Privacy policy

Two different people use this platform and the answers are not the same for both. An operator signs up, holds an account and runs machines. A venue owner is given access to a single location by an operator, and their operator decides what they can see.

A player who taps a card at a machine has no account here and we hold no name for them.

What signing up asks for: the legal name of the business, its tax identifier, an address, and the name, email address and mobile number of each owner. Where a business has more than one owner we ask for the co-owner's details so they can confirm their part themselves.

What the product then records: the machines and locations set up, the readers and their placements, prices set, and the transactions those readers take.

Ordering a machine on finance or trading one in asks for up to two photographs: the machine, and evidence it is placed or earning. They are checked by their actual contents rather than their file name, and anything that is not an image is deleted rather than merely refused.

They are kept for the life of the order plus seven years, following the same retention as the financial records they support.

Card numbers never reach us. A reader is certified hardware and the card data goes to the acquirer, not to this platform.

The SIM cards in the readers carry identifiers and network credentials that we deliberately do not store, read or copy into our own records.

Every change that matters is written to a log that cannot be edited or deleted. That is what lets us answer who changed a price, who moved a reader and who approved an order, months later and in a dispute.

Because those entries are permanent, we deliberately keep personal detail out of them. The log records that a thing happened, which record it happened to and who did it. It does not copy in tax identifiers, bank details, message contents or contact details, and the system refuses to write them there.

One consequence is worth stating plainly: a request to erase your personal data can be met for the records that hold it, and the log will still show that an action took place. There is nothing personal left in it to remove.

An application that is started and never finished is deleted after thirty days of no activity. A submitted application is kept, because it is the record of how a live account came to exist.

The contact and demo forms record what you type into them: your name, your business, how to reach you, what you are interested in and how many machines you run. It goes to the same pipeline a phone call would, and a person reads it.

The connectivity provider behind the SIM cards, our payment processor, and the hosting and database providers that run the platform. Each sees only what their part requires.

A venue owner sees the location their operator gave them and nothing above it. Operators do not see each other.

Support is the fastest route. An operator can also use the chat thread inside the app, which is permanent and is read by a person.

The postal address and the data contact for this policy are not published yet. Counsel will fill both in with this document.