic profile, and permission to send email on your behalf (gmail.send). | Send the emails you ask SkyPos to send - receipts, quotes, repair slips and messages written in the app - from your Gmail address. We cannot read, search or delete anything in your mailbox. |
| Google Drive documents | Your Google account email address and basic profile, and access to files SkyPos creates in your Drive (drive.file). | Save, list, open and delete documents in a “SkyPos Documents” folder. We cannot see other files in your Drive. |
SkyPos’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- We only use Google user data to provide the features above, which the shop can see and control.
- We do not sell Google user data, and we do not use or transfer it for advertising, credit checks or any unrelated purpose.
- We do not use Google user data to train AI or machine-learning models.
- No person at SkyPos reads Google user data unless the shop gives us permission for a specific support case, it is needed for security (for example to investigate abuse), or the law requires it.
- Access and refresh tokens are encrypted (AES-256) before they are stored, and are never shown in the app.
You can disconnect at any time in Settings → Shop Details → Receipt emails (Gmail) or Settings → Documents (Drive). Disconnecting deletes the stored tokens and asks Google to revoke our access. You can also remove SkyPos at myaccount.google.com/permissions.
5. How we use information
- To provide, maintain and secure the SkyPos service and each shop’s data.
- To send receipts, quotes, slips, alerts and messages that a shop or user asks us to send.
- To manage subscriptions, billing and support requests.
- To detect, prevent and investigate fraud, abuse and security incidents.
- To meet legal, tax and accounting obligations.
- To improve the service using aggregated information that does not identify individuals.
7. Storage and cross-border transfers
Some of our service providers store or process data outside South Africa. When that happens we rely on providers that are bound by data-protection terms giving protection comparable to POPIA, as section 72 of POPIA requires.
8. Security
Data is encrypted in transit (HTTPS). Secrets such as connected-account tokens and mailbox passwords are encrypted at rest. Each shop’s data is isolated by row-level security, staff access follows roles and permissions set by the shop, and sensitive actions are recorded in an audit log. No system is perfectly secure; if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
9. How long we keep it
We keep a shop’s data for as long as its account is active. When a shop closes its account, we delete or anonymise its data within a reasonable period, except records we must keep by law (for example billing and tax records). Google tokens are deleted as soon as the connection is removed.
10. Your rights
Under POPIA you may ask to see the personal information we hold about you, correct or delete it, or object to how it is processed.
Email hello@articsoft.co.za to make a request. If you are not satisfied with our answer, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.
11. Children
SkyPos is a business service and is not intended for children under 18. We do not knowingly collect their information as users.
12. Changes to this policy
We may update this policy. The “Last updated” date above shows when it last changed, and we will tell shops about material changes by email or in the app.
13. Contact us
Questions about privacy or this policy: hello@articsoft.co.za.