Privacy policy

1. Data controller

PaderfSuite is published and operated by PADERF TECH SARL. For privacy questions, please write to support@paderftech.com.

Company identifiers provided on the website: IF 71796079, RC 81237, ICE 003888520000044, business tax number 20126928.

2. Data collected through the website

When you email support@paderftech.com, we receive your email address and the information you choose to send. Contact links open your email application; this website has no demo or contact form. Your message may include:

• your name,
• your business or project name,
• your city,
• your needs and the modules you are interested in,
• any other information you choose to provide.

The website may also generate standard technical browsing data, such as IP address, browser type, date, time and server logs needed for the proper operation and security of the service.

3. Data processed by POSCaisse and PaderfSuite modules

POSCaisse is a professional point-of-sale application. Depending on the enabled modules and the client's chosen configuration, it may process the following data:

• catalogue: products, categories, prices, VAT, images, ingredients, recipes and stock,
• sales: receipts, basket lines, discounts, taxes, payments, refunds, cancellations and Z closings,
• tax and traceability data: transaction numbers, signatures, logs and exports,
• employees: name, role, permissions, sessions, PIN or NFC badge if configured,
• customers: name, phone number, reservations, loyalty or order information when these features are used,
• devices: till identifier, serial number, printers, payment terminals, PDAs, kiosks, shared displays and kitchen displays,
• backups: local, external or cloud backup files when the client enables this option,
• technical data: application logs, connection status, local network configuration and licence information.

Most of this data is stored locally on the client's devices. PaderfTech does not access the business's local data unless the client voluntarily enables a cloud service, remote backup, online ordering module or cloud BackOffice, or requests assistance requiring controlled access.

4. Permissions used by the application

POSCaisse may request certain Android permissions solely for business features:

• internet and network status: licensing, cloud backups, BackOffice, online ordering and synchronisation,
• Wi-Fi and multicast: discovery of and communication with authorised local devices,
• camera: barcode reading when the client uses the camera scanner,
• NFC: employee badge or contactless loyalty card when configured,
• Bluetooth and USB: connection to compatible printers, scanners and peripherals,
• biometrics: local authentication if enabled by the client,
• startup and background service: resuming authorised synchronisation and backup services.

These permissions are not used for advertising, profiling or data resale.

5. Purposes of use

Data is used to:

• respond to your demo or contact request,
• contact you about PaderfSuite and its modules,
• prepare a commercial proposal or a discussion to assess your needs,
• operate the till, sales, printing, stock and reporting,
• manage users, permissions, devices and licences,
• perform the backups, restores and synchronisations selected by the client,
• ensure the security, maintenance and technical reliability of the website and applications.

6. Legal basis and client responsibility

Website data processing is based on your voluntary contact request and our legitimate interest in responding to commercial enquiries and operating our services securely.

For data entered into POSCaisse by a restaurant, business or administrator, the professional client remains responsible for the entry, accuracy and use of data about its employees, customers and commercial operations. PaderfTech provides the technical tools to manage this data according to the chosen configuration.

7. CNDP compliance and Law 09-08

Where the formalities under Law 09-08 apply to processing through this website, cloud services or associated commercial management, PaderfTech undertakes to meet the applicable obligations and keep its contractual and technical documentation up to date.

8. Recipients and processors

The information is intended for the PaderfTech team handling commercial enquiries, support and demo follow-up. It may also pass through technical providers strictly necessary for the operation of the website, email, hosting, backups, online ordering or payments.

Depending on the enabled modules, providers may include web and VPS hosting, Google/Firebase services, email services, online payment providers and technical infrastructure needed to operate the service.

9. Hosting, cloud and possible transfers outside Morocco

The website, emails, PosAdmin, cloud PosBackOffice, cloud backups or online ordering may rely on hosting or infrastructure providers located in Morocco or abroad. Local till data remains on the client's devices while no cloud service or remote synchronisation is enabled.

When a transfer outside Morocco is necessary, PaderfTech applies reasonable security measures and limits the transfer to data needed for the service enabled by the client.

10. Backups, restoration and encryption

POSCaisse allows clients to create backups locally, on external media, over the local network or in PaderfSuite cloud storage when this service is enabled. The client chooses the configuration, frequency, destination and, where available, encryption of the database or archives.

Cloud backups are kept according to the configured retention period and contract limits. Older backups may be deleted automatically when retention or quota limits are exceeded, while keeping the latest safety backups provided for by the service.

11. Payments and banking data

POSCaisse and PaderfSuite modules may record the payment method, amount, transaction status, payment references or information needed for account reconciliation. PaderfTech does not store full payment card numbers or CVVs. Online payments are processed by the payment providers configured by the client.

12. Retention

Commercial enquiries are retained for as long as needed to manage the relationship, then archived or deleted according to their operational usefulness and applicable legal obligations.

Till data, receipts, fiscal signatures, reports, logs and exports are retained according to the legal, tax and contractual obligations applicable to the client. The client controls retention of the local database. Cloud services apply the retention periods configured in the contract or administration interface.

13. Cookies and audience measurement

At present, the website is not intended to place advertising or profiling cookies. Technical elements strictly necessary for the website's operation or security may nevertheless be used by the hosting provider or server.

14. Your rights

You may request access to, correction or deletion of your data, and ask questions about its use, by writing to support@paderftech.com.

For data entered into the till by a restaurant or business, individuals must first contact the establishment operating the till. PaderfTech may assist the professional client to the extent compatible with the contract and chosen technical configuration.

15. Security

We implement reasonable safeguards to limit unauthorised access, loss, alteration or disclosure of data. However, no system is infallible and absolute security cannot be guaranteed.

Measures may include role-based authentication, employee permissions, device-bound licensing, encryption when enabled by the client, controlled backups, HTTPS connections for remote services and pairing of authorised local devices. Devices connected to the local network must be protected by a professional network separate from public Wi-Fi.

16. Children's data

PaderfSuite is a professional solution for restaurants, businesses and authorised operators. It is not intended to knowingly collect children's data through its website or point-of-sale application.

17. Changes to this policy

This policy may be updated to reflect changes in the website, our practices or the legal framework. The update date shown at the top of the page is authoritative.