Storedash Privacy Policy

Storedash is a mobile app published by Salix Limited (NZBN 9429053674067) — “Salix”, “we”, “us” — on Google Play under the package name com.salix.storedash. This policy explains what information the app handles, how it is used, and the rights you have under the New Zealand Privacy Act 2020.

Storedash is an admin companion for shop owners and their staff. It signs in to the backend that runs your shop and shows you what is already there — orders, stock, sales, and opening hours. It is a window onto your own shop system, not a place where your data is gathered by Salix. This policy covers the app; it is separate from the privacy policy for our website.

To sign you in and keep you signed in, Storedash processes:

• Your email address and password — entered at sign-in and sent to your shop's backend to authenticate you. Your password is not stored on the device after sign-in; your email is kept on the device so it can be pre-filled next time.
• Session tokens — after you sign in, a login token and a rotating refresh token are held in the device's secure keystore so you stay signed in.
• Your shop's web address — the address of the backend Storedash connects to, stored on the device.

To deliver new-order notifications, and only if you allow notifications:

• A push token — a notification token issued by Expo's push service is sent to your shop's backend, together with your device platform (for example, “android”), so the backend can alert you when an order comes in.

If you set up receipt printing:

• Printer settings — the local network address and port of your receipt printer and your print preferences are stored on the device. These identify a printer on your own network, not a person.

While you use the app, it displays your shop's own business data drawn live from your backend:

• orders — which may include your customers' names, contact details, and what they ordered — along with stock, sales figures, and opening hours.

This business data is your shop's, shown to you on demand. It is not collected, copied, or stored by Salix, beyond a short-lived cache on your device so screens load quickly.

What the app does not do: it does not request your location, contacts, camera, or microphone; it uses no advertising identifiers; it contains no third-party advertising or analytics SDKs; and it does not track you across other apps or websites.

The information above is used only to run the app for you: to sign you in and keep you signed in, to connect to your shop's backend and display your shop's data, to send you new-order notifications, and to print receipts to the printer you configure. We do not use it for advertising, and we do not sell or rent it to anyone.

Storedash relies on a small number of services to work:

• Your shop's backend — the system that runs your shop (a Salix-deployed instance operated for your business). It receives your sign-in and your push token and serves the data the app shows you.
• Expo (Expo push notification service, operated by 650 Industries, Inc.) — issues the push token and relays new-order notifications to your device.
• Google — on Android, notifications are delivered through Firebase Cloud Messaging, part of Google Play services.

These providers process data so the app can function. Some may store or process data outside New Zealand; where they do, we take reasonable steps to ensure it is protected to a standard comparable to the Privacy Act 2020.

• Notifications — to alert you to new orders. You can decline, and the rest of the app still works; you simply will not get order pushes.
• Network access — to reach your shop's backend and, if you use it, your receipt printer on your local network.

The app also includes standard permissions required by its app framework (such as vibration for notification alerts). It does not use these to collect information about you.

Information stored on your device — your email, session tokens, shop address, printer settings, and appearance preference — stays on the device until you sign out or uninstall the app. Your push token is kept by your shop's backend so it can notify you, until you sign out, the device is removed, or the token expires.

You can remove your information at any time:

• Data on your device — sign out to clear your session, or uninstall the app to remove everything Storedash has stored locally.
• Your account and the data your shop holds about you — including your staff account and your push token — contact your shop's administrator, or email us at info@salixtech.co.nz with the subject “Storedash deletion request”. We will action the request, or pass it to the operator of your shop's backend, and respond within 20 working days.

Storedash is a business tool for shop owners and staff. It is not directed at children and we do not knowingly collect information from them.

Sign-in tokens are held in the device's secure keystore, and the app talks to your backend and Expo over encrypted connections. No online service can promise perfect security, but we treat what the app handles with care.

We may update this policy as the app or our practices change. The “last updated” date at the top always reflects the current version.

Salix Limited (NZBN 9429053674067) — info@salixtech.co.nz. For privacy matters, address your message to the Privacy Officer. If you are not satisfied with how we have handled your information, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).