Legal / Privacy
Privacy policy
How ESTINAD collects, uses, and protects the data of the businesses that depend on it.
1. Scope
This policy covers ESTINAD OS and its products — Retail, Restaurant, Clinic, and Cloud — including the websites, dashboards, and on-premise deployments operated by ESTINAD.
2. Data we process
Account and organization data; branch and user configuration; transactional records (sales, stock, schedules, billing); and operational logs needed for audit and reliability. Sensitive sectors, such as clinics, receive additional controls described in product documentation.
3. How we use data
To operate the platform, provide support, maintain reliability, prevent fraud, and improve the products. We do not sell personal data. Aggregated, non-identifying metrics may be used for product analytics.
4. Encryption and storage
Data is encrypted in transit and at rest, including backups. Regional residency and hybrid deployment are available where regulation requires data to remain in-country.
5. Access and control
Owners control who can access what through role-based access. Individuals may request access to, correction of, or deletion of their personal data where applicable, by contacting ESTINAD.
6. Retention
Data is retained for as long as your account is active and as needed to meet legal, accounting, or audit obligations. Backups support point-in-time recovery within the platform's retention window.
7. Sub-processors
ESTINAD uses vetted infrastructure and service providers under data-processing terms. A current list of sub-processors is available on request.
8. Contact
Questions about this policy or data requests can be sent to privacy@estinad.com. We will respond within the period required by applicable law.