Privacy Policy
Last updated October 25, 2026
The short version
- Each store's data belongs to that store. We keep it so the POS works, and we don't sell it.
- We share data only with the services that run the POS, and with apps a store chooses to connect, such as QuickBooks or ADP.
- A store can download its data or ask us to delete it at any time.
Who we are
PourPoint.AI ("we", "us") makes point of sale and back-office software for New Jersey liquor stores, at pourpoint.ai. This policy covers the PourPoint.AI website, the POS and back office, the pickup ordering pages we host for stores, and our integrations.
A store that uses PourPoint.AI ("the store") decides what it records about its own customers and staff. For that information we act on the store's behalf, and the store's own privacy practices also apply. Questions about a store's records are best sent to the store first.
What we collect
From stores and their staff
- Account details: owner and staff names, email addresses, phone numbers, sign-in details (we store passwords and PINs only as one-way hashes) and roles.
- Business records: items, prices, inventory, sales, invoices, bills, vendors, licenses, sales tax figures, the books, and the reports made from them.
- Payroll records, when a store uses payroll: hours, pay rates, withholding settings and pay amounts, and ADP employee numbers if the store connects ADP.
- Usage and device data: sign-in times, IP addresses, browser type and error logs, used to keep the service secure and working.
From a store's customers
- Purchases rung up at the register, and loyalty details if the store uses them.
- Pickup and delivery orders: name, phone, email, the items ordered and any note, whether placed on a store's website, a delivery app or another app the store connects.
- Age checks: New Jersey law requires stores to confirm buyers are 21 or older. When a store scans an ID, we record that the check passed and how it was done. We do not keep images of IDs.
- Payments: card payments are handled by the store's payment processor (such as Stripe). We receive the result and the last four digits, never the full card number.
From website visitors
The pourpoint.ai sales site sets no tracking cookies. If you send a demo request, it opens your own email app, and we receive only what you send.
How we use it
- To run the POS for the store: ring sales, track stock, keep the books, file reports, and the other features the store turns on.
- To keep accounts secure, prevent fraud, and fix problems.
- To send the store messages it asks for, such as reports and alerts, and to answer support requests.
- To meet legal duties, such as keeping records required by New Jersey's alcohol and tax rules.
We do not sell personal information, and we do not use a store's data to advertise to its customers.
AI features
Some features, such as the store assistants, invoice reading and voice commands, send the relevant store data to our AI provider to produce an answer. The provider processes it to answer that request only and does not use it to train its models. AI answers can be wrong, so a person confirms any change before the POS makes it.
Who we share it with
- Service providers that run PourPoint.AI for us under contract: cloud hosting and database (Google Cloud), website hosting (Cloudflare), email delivery, payment processing, and AI processing.
- Apps the store connects. When a store connects QuickBooks Online, ADP, Uber Eats, DoorDash or its own app through our API, we send that app the data the connection needs. For example, QuickBooks receives daily sales and bills totals, and ADP receives hours and pay. The store can disconnect at any time, and that app's own privacy policy then covers what it received.
- Authorities, when the law requires it, such as a valid subpoena, or to protect someone's safety.
- A buyer of our business, if PourPoint.AI is sold or merged. This policy would continue to cover the data.
QuickBooks and other connected accounts
When a store connects QuickBooks Online, Intuit gives us an access token. We store it encrypted and use it only to send the store's own books to its own QuickBooks company. We read from QuickBooks only what we need to do that, such as the chart of accounts and vendor names. Disconnecting in the POS deletes the token. The store can also revoke access from its Intuit account.
How long we keep it
We keep a store's data while its account is open. New Jersey requires liquor stores to keep sales and purchase records for several years, so we keep business records for as long as the store needs them for that, unless the store asks us to delete them sooner. After an account closes, we delete or anonymize its data within 90 days, except where the law requires us to keep it. Backups roll off within 35 days after that.
How we protect it
Data is encrypted in transit and at rest. Each store's data is kept apart at the database level, so one store can never see another's. Keys for connected apps are encrypted separately, and staff access is limited to people who need it to support the service.
Your choices and rights
- Stores can view, export and correct their data in the back office, and can ask us to delete their account.
- A store's customers and staff can ask the store to see, correct or delete their information. You can also write to us, and we will work with the store to answer.
- Residents of New Jersey and other states with privacy laws have rights to access, correct, delete and get a copy of their personal data, and to opt out of sale or targeted advertising (we do neither). We answer requests within 45 days.
Children
PourPoint.AI serves licensed alcohol retailers and is not meant for anyone under 21. We do not knowingly collect information from children.
Changes
If we change this policy, we will update the date above. If a change affects how we use store data, we will tell stores by email or in the back office before it takes effect.
Contact us
Email [email protected] with "Privacy" in the subject line.