Privacy Policy

Your Privacy is Our Priority

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your data.

Last Updated: July 18, 2026

1. Introduction

Welcome to Fzex POS ("we," "our," or "us"). This Privacy Policy covers both applications in the Fzex POS product family: the Fzex POS terminal app, a point-of-sale application for restaurant businesses requiring a restaurant login (6-character passkey) and individual staff login (WWID) to operate, and the Fzex Dashboard (Owner Monitor) app, used by restaurant owners to monitor sales, manage subscriptions, and administer their account across one or more branches. We are committed to protecting your privacy and ensuring you have a positive experience. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use either app (together, "the Apps"). By using the Apps, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We may collect and process the following types of information:

πŸͺ

Restaurant Credentials

Restaurant passkey (6-character code) used to bind the app to a specific restaurant account. No customer personal data is collected.

πŸ‘€

Staff Data

Staff Work ID (WWID) used for individual staff login, clock-in and clock-out timestamps, and shift records.

🧾

Order & Sales Data

Order items, quantities, prices, payment method, table number, order type, and transaction timestamps entered during operations.

πŸ“±

Device & Network Data

Device model and operating system version for printer compatibility. Local network access to discover and connect Bluetooth thermal printers.

πŸ“Έ

Camera & Product Photos

The camera permission allows staff to photograph menu items directly from the app. The photo library permission allows selecting existing images from the device gallery. Photos are uploaded to our secure servers solely for use as product images in the restaurant's menu. We do not access your camera or gallery for any other purpose, and images are never shared with third parties.

πŸ“‘

Location (BLE Only)

On Android 11 and below, location permission is required solely to scan for nearby Bluetooth Low Energy (BLE) printers. On Android 12 and above, Bluetooth scanning is performed without location access. We do not collect, store, or transmit GPS coordinates.

πŸ’Ύ

Locally Stored Data

Order history, menu snapshots, and void records are cached locally on the device (SQLite) to support offline operation. This data is not transmitted to third parties.

πŸ”‘

Account Sign-In (Owner Dashboard)

Email and password, or your Google account email and profile name if you choose "Continue with Google," used solely to authenticate you as the restaurant owner.

πŸ”’

Biometric App Lock (Owner Dashboard)

If enabled, Face ID, fingerprint, or device passcode is used to unlock the app. This is handled entirely by your device's operating system β€” your biometric data never leaves your device and is never seen, collected, or stored by us.

πŸ””

Push Notification Token (Owner Dashboard)

A device token (via Firebase Cloud Messaging) linked to your account, used to deliver subscription reminders and daily sales report notifications. No message content is stored beyond what's needed to deliver the notification.

πŸͺͺ

Payment Gateway Application Documents

If you apply to accept additional payment methods, we collect your business registration number (SSM), business/bank details, and uploaded identity and financial documents (IC/passport front and back, bank statement, and optionally proof of address) to submit your application to our payment gateway partner. These documents are stored securely and used solely for that application and its review.

πŸ’³

Subscription & Billing Data

Subscription status, billing history, invoices, and payment confirmations, including payment method type, payment channel, transaction reference, and (for saved cards) card brand and last 4 digits only. We never store full card numbers β€” these are handled directly by our payment gateway provider.

πŸ“Š

Owner Sales & Reports Data

Aggregated sales, revenue, and order analytics across your restaurant's branches, viewable by the account owner in the Dashboard app.

3. How We Use Your Information

πŸ”

Restaurant Authentication

To verify and bind the app to a licensed restaurant account using the restaurant passkey provided from the Fzex POS dashboard.

πŸ‘₯

Staff Management

To authenticate individual staff members via WWID, record clock-in/clock-out timestamps, and manage shift data for the restaurant.

🧾

Order Processing

To process dine-in, takeaway, and delivery orders, manage cart state, apply discounts, and sync orders to the kitchen display or customer screen.

πŸ“Έ

Product Image Upload

Camera and photo library access is used exclusively to let restaurant staff capture or select product photos for the menu. Images are uploaded to our secure servers and linked to the restaurant's product catalog. We do not scan, analyse, or use these images for any purpose beyond displaying them in the POS system and the customer-facing digital menu.

πŸ–¨οΈ

Printer Connectivity

On Android 11 and below, location permission is used exclusively to scan for nearby Bluetooth (BLE) thermal printers. On Android 12 and above, this is handled without location access. No GPS coordinates are recorded or transmitted.

πŸ“¦

Offline Support

To cache menu data and order history locally on-device so the app remains functional during network interruptions.

πŸ”‘

Owner Account Access

To authenticate restaurant owners into the Dashboard app via email/password or Google Sign-In, and to secure the app locally with Face ID, fingerprint, or passcode if enabled.

πŸ’³

Subscription & Payment Processing

To manage your subscription plan, process renewal payments, generate bills and receipts, and send reminders before a subscription expires.

πŸͺͺ

Payment Gateway Applications

To review and submit applications to enable additional payment methods (cards, e-wallets, online banking) on your behalf, including verifying the identity and banking documents you provide as required by our payment gateway partner.

πŸ””

Push Notifications

To alert you about subscription status, upcoming bills, and daily sales report summaries via your device's notification system.

βš–οΈ

Legal Compliance

To comply with legal obligations, prevent fraud, and protect the rights and safety of our business users.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

With trusted third-party vendors who assist in operating our services (payment processors, cloud hosting, analytics).

Legal Requirements

When required by law, court order, or legal process, or to protect rights, property, and safety.

Business Transfers

In connection with a merger, acquisition, or sale of assets, with appropriate safeguards in place.

With Your Consent

When you explicitly authorize us to share your information with third parties.

5. Data Security

Enterprise-Grade Security Measures

We implement industry-standard security measures to protect your information:

  • Encryption: Data is encrypted in transit (SSL/TLS) and at rest (AES-256)
  • Access Controls: Role-based access and multi-factor authentication
  • Regular Audits: Periodic security assessments and vulnerability testing
  • Secure Infrastructure: Hosted on secure, monitored cloud platforms

While we implement best practices, please note that no electronic storage method is 100% secure. We continuously work to improve our security measures.

6. Your Choices and Rights

You have the following rights regarding your personal information:

πŸ“

Access & Correction

Review, update, or correct your personal information at any time through your account settings.

πŸ—‘οΈ

Data Deletion

Request permanent deletion of your account and associated data (subject to legal retention requirements).

πŸ“€

Data Portability

Request a copy of your data in a structured, commonly used, machine-readable format.

πŸ”•

Opt-Out

Unsubscribe from marketing communications while still receiving important service updates.

⏸️

Restrict Processing

Request limitation on how we process your personal information in certain circumstances.

🚫

Object to Processing

Object to processing of your data for direct marketing or legitimate business interests.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

  • Active AccountsData retained while your account is active and for operational purposes
  • Inactive AccountsRetained for up to 2 years, then anonymized or deleted
  • Legal RequirementsSome data retained longer for tax, accounting, or legal compliance

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

Email Support
support@fzexpos.my
Phone Support
+60 16-301 3587

Mailing Address:
FZX Enterprise
3215, Lorong Serai Wangi 9/11,
Taman Serai Wangi,
09400 Padang Serai,
Kedah

Ready to Get Started?

Experience secure, reliable POS system trusted by businesses across Malaysia

View Pricing Plans