Privacy Policy

LEMON is a point-of-sale and ordering platform for small merchants. This Privacy Policy explains what information we collect when you use our products and websites, why we collect it, how we use and protect it, and the choices you have. We aim to keep this document plain enough to read in one sitting.

1Who this policy covers

This policy applies to merchants and their staff who sign in to operate a shop, customers who place orders through a merchant's ordering link or QR code, and visitors to our websites. Different sections may be more relevant to different audiences; where a practice applies only to one group, we say so.

2Information we collect

Information you provide

• Account details such as your name, contact information, business name, and the security credentials you set when you sign up.
• Business profile information you choose to add to your shop, including logos, menus, item photos, opening hours, and payee details for receiving customer payments.
• Content you upload or enter while running your shop, such as orders, daily session notes, and staff records.
• Messages you send to us, including support requests and feedback.

Information collected automatically

• Basic device and connection information such as device type, operating system, browser, language preferences, and IP address.
• Activity information such as the pages and features you use, timestamps, and approximate location derived from IP address.
• Diagnostic information such as crash reports and performance metrics that help us keep the service stable.

Information from third parties

When you sign in using a third-party authentication provider, that provider may share a persistent identifier and limited profile fields with us. We only request the minimum information needed to create or recognise your account. We do not receive passwords from these providers.

Customer transaction information

When a customer places an order through a merchant's shop, we process the order details on the merchant's behalf so the order can be fulfilled. Customers may also supply contact or pickup information directly to the merchant during checkout.

3How we use information

• To create and maintain accounts and to authenticate sign-ins.
• To provide the platform's core features, including taking orders, managing menus, recording sales, and producing reports.
• To send service messages such as receipts, password recovery, security alerts, and changes to terms.
• To respond to support requests and improve features based on observed usage.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with applicable law and respond to lawful requests from public authorities.

4How we share information

With service providers

We work with trusted third-party providers that perform services on our behalf, such as cloud hosting, transactional communications, payments, analytics, and security monitoring. These providers are bound by contract to use the information only for the services we ask them to perform.

Between merchants and their staff

A merchant account owner can see activity and account details for staff members linked to their shop, including sign-in history and actions taken in the application. Staff members should expect that their work activity inside the application is visible to the merchant.

Between merchants and their customers

Order content and limited customer contact details are visible to the merchant who received the order. We do not share customer information with other merchants.

For legal and safety reasons

We may share information if we believe in good faith that doing so is necessary to comply with law, respond to lawful process, protect the rights, property, or safety of LEMON, our users, or others, or to investigate fraud or abuse.

In a business transfer

If LEMON is involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

5How long we keep information

We retain information for as long as your account is active and for a reasonable period afterwards to meet our legal, accounting, and operational obligations. Transactional records may be retained for longer where law requires. When information is no longer needed, we delete it or make it irreversibly anonymous.

6How we protect information

We apply technical and organisational measures appropriate to the type of information we handle, including encryption in transit, access controls, audit logging, and regular review of our security practices. No system is perfectly secure. If you believe your account has been compromised, contact us promptly so we can help you secure it.

7Your choices and rights

Subject to local law, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete information, subject to our retention obligations.
• Export a portable copy of certain account information.
• Object to or restrict certain processing of your information.
• Withdraw consent where we relied on it to process your information.

You can exercise most of these rights from within the application or by contacting us using the details below. We may need to verify your identity before fulfilling a request.

8International transfers

Some of our service providers operate outside the country where you live. When we transfer information across borders, we take steps so that it continues to receive an appropriate level of protection.

9Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure sign-in sessions, and measure how the service is used. You can control cookies through your browser settings. Disabling certain cookies may prevent parts of the service from working as intended.

10Children

The platform is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to remove it.

11Third-party links and integrations

The service may link to or integrate with services we do not control. We are not responsible for the privacy practices of those services. We encourage you to review their privacy notices before using them.

12Changes to this policy

We may update this policy from time to time. When we make material changes we will update the effective date at the top of this page and, where appropriate, give you additional notice within the service.

13Contact us

Questions about this policy or your information can be sent to privacy@lemonpos.store.