Privacy Policy

Effective date: October 19, 2026 · Last updated: October 19, 2026

1. Who we are

Sirvanos POS Retail is made by Nexphaz, the trade name of M. M. EXPORT IMPORT INTL. CORP., a company in Opa Locka, Florida, United States ("Nexphaz", "we", "us"). This policy covers the Sirvanos POS Retail app for iPad, iPhone and Android, the customer-facing screen inside it, and the Verso servers the app talks to.

It applies to three groups of people:

• Businesses that use Sirvanos POS Retail (for example a propane store or a hardware store), and the owners and managers who run them;
• Staff who sign in to a register with their employee PIN or badge;
• Customers of those businesses, whose details are entered at the counter or who check in on the customer screen.

2. The store's role and ours

Each business decides what information it records about its own customers and staff and what it uses it for. For that information the business is in charge (the "controller", in privacy terms) and its own privacy notice also applies. Nexphaz runs the Sirvanos POS Retail software and the server that stores the business's data, and processes that information on the business's behalf and on its instructions. We do not use one business's customer information for any other business or for our own marketing.

If you are a customer and have a question about how a particular store uses your information, the quickest answer is from that store. You can also write to us and we will help (see Contact us).

3. What we collect

Everything below is sent from the app to the business's own Verso server, over an encrypted connection.

Setting up a device

• The business code typed on the first screen, which is checked with our directory at verso.nexphaz.com to find the business's server.
• The register's activation code, and a random device ID that the app creates for itself when a register is activated. It is not an advertising identifier and is not shared with anyone.
• Which app version each register runs, so the business can see that its registers are up to date.

Staff

• Staff names and roles are entered by the business in its Back Office website, not by the app.
• The PIN or badge a staff member uses to sign in. It is sent to the server to be checked. The server stores PINs only in a scrambled one-way form (a hash), never as plain digits. So that a register can still sign people in when the internet is down, the device keeps a scrambled check value for staff who have signed in on it before, never the PIN itself.
• Sign-in times, clock-in and clock-out times, and the actions each person takes on sales (for example voids, refunds, discounts and manager approvals), so the business has an accurate record of who did what.

Sales

• Items sold, prices, quantities, taxes and tax exemptions (including an exemption certificate number when a customer provides one), discounts, notes, returns and exchanges, saved or held orders, shifts, cash drawer counts, and receipts.
• How each sale was paid: cash, card, store credit, house account, split, or another method the business records.

Card payments

Cards are read by the business's own card terminal, which is supplied by the business's payment processor. The app sends the amount to be charged (through the business's server) and gets back the result. The app never receives the full card number, expiry date or security code. It receives and keeps: whether the payment was approved or declined, the card type, the last four digits of the card, and the reference numbers the business needs for refunds and for matching its deposits.

Customers

When a customer checks in or joins a store's loyalty program on the customer screen, or tells a cashier their details, the app may record:

• name, phone number, email address, street address, city, state and ZIP code, and company name;
• birthday (month and year; the customer may add the day);
• whether the customer agreed to receive marketing texts and emails, and whether they joined the loyalty program;
• loyalty points, store credit, and, for customers who buy on account, house-account charges, payments and balance;
• purchase history with that store, and which staff member created the customer's record.

Only the first name is required to join a loyalty program. A customer can also skip check-in and buy as a walk-in without giving any details.

Error reports and diagnostics

If the app hits an error, goes offline, or runs low on storage, it sends a short report to the business's server: the error message and technical trace, how long it was offline and how many sales were waiting, how much device storage it uses, the device type and operating-system version, the app version and the register's name. These reports are used to keep registers working. They are not used for advertising.

Server logs

Like any web server, the Verso servers record the IP address and time of each request in their logs, which we use for security and troubleshooting.

4. What we do not collect

• No location, contacts, photos, camera, microphone or files. The app does not ask for these permissions.
• No full card numbers, card expiry dates or security codes.
• No advertising identifiers, no advertising, and no analytics or advertising tools from other companies inside the app.
• No tracking of people across other companies' apps or websites.

5. How information is used

• To run the register for the business: ring up sales, take payments, print receipts, handle returns, keep shifts and reports.
• To look up a customer by phone number, give and redeem loyalty points, keep store credit and house accounts, and apply the business's sign-up offer once per household.
• To let the register keep working without internet and send the sales to the server when the connection is back.
• To keep the system secure: for example, limiting wrong PIN attempts and keeping an audit trail of voids and refunds.
• To find and fix problems, and to give support to the business.
• To send marketing only where a customer has agreed (see the next section).
• To meet legal obligations, such as tax record-keeping by the business.

