Privacy Policy for OX POS

Last updated: July 13, 2026

This Privacy Policy describes how LLC “CREATIVE PEOPLE”, operating under the OX System brand (“OX System”, “we”, “us”, or “our”), accesses, collects, uses, stores, protects, and shares information when users access or use the OX POS mobile application (“OX POS” or the “Application”).

OX POS is a business management and point-of-sale application intended for companies, entrepreneurs, their employees, and other authorized business users.

By using OX POS, you acknowledge that your information may be processed in accordance with this Privacy Policy.

Developer: LLC “CREATIVE PEOPLE”
Product: OX POS
Brand: OX System
Country: Republic of Uzbekistan
Address: Shota Rustavelli Street, Building 53B, Yakkasaray District, Tashkent, Republic of Uzbekistan
Website: https://oxapp.io
Privacy contact: privacy@oxapp.io
Technical support: support@oxapp.io
Telephone: +998 78 113 61 11

Depending on the functions used by the user and the configuration selected by the user’s company, OX POS may collect and process the following categories of information.

We may process:

  • full name;
  • username;
  • email address;
  • telephone number;
  • employee identifier;
  • company identifier;
  • job position;
  • user role and access permissions;
  • authentication and account information.

Passwords are not stored in plain text.

We may process information entered or uploaded by an authorized user, including:

  • company name and registration information;
  • branch and location information;
  • warehouse and cash register information;
  • products, categories, prices, barcodes, stock balances, and inventory records;
  • suppliers and contractors;
  • sales, returns, discounts, bonuses, and transaction records;
  • employee activity and performance information;
  • financial and operational reports;
  • customer information entered by the company using OX POS.

The company using OX POS is responsible for ensuring that it has a lawful basis for entering and processing information relating to its customers, employees, suppliers, and other persons.

Authorized users may enter customer information into OX POS, including:

  • customer name;
  • telephone number;
  • email address;
  • customer identifier;
  • purchase history;
  • loyalty points, cashback, discounts, and bonuses;
  • delivery or contact information;
  • customer notes entered by an authorized user.

OX System does not independently collect this information directly from the customer unless the customer interacts with an OX System service. This information is generally provided and controlled by the business using OX POS.

OX POS may process:

  • transaction amount;
  • purchased products and quantities;
  • discounts, taxes, bonuses, and cashback;
  • payment method;
  • payment status;
  • transaction reference;
  • receipt and refund information.

OX POS does not store full bank card numbers, card security codes, or other complete payment credentials unless explicitly stated in connection with a separate payment service.

Where payment processing is performed by a third-party payment provider, payment information is processed according to that provider’s privacy policy and security requirements.

We may automatically collect:

  • device model;
  • operating system and version;
  • application version;
  • language and regional settings;
  • IP address;
  • device and session identifiers;
  • login date and time;
  • diagnostic information;
  • crash reports;
  • error logs;
  • performance and security logs.

We use this information to operate, secure, troubleshoot, and improve OX POS.

OX POS may request access to the device camera for functions such as:

  • scanning product barcodes or QR codes;
  • scanning receipts or documents;
  • adding product images;
  • identifying products;
  • processing information initiated by the user.

Camera access is used only when the user activates a function requiring the camera.

OX POS does not continuously record through the camera.

If authorized by the user, OX POS may access selected photos, images, documents, or files for purposes such as:

  • uploading product images;
  • importing business documents;
  • attaching files to records;
  • exporting reports;
  • saving receipts or reports.

OX POS accesses only information selected or authorized by the user, subject to the permissions provided by the operating system.

If a function requiring location is enabled, OX POS may process approximate or precise location information for purposes such as:

  • identifying the relevant branch or business location;
  • delivery management;
  • recording permitted employee activity;
  • fraud and security prevention;
  • providing location-dependent functionality.

Location information is collected only when required by an enabled feature and when the user or company has granted the relevant permission.

OX POS does not collect location information for advertising purposes.

OX POS may use Bluetooth, NFC, local network access, or other device connectivity functions to communicate with:

  • receipt printers;
  • barcode scanners;
  • RFID equipment;
  • payment terminals;
  • cash registers;
  • scales;
  • other supported business equipment.

Technical information exchanged with connected devices is used only to provide the requested functionality.

OX POS does not access the user’s device contact list unless a specific feature clearly requires it and the user has granted permission.

Where contact access is enabled, contact information is used only for the function presented to the user, such as selecting a customer or business contact. Contact information is not used for advertising or sold to third parties.

We may use collected information to:

  • create and manage user accounts;
  • authenticate users;
  • provide point-of-sale functionality;
  • process sales, returns, receipts, discounts, and payments;
  • manage products, warehouses, inventory, customers, employees, and branches;
  • synchronize information between authorized devices;
  • generate reports and business analytics;
  • provide technical support;
  • detect and prevent unauthorized access, fraud, abuse, and security incidents;
  • diagnose errors and application failures;
  • maintain and improve the reliability and performance of OX POS;
  • comply with legal, tax, accounting, and regulatory obligations;
  • enforce contractual terms and protect the rights of users, companies, and OX System.

