RUPOS Privacy Policy

Effective Date: 01 January 2026

1. Introduction

Welcome to RUPOS (Retail Unified Point of Sale), a cloud-based retail management and point-of-sale platform owned and operated by CI Global Technologies Private Limited ("CI Global Technologies", "RUPOS", "we", "our", or "us").

This Privacy Policy explains how we collect, use, process, store, transfer, disclose, and protect personal information when you use our website, mobile applications, POS software, WhatsApp ordering services, and related products and services.

RUPOS is designed to support compliance with applicable privacy regulations, including the GDPR, CCPA/CPRA, and other applicable data protection laws through appropriate technical and organizational measures.

Merchants using RUPOS remain responsible for ensuring their own compliance with laws applicable to their business and jurisdiction.

2. Information We Collect

2.1 Information You Provide

2.2 Transaction Information

2.3 Device and Technical Information

2.4 Location and Bluetooth Information

If enabled by the user, RUPOS may access device location and Bluetooth information solely for supporting POS hardware operations, including:

2.5 WhatsApp Ordering Information

When merchants enable WhatsApp ordering functionality, RUPOS may process:

3. Legal Basis for Processing (GDPR)

Where GDPR applies, personal data is processed under one or more of the following legal bases:

Contract Performance

Legitimate Interests

Legal Obligations

Consent

4. How We Use Information

5. Data Controller and Data Processor

For merchant customer data stored within RUPOS:

6. Payment Processing

RUPOS may integrate with third-party payment service providers including Razorpay and other supported payment gateways.

Payment information is processed directly by the payment provider in accordance with their privacy and security policies.

RUPOS does not store complete payment card information on its servers.

7. Cloud Storage and International Data Transfers

RUPOS uses Amazon Web Services (AWS) and other trusted infrastructure providers for hosting, storage, backup, file management, and disaster recovery services.

Personal data may be processed or stored in countries outside the user's country of residence.

Where personal data is transferred internationally, RUPOS implements safeguards including:

8. Sharing and Disclosure of Information

Service Providers

We may share information with trusted providers that assist with:

Third-Party Integrations

Information may be shared with integrations enabled by merchants for operational purposes.

Legal Compliance

Information may be disclosed when required by law, court order, regulation, or governmental request.

Business Transfers

Information may be transferred as part of a merger, acquisition, reorganization, or sale of assets.

9. Data Security

CI Global Technologies implements appropriate technical and organizational measures including:

While we strive to protect information, no method of transmission over the Internet can be guaranteed as completely secure.

10. Data Retention

RUPOS retains personal data and business records only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal, regulatory, tax, accounting, and contractual obligations.

Unless a longer retention period is required or permitted by law, RUPOS may retain customer, employee, transaction, inventory, audit, reporting, operational, and other business-related records for a period of up to 10 years from the date of collection or from the end of the business relationship, whichever is later.

We retain information for:

After the applicable retention period expires, personal data will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable laws and industry standards.

11. GDPR Privacy Rights

Individuals may have the right to:

Withdrawal of Consent

Where processing of personal data is based on consent, individuals have the right to withdraw their consent at any time.

To withdraw consent, submit a request by email to: support@rupos.app

The request should include:

Upon verification of the request, RUPOS will process the withdrawal request within a reasonable period and in accordance with applicable legal requirements. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal request was received.

12. California Privacy Rights (CCPA/CPRA)

California residents may have rights to:

RUPOS does not sell personal information as defined under the California Consumer Privacy Act (CCPA).

13. Cookies and Tracking Technologies

RUPOS uses cookies and similar technologies to:

Users may manage cookie settings through browser preferences.

14. Children's Privacy

RUPOS is not intended for individuals under 16 years of age and does not knowingly collect personal information from children.

15. Data Breach Notifications

In the event of a security incident involving personal information, CI Global Technologies will investigate the incident and provide notifications where required by law.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updated versions will be published within the platform and website.

Continued use of the Services after updates become effective constitutes acceptance of the revised Privacy Policy.

17. Contact Us

CI Global Technologies Private Limited
RUPOS Support Team
Email: support@rupos.app

Data Controller and Data Processor

RUPOS maintains appropriate technical and organizational measures to support compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy regulations.

For customer and employee information stored within RUPOS: