Tingting POSPrivacy Policy
1. Who we are
Tingting POS ("the App") is developed and operated by ACheetah Trading Import-Export Sole Co., Ltd (ບໍລິສັດ ອາຊິຕ້າ ການຄ້າ ຂາເຂົ້າ-ຂາອອກ ຈຳກັດຜູ້ດຽວ), enterprise code 01-00031844, Dontiw Village, Xaythany District, Vientiane Capital 01000, Lao PDR ("we", "us"). Managing Director: Bangkeo Khonesamai. Privacy contact: admin@tingtingpos.app.
2. Our role, and the shop's role
Tingting POS is used by businesses ("shops") to run their sales, stock, staff and customer conversations.
- We decide how data is used (we are the controller) for the accounts of people who use the App — shop owners, staff, marketplace buyers and sellers, partners and creators — and for payments made to us.
- The shop decides how data is used for the information it keeps about its own customers and staff: customer records, orders, conversations with its customers, and its staff's attendance, pay and leave. We process that data on the shop's behalf and follow its instructions. Each shop is responsible for having a lawful reason to collect that data and for telling its customers and staff about it.
3. What we collect
3.1 Your account
- Email address and password (the password is handled by Google Firebase Authentication and never stored by us), or your Google sign-in.
- Name, phone number, WhatsApp number, gender, date of birth, address and profile photo — the ones you choose to add.
3.2 Business records a shop keeps in the App
- Products, stock, prices, branches, receipts, expenses and settings.
- Orders and debts, including the customer's name, phone number and delivery address.
- Customer records: name, phone, email, address, area and photo, as entered by the shop.
3.3 Staff and employment records (kept by the shop)
- Role, permissions, pay rate, pay-period payments, advances and warnings.
- Attendance: check-in and check-out times, a selfie taken with the camera at check-in and check-out, and the device location at check-in. The location is compared with the branch location so the shop can require staff to be on site, and is stored with the attendance record.
- Leave requests, shift reviews, tasks and task photos.
- Work passport: a person's own record of past employment and ratings, which they can show a future employer.
3.4 Job applications
When you apply to a shop through the App you may submit your contact details, education and work history, expected salary, a reference's name and phone number, your ID card number, and photos of your ID card and household register. These go to the shop you apply to.
3.5 Customer conversations
When a shop connects its Facebook Page or WhatsApp Business number, messages its customers send it — text, photos, voice messages and videos — and the shop's replies are stored in the App so staff can answer them. We also store the customer's name as provided by WhatsApp or by a Facebook comment — or, when they message the Page on Messenger, the name and profile photo from their Facebook profile — and comments left on the Page's posts. Conversations in the STOR marketplace are stored the same way.
3.6 STOR marketplace
- Buyers: account, saved delivery addresses and their map location, orders, payment slips, and any dispute with its photos.
- Sellers (identity check): business name, owner's name, ID number, phone and address, a photo of the ID card and a selfie holding it.
3.7 Partners and creators
Bank name, account name and number, and a payout QR code, so we can pay commissions; and a profile photo.
3.8 Payments to us
Subscriptions and assistant credits are paid by bank transfer. We keep the payment slip you upload. We do not collect card numbers.
3.9 Voice
A shop can record a sample of a voice so its assistant can reply to customers with voice messages in that voice.
3.10 Device and usage information
- Crash reports (device model, system version, app version and your user ID) through Firebase Crashlytics.
- Which screens are opened and which order actions are taken, stored with your user ID in our own database, to improve the App.
- A push-notification token, and whether a shop's devices are online, so owners are alerted when a device goes offline.
3.11 Device permissions
The App asks for the camera (selfies, product photos, scanning barcodes and documents), location (check-in radius, delivery addresses), the microphone (voice messages and voice samples), Bluetooth (receipt and label printers), photos and notifications. Each is requested when you first use the feature that needs it, and you can refuse or withdraw it in your phone's settings.
3.12 What we do not do
- We do not sell personal data.
- We do not show advertising, use advertising IDs or track you across other companies' apps and websites.
- We do not read your phone's contacts.
4. Why we use it
| Purpose | Basis |
|---|---|
| Running the App's features: sales, stock, staff, payroll, conversations, marketplace orders | Contract with you or your shop |
| Checking staff are on site and who checked in, when the shop turns this on | The shop's legitimate interest as employer |
| The assistant: drafting replies to customers, reading order details from a conversation, answering business questions | The shop's choice to turn the assistant on |
| Verifying marketplace sellers and paying partners | Contract; preventing fraud |
| Security, crash diagnosis and improving the App | Our legitimate interest |
| Keeping accounting records | Legal obligation (Lao tax law) |
| Answering privacy requests | Legal obligation |
5. Who else processes it
We use the following providers. Each receives only what its task needs.