We do not sell personal information.

We do not use personal information collected through OX POS for third-party advertising.

Where applicable, we process information based on one or more of the following grounds:

  • performance of a contract with the company or user;
  • consent given by the user;
  • legitimate interests in operating, protecting, and improving OX POS;
  • compliance with legal and regulatory obligations;
  • protection of the rights, security, and property of OX System, users, and third parties.

The company using OX POS is responsible for determining the legal basis for processing personal information that it enters into the Application.

We may share information only as necessary with the following categories of recipients.

Information may be accessible to the company that created or administers the user’s OX POS account, including authorized administrators, managers, accountants, and employees.

We may use contracted service providers for:

  • cloud hosting and data storage;
  • application infrastructure;
  • authentication;
  • technical support;
  • error monitoring and crash reporting;
  • communications;
  • payment processing;
  • analytics required for application operation and improvement.

Service providers receive only the information necessary to perform their services and are required to protect it under contractual and legal obligations.

Where a payment feature is used, transaction information may be shared with the selected bank, payment system, payment gateway, or acquiring provider.

OX System does not control how an independent payment provider processes payment credentials.

We may disclose information where required by law, court order, regulatory requirement, or a valid request from an authorized public authority.

If OX System or its relevant business assets are merged, reorganized, acquired, or transferred, information may be transferred as part of that transaction, subject to applicable privacy requirements.

Depending on the company’s configuration, infrastructure provider, and selected services, information may be processed in countries other than the user’s country.

Where required, we apply contractual, organizational, and technical safeguards to protect information transferred internationally.

We apply reasonable technical and organizational measures designed to protect personal and business information, including:

  • encrypted communication using secure network protocols;
  • authentication and access controls;
  • role-based permissions;
  • restricted employee and administrator access;
  • logging and monitoring of security-relevant events;
  • backup and recovery procedures;
  • separation of company data;
  • security updates and vulnerability management;
  • protection of credentials and authentication tokens.

No system can guarantee absolute security. Users must protect their login credentials, devices, and access codes and must not share them with unauthorized persons.

We retain information only for as long as necessary to:

  • provide OX POS services;
  • maintain the company’s account;
  • fulfil contractual obligations;
  • comply with tax, accounting, legal, and regulatory requirements;
  • resolve disputes;
  • prevent fraud and security incidents;
  • maintain required business records.

Account and business data is generally retained while the company’s OX System account remains active.

After account termination or a valid deletion request, information will be deleted or anonymized within a reasonable period, except where retention is required by law, needed to resolve disputes, or necessary to protect legitimate legal interests.

Backup copies may remain temporarily until they are overwritten in accordance with the applicable backup schedule.

Users and company administrators may request deletion of personal information or an account by:

  • using an account deletion function available in the Application, where provided;
  • contacting the company administrator responsible for the OX POS account;
  • sending a request to privacy@oxapp.io.

A deletion request should include sufficient information to identify the relevant account.

Because OX POS is a business application, some information may be controlled by the company that created the user account. In such cases, OX System may forward the request to that company or require confirmation from an authorized company administrator.

Certain information may be retained where required by law, accounting rules, tax regulations, fraud-prevention requirements, or for the establishment, exercise, or defence of legal claims.

Subject to applicable law, users may have the right to:

  • request access to their personal information;
  • request correction of inaccurate information;
  • request deletion of personal information;
  • request restriction of processing;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • request information about how their data is processed;
  • submit a complaint to a competent data protection authority.

Requests may be sent to privacy@oxapp.io.

OX POS may request device permissions only when required for an available function.

Permissions may include:

  • camera;
  • photos or media;
  • files and documents;
  • location;
  • Bluetooth or nearby devices;
  • notifications;
  • local network access;
  • microphone, only where a voice-related function is provided.

Users may manage permissions through the device settings.

Disabling a permission may prevent the related OX POS function from operating correctly.

OX POS is a business application and is not intended for children.

We do not knowingly collect personal information directly from children through OX POS.

If we learn that information has been collected from a child without a valid legal basis or required authorization, we will take reasonable steps to delete it.

OX POS may interact with third-party services, devices, payment systems, integrations, or websites selected by the user or the user’s company.

Third-party services operate under their own terms and privacy policies. OX System is not responsible for the independent privacy practices of third parties.

We may update this Privacy Policy when:

  • OX POS functionality changes;
  • data processing practices change;
  • legal or regulatory requirements change;
  • new integrations or service providers are introduced.

The updated version will be published at the same URL with a revised “Last updated” date.

Material changes may also be communicated through the Application or other appropriate channels.

Questions, requests, or complaints concerning privacy may be submitted to:

LLC “CREATIVE PEOPLE”
OX System / OX POS

Address: Shota Rustavelli Street, Building 53B, Yakkasaray District, Tashkent, Republic of Uzbekistan

Email: privacy@oxapp.io
Technical support: support@oxapp.io
Website: https://oxapp.io
Telephone: +998 78 113 61 11

Начать бесплатно