Effective Date: May 25, 2026
At TressyPOS (developed by AsanWebs), your privacy and data security are integrated into the core design of our software architecture. This Privacy Policy details how we collect, store, process, and protect your