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Google Firebase and Google Cloud | Database, file storage, sign-in, server functions, push notifications, crash reports | All data described above | Singapore and the United States |
| Google (Gemini API) | The assistant: most customer replies, understanding photos, voice messages and videos, reading waybill photos, product and help search | Conversation text and media, including names, phone numbers and addresses customers write; product and help texts; business figures for business questions | United States |
| Anthropic (Claude API) | The assistant: replies involving orders, photos, cancellations and complaints | Conversation text and photos, including the order details above | United States |
| Meta (Facebook, Messenger, WhatsApp) | Sending and receiving the shop's messages and comments; connecting a Facebook Page | Messages and media exchanged with customers | Meta's data centres |
| CAMB.AI | Turning the assistant's text replies into voice, in the shop's chosen voice | Reply text (up to 500 characters); the voice sample a shop records | CAMB.AI's servers |
| OpenStreetMap and Esri (ArcGIS) | Map images when a map is shown | The map area requested and your IP address | Their servers |
| YouTube | Playing learning videos inside the App | What YouTube receives when a video plays |
Messages the assistant handles are processed by Google or Anthropic only to return a result to us. We use their paid API services, under which they do not use this content to train or improve their models. The assistant is on only when the shop turns it on, and staff can take over any conversation. Assistant answers can be wrong; see the Terms of Service.
We may also disclose data when Lao law requires it, or to protect people from fraud or harm.
6. Where it is stored
Data is stored with Google Firebase in Singapore (asia-southeast1). Some server functions run in the United States, and the assistant providers above process data in the United States. By using the App you understand that your data is transferred to these countries. To let the App work without internet, data is also kept on your device.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account profile | While your account is open; cleared when you delete it |
| Customer conversations, their photos, voice messages and videos | Deleted 12 months after the last message in the conversation |
| Facebook comments captured into the App | 12 months |
| Check-in and check-out selfies | Deleted 2 days after the attendance record is approved |
| Job-application documents (ID card, household register photos) | While the application is open; deleted no later than 90 days after it is decided |
| Seller identity (ID card) documents | While the account is open; deleted when the account is deleted |
| Orders, stock, receipts, payment slips and other accounting records | 5 years, as Lao tax law requires |
| Staff attendance, pay and leave records | Kept as the shop's employment records while the shop uses the App; the shop can ask us to delete them |
| Usage events | 12 months |
| Crash reports | 90 days (Firebase) |
Deletion runs automatically every day.
8. Your rights and choices
- See and correct your profile in the App's settings.
- Download your profile and your shops' orders, customers and products as a file: Settings → Export My Data (once a day). For any other data, email us.
- Delete your account: Settings → Delete My Account. This clears your name, email, phone, WhatsApp, date of birth, address and profile photo; deletes the documents you uploaded (ID card, identity check, payout QR codes), your saved delivery addresses, your work passport and any open job applications; and deletes your login. What stays: your shops' orders and stock and your payment slips (5 years, Lao tax law, without your name), and the records an employer shop keeps about your work there, which belong to that shop. An owner whose shop still has staff must transfer the shop first.
- Facebook users: see how to delete data received from Facebook.
- Customers or staff of a shop: the shop controls your records — contact the shop first. If the shop does not respond, email us and we will help.
- Withdraw a permission such as location, camera or microphone in your phone's settings at any time.
- Complain to us, or to the relevant authority in the Lao PDR.
We answer requests within 30 days.
9. How we protect it
- All connections use HTTPS/TLS encryption. Google encrypts stored data.
- Database and file access rules restrict each record to the people who are allowed to see it; staff see only what their role permits.
- Tokens that connect a shop's Facebook Page or WhatsApp number are kept on our servers and never sent to the App.
- Deleting an account requires signing in again first.
- Data kept on your device for offline use is protected by your phone's own lock — please keep a screen lock on devices used for your shop.
10. Children
The App is for adults who run or work in a business; accounts are for people aged 18 or older. It is not directed at children. Shops should not enter children's personal data unless they need it.
11. Changes to this policy
When we make a significant change we will tell you in the App before it takes effect, and update the date at the top of this page. This version (11 September 2026) describes features added since May 2026 — customer conversations, staff attendance and payroll, the marketplace and the assistant providers — and adds automatic deletion periods.
12. Contact
ACheetah Trading Import-Export Sole Co., Ltd
Dontiw Village, Xaythany District, Vientiane Capital 01000, Lao PDR
Email: admin@tingtingpos.app
WhatsApp: +856 20 7700 0079