Privacy policy

Last updated October 14, 2026

This policy explains what information OwnPoint holds, why, who else handles it, and what you can do about it. OwnPoint is run by TML Consulting Services LLC, 1934 Meridian Blvd., Mammoth Lakes, CA 93546 (“we”, “us”).

1. Two kinds of information

About the businesses that use OwnPoint. The owner’s and managers’ names, email addresses and sign-in details. We are responsible for this information.

That a shop keeps in OwnPoint. Its sales, staff and customer records. The shop decides what to record and why; we store and process it on the shop’s behalf and only to run OwnPoint for it. If you are a customer or employee of a shop that uses OwnPoint, the shop is the one to ask about your information, and we will help it answer.

2. What is stored

• Accounts: name, email address and password for owners and managers. Passwords are handled by our sign-in provider and are never stored in readable form.
• Staff: name, optional email, role, hourly rate, a register PIN (stored only as a one-way hash), clock-in and clock-out times, schedules, availability and time-off requests.
• The shop: its name, address, phone, email, tax rates, products, prices, stock and suppliers.
• Sales: what was sold, prices, discounts, tax, tips, how it was paid, which staff member rang it and when, and cash drawer counts. Voids, refunds, discounts and drawer opens are logged with who, what and when, because tax law and theft prevention require it; that record cannot be switched off.
• A shop’s customers, when the shop records them: name, email, phone, address, birthday, notes, loyalty punches, purchase history and whether they agreed to marketing email. This includes an email address typed in for a receipt, and a phone number entered on the card reader to collect loyalty punches.
• Questions to the assistant: each question asked of the assistant in a shop’s account, the answer it gave, when, and who asked it where that is known (their name and role), kept with that shop’s account. An answer can include what the assistant looked up to give it, such as a customer’s name or a day’s sales.

3. Card details

Card numbers never touch our systems. Cards are read by the shop’s Stripe card reader or Stripe’s online payment form and processed by Stripe under the shop’s own Stripe account. We keep only Stripe’s reference for each payment, so a sale can be matched to its charge or refunded. Stripe’s handling of card data is described in Stripe’s own privacy policy.

4. What is kept on the device

OwnPoint uses cookies only to keep people signed in. There are no advertising or analytics trackers. The register keeps some things in the browser’s own storage: sales waiting to upload after an outage, the current basket, and register settings. The assistant’s conversation on screen is kept in the browser tab and cleared when it closes; the questions and answers themselves are also stored with the shop’s account (sections 2 and 7). Questions typed into the assistant in the public demo are saved, without personal identifiers, to improve OwnPoint (section 7). Please don’t enter personal details there.

5. Why we use it

To run OwnPoint for the shop: ring and record sales, print and email receipts, run schedules and reports, back everything up, keep it secure and give support. We do not sell personal information, share it for advertising, or use one shop’s sales, customer or staff records for any other shop. We do not use those records in aggregated or de-identified form either.

Questions asked of the assistant are the one exception. To improve OwnPoint, we may review questions asked of the assistant, and its answers, across all shops: what owners ask, and where the answers fall short. They are never sold, never shared with advertisers or with other shops, and no shop ever sees another shop’s questions. This covers questions asked of the assistant, its answers (including what it looked up to give them) and who asked them only, never a shop’s sales, customer or staff records themselves.

6. Who else handles it

We use these service providers, each only for the part of the service named:

• Supabase — the database and sign-in.
• Vercel — hosting the application.
• Stripe — card payments, under the shop’s own Stripe account.
• Backblaze B2 — storage for the nightly backup copy of the database.
• GitHub — runs the job that makes the nightly backup.
• Resend — sending receipt emails.
• Anthropic — the AI model behind the assistant. When someone asks it a question, the question and the store information needed to answer it are sent to Anthropic.

The database and the application run in the western United States (Northern California). The nightly backup copy is stored with Backblaze B2, also in the western United States. We may also disclose information when the law requires it.

7. Backups and how long information is kept

We keep a shop’s information while its account is open. A copy of the whole database is backed up every night: daily copies are kept for about a month and one copy a month for about a year, then deleted automatically. A shop can export everything at any time, including after it leaves. Its sales, refunds, drawer closes and the record of who did what are never edited or deleted: we keep them as long as tax law requires. Backup copies age out as described above.

Questions asked of the assistant, and its answers, are kept until the shop asks us to delete them — including after a shop leaves: they are not part of the records kept as tax law requires. Questions asked in the public demo, and its answers, are kept with no end date.

8. Security

Each shop’s data is walled off from every other shop’s in the database itself, not only in the app. Connections are encrypted, PINs are hashed, and card data never reaches us. No system is perfectly secure; if a breach affects your information, we will tell the affected shops, and the authorities, where the law requires it.

9. Your choices

• Shops can see, correct and export their own data at any time; the sales record and the record of who did what are kept and never edited or deleted (section 7). Everything a shop owns can be exported in standard file formats from Reports → Export, without asking us — the assistant’s questions and answers included. To delete those, email support@ownpointpos.com.
• A shop’s customers and staff can ask that shop to see, correct or delete what it holds about them, and to stop marketing email.
• California residents may have the right to know what personal information we hold about them and how it is used, to ask us to correct or delete it, and not to be treated differently for asking. We do not sell or share personal information. Where we hold it on a shop’s behalf, we pass the request to that shop and help it answer. To make a request, email support@ownpointpos.com.

10. Children

OwnPoint is for businesses and is not directed at children under 13. We do not knowingly collect their information.

11. Changes

If we change this policy, we will post the new version here and update the date at the top, and tell account owners by email before a material change takes effect. Our terms of service cover the rest of the agreement.

12. Contact

TML Consulting Services LLC, 1934 Meridian Blvd., Mammoth Lakes, CA 93546. Email: support@ownpointpos.com. Phone: 760-230-3755.