6. Marketing texts and emails

The sign-up form shows an optional Marketing box. It is unticked unless the customer ticks it, and no one has to agree to it to buy anything. If a customer ticks it, they agree to receive marketing text messages and emails from that business (named on the screen) about special offers, discounts and new products. Message frequency varies. Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. A customer can also ask the store, or write to us, to change their choice at any time.

The business sends these messages through the messaging service it uses. Only customers who agreed are passed to that service (name, phone number, email and loyalty balance). Mobile phone numbers and text-message consent are not shared with third parties or affiliates for their own marketing or promotional purposes.

7. Who receives information

We do not sell personal information, and we do not share it for targeted advertising. Information goes only to:

• The business itself, its owners and the staff it authorizes, through the register and its Back Office website.
• Nexphaz, to host, run, support and secure the service, on the business's behalf.
• Our hosting provider, whose servers in the United States store the data for us.
• The business's payment processor, which receives the amount and transaction details needed to charge or refund a card on the business's terminal.
• Address and ZIP-code lookup services. When someone types an address, the partial address is sent by the business's server to an address-search service based on OpenStreetMap open data (Photon, operated by Komoot) to suggest matches. When someone types a ZIP code, the five-digit ZIP is sent to a public ZIP-code lookup (Zippopotam.us) to fill in the city and state; on the customer screen this lookup may go straight from the device. Only the typed text is sent, not the person's name or phone number.
• Services the business chooses to connect, at its direction: for example the messaging service for customers who agreed to marketing; a supplier or delivery partner that needs the name, address, phone number and order to deliver an order; or the business's own accounting or back-office software.
• Authorities, when the law requires it, or to protect the rights, property or safety of the business, its customers, Nexphaz or others.
• A buyer or successor of Nexphaz's business, under this same policy, if the company is sold or reorganized.

8. Storage and security

• All traffic between the app and the Verso servers is encrypted in transit (HTTPS).
• Each business's data lives on its Verso server, hosted by Nexphaz on servers in the United States, and is kept separate from other businesses' data.
• PINs are stored only as one-way hashes. Access to the servers is limited to the people at Nexphaz who need it to run and support the service.
• So that a register can sell without internet, the device keeps a working copy of what it needs: sales waiting to be sent, the business's customer list for look-ups, and scrambled PIN check values for staff who have signed in there. This copy is removed when the device is signed out of the business (the app's "Sign in to a different business" option) or when the app is deleted.
• No system is perfectly secure. If we learn of a security incident affecting personal information, we will tell the affected business promptly and help it meet its legal duties.

9. How long we keep it

• Business records (sales, customers, staff, shifts) are kept for as long as the business uses Sirvanos POS Retail, or until the business deletes them. Businesses usually need to keep sales records for several years for tax purposes.
• When a business stops using Sirvanos POS Retail, we delete its data, or give it a copy first if it asks, within 90 days, unless the law requires us to keep something longer.
• Error reports and server logs are kept only as long as we need them to run, secure and fix the service, and are deleted regularly.

10. Your choices, and deleting your data

• Customers: you can skip check-in and buy without giving details, leave the marketing box unticked, and reply STOP to any marketing text. To see, correct or delete your details, ask the store: its managers can edit or delete a customer record in the Back Office. If you owe money on a house account or hold store credit, the store settles that with you first. Completed sales can stay in the store's financial records after a customer record is deleted, because businesses must keep them.
• Staff: ask your employer; the business manages staff records in its Back Office and can delete them.
• Anyone can also email cm@nexphaz.com with the store's name and the phone number or email on file. We will confirm the request is genuine, pass it to the store (which decides about its own records), help it respond, and tell you what was done.
• Depending on the state you live in, you may have legal rights to know, access, correct or delete your personal information, and to opt out of its sale or use for targeted advertising (we do neither). You can use these rights through the store or through us, and you will not be treated differently for doing so.

The app itself does not create user accounts: businesses and staff are set up by the business owner, and joining a store's loyalty program does not create a login. That is why deletion requests go through the store or through us rather than through a button on a shared counter screen, which would let anyone erase someone else's record by typing their phone number.

11. Children

Sirvanos POS Retail is a tool for businesses and their staff. It is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child's information was recorded, contact the store or us and it will be deleted.

12. Changes to this policy

We may update this policy as the app changes. We will change the effective date above, and if the change is significant we will tell the businesses that use Sirvanos POS Retail before it takes effect.

13. Contact us

Nexphaz (M. M. EXPORT IMPORT INTL. CORP.)
Opa Locka, Florida, United States
Email: cm@nexphaz.com
Website: https://nexphaz.com