Privacy policy

Usecue POS is operated by Usecue BV in the Netherlands. This page explains which personal data we process when you use pos.usecue.com, why we do so, and what your rights are. The short version: we store what is needed to run your cash register, we do not sell data, and we do not use tracking or advertising cookies.

Who is responsible

Usecue BV is the controller for the data described on this page, except for the sales data that sellers enter about their own buyers. For that data the seller is the controller and we act as a processor. You can reach us at joost@usecue.com.

Data of account holders

When you create an account we store your email address (which is your username), your name, a hashed password, your preferred language and the date you signed up. If you sign in with Google we receive your name and email address from Google and nothing else. We do not get access to your Google account.

In your company profile you can enter your company name, chamber of commerce number, VAT number, IBAN, default VAT percentage and description, a background image, a return URL and a webhook URL. Your company name and IBAN are shown to buyers, for instance in the EPC QR code and on receipts.

Everything you enter to run your business is stored as well: products, product groups, receipts, tabs, payment links, visits to your payment page and the emails the application sends on your behalf (recipient, subject and body). We process this data only to provide the service to you.

Data of buyers

If you pay a seller through a payment page or QR code we store the amount, the description, the payment method you chose, your language and the time of your visit and payment. When you confirm a payment yourself and are asked for the last digits of your account number, we store those digits so the seller can match your payment. The payment itself takes place in your own banking app. We never see your bank login or your full account details, and the payment page does not set tracking cookies.

Bank connection

A seller can connect a bank account through Ponto, a service of Isabel Group. In that case we retrieve the transactions of that account through the Ponto API and store the amount, currency, counterpart name, reference, description and dates. We use this data only to match incoming payments to sales. The connection can be revoked at any time in the Ponto dashboard. The privacy policy of Ponto applies to the connection itself.

Cookies

We set two cookies. A session cookie keeps you logged in and a locale cookie remembers your language. Both are functional and cannot be used to track you. We do not use analytics, advertising or third-party cookies.

Emails

We send emails for login links, password resets and, if you have enabled it, a notification when a buyer marks a payment as paid. At your request the application also sends receipts to your buyers.

Legal basis

We process account and sales data because it is necessary to perform our agreement with you. We process technical data such as IP addresses in server logs on the basis of our legitimate interest in keeping the service secure. Google sign-in and the Ponto connection are optional and only used with your consent.

Retention

We keep your data for as long as your account exists. If you want your account and all data deleted, send an email to joost@usecue.com and we will delete it within 30 days, unless we are legally obliged to keep certain records. Server logs are kept for a limited time for security purposes only.

Sharing

We do not sell or rent personal data. Data is only shared with the hosting provider of our servers, which are located in the European Union, and with Google and Ponto when you choose to use those services. We may disclose data when the law requires us to.

Security

All traffic is encrypted with HTTPS. Passwords are stored as hashes and cookies are marked secure and HTTP-only.

Your rights

You have the right to access, correct, delete and export your personal data, to restrict or object to its processing and to withdraw consent. Send your request to joost@usecue.com. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this policy. The current version is always available on this page.

This privacy policy was last updated on 11 September 2026.