Privacy Policy

Overview

This Privacy Policy describes how For Everyone Group LLC ("Company," "we," "us," or "our") collects, uses, and shares information in connection with your use of TillIQ, our cloud-based point-of-sale and business management platform, available at tilliq.app and app.tilliq.app (collectively, the "Platform"). By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

1. Information We Collect

1.1 Account & Business Information

When you register for TillIQ, we collect: full name and business name; email address and phone number; business address and location data; merchant category and business type; government-issued tax or business registration numbers (where required); and profile or logo images you choose to upload.

1.2 Transaction & Operational Data

As you use the Platform, we collect: point-of-sale transaction records including items, quantities, prices, discounts, and totals; inventory and product catalogue data; employee records and shift data you create within the Platform; customer profiles and purchase history you input into the system; warehouse orders and supplier information; loyalty programme data; gift card balances and redemption history; and, if you use our online storefront, orders, guest checkout details, cart activity, and coupon codes entered by your customers.

1.3 Payment Information

Payments made to TillIQ for subscriptions are processed by our third-party payment processors — Stripe, Inc. and WiPay Caribbean, depending on your billing rail and region — or, for select merchants, by manual bank transfer that we reconcile ourselves. We do not store your full credit or debit card numbers on our servers. We receive and retain only tokenised payment references, last-four-digit card identifiers, billing address, and transaction status provided by our processors. Separately, if you accept card payments from your own customers through the Platform's WiPay integration, those transactions are processed directly by WiPay under WiPay's own terms and privacy policy; we retain only the transaction status and reference needed for your records.

1.4 AI-Assisted Features

Certain features — product description generation, pricing and upsell suggestions, and receipt/invoice scanning — are powered by Anthropic PBC's Claude models and, for image recognition tasks, Google Cloud Vision. When you use these features, the relevant input (a product name, a photo of a receipt or invoice, or your recent sales data) is sent to that provider solely to generate the requested output. We do not use your Merchant Data or your customers' personal data to train any third-party AI model, and these providers are contractually restricted from using your data for their own purposes.

1.5 Technical & Usage Data

We automatically collect: IP address and approximate geographic location; browser type, version, and operating system; device type and identifiers; pages visited, features used, and session duration; error logs and diagnostic data; and cookies and similar tracking technologies (see Section 7).

1.6 Customer Data You Input

When you use TillIQ to manage your own customers (names, contact details, purchase history, loyalty points), you act as the data controller for that information and we act as your data processor. We process such data only on your behalf and in accordance with your instructions.

1.7 Student Data (School Accounts)

If you operate a School-type account, the Platform lets you record student information — name, date of birth, grade/section, parent or guardian contact details, canteen or fee balances, and notices you send home (including health or emergency alerts). This data belongs to your institution, not to TillIQ: you act as the data controller, we act as your data processor, and you are solely responsible for obtaining any parental or guardian consent required by applicable law before entering a student's information into the Platform. See Section 8 for how this interacts with our general policy on children's data.

2. How We Use Your Information

We use the information we collect for the following purposes: • To provide, operate, and maintain the Platform and its features. • To process your subscription payments and manage your account. • To personalise your experience and remember your preferences. • To send transactional and operational communications (receipts, alerts, service updates). • To send marketing communications about new features or offers — you may opt out at any time. • To provide customer support and respond to your inquiries. • To monitor and analyse usage trends to improve the Platform. • To detect, investigate, and prevent fraud, security incidents, and abuse. • To comply with applicable laws, regulations, and legal processes. • To enforce our Terms of Service and other agreements.

3. How We Share Your Information

3.1 Service Providers

We share data with trusted third-party vendors who process it on our behalf, including: Stripe, Inc. and WiPay Caribbean (payment processing); Anthropic PBC and Google Cloud (AI-assisted features, see Section 1.4); Resend (transactional and marketing email delivery); Neon Technologies, Inc. (database infrastructure); Vercel Inc. and Railway Corp. (cloud hosting); and Cloudflare, Inc. (content delivery, DNS, and security). These parties are bound by confidentiality agreements and may only use data to provide services to us.

3.2 Legal Obligations

We may disclose your information if required by applicable law, court order, regulatory authority, or to protect the rights, property, or safety of the Company, our users, or the public.

3.3 Business Transfers

If For Everyone Group LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a materially different privacy policy.

3.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so.

3.5 No Sale of Data

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

3.6 Within Your Organisation

If you operate more than one location under a shared TillIQ organisation account, data such as sales and staff performance reporting, and — where you have opted into shared loyalty — customer loyalty profiles, may be visible across your own locations to your account owner and authorised managers. This sharing is confined to locations you own or manage within the same organisation; it is never shared with unrelated merchants.

4. Data Retention

We retain your information for as long as your account remains active or as needed to provide you with the Platform. Upon account termination: • Account and business information is retained for seven (7) years to comply with applicable tax, accounting, and legal obligations. • Transaction records are retained for seven (7) years. • Marketing data is deleted within ninety (90) days of opt-out. • Technical logs are retained for up to twelve (12) months. You may request earlier deletion of certain data in accordance with Section 6, subject to our legal retention obligations.

5. Security

We implement commercially reasonable technical and organisational measures to protect your information, including: • Encryption of data in transit using TLS 1.2 or higher. • Encryption of sensitive data at rest. • Role-based access controls limiting employee access to data on a need-to-know basis. • Regular security reviews and vulnerability assessments. • Webhook signature verification for all payment-related events. No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your data (subject to our legal retention obligations). • Portability: Receive your data in a structured, machine-readable format. • Restriction: Request that we restrict processing of your data in certain circumstances. • Objection: Object to processing based on legitimate interests or for direct marketing. • Withdrawal of Consent: Withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at privacy@tilliq.app. We will respond within thirty (30) days.

7. Cookies & Tracking

We use cookies and similar technologies to operate and improve the Platform. Types of cookies we use: • Essential Cookies: Required for the Platform to function (authentication tokens, session management). • Analytical Cookies: Help us understand how users interact with the Platform (aggregated, anonymised data). • Preference Cookies: Remember your settings and preferences. You may configure your browser to refuse cookies; however, this may limit some Platform functionality. We do not currently respond to Do Not Track signals.

8. Children's Privacy

TillIQ accounts are for merchants and institutions, not for use directly by children. We do not knowingly collect personal information directly from individuals under 18 who are using the Platform as an end user, and if we learn that we have, we will promptly delete it — contact us at privacy@tilliq.app. This is separate from Student Data described in Section 1.7. Schools that use TillIQ's School features enter information about their own students, who are typically minors, in order to run fee collection, canteen accounts, and parent communications. That data is entered and controlled by the school, not collected by us directly from the student. The school is responsible for ensuring it has the legal basis — including any parental or guardian consent required in its jurisdiction — to give us that information to process on its behalf. We process Student Data only as instructed by the school, only for the school's own operational purposes, and never to advertise to or profile the student.

9. International Data Transfers

For Everyone Group LLC is incorporated in Delaware, USA, and operates across the Caribbean. Your data may be transferred to and processed in countries other than your own, including the United States and Jamaica. By using the Platform, you consent to these transfers. We take appropriate safeguards to ensure your data remains protected in accordance with this Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date constitutes your acceptance of the updated Policy.

11. Contact Us

For questions, concerns, or rights requests regarding this Privacy Policy, please contact: For Everyone Group LLC TillIQ Privacy Team Email: privacy@tilliq.app Website: tilliq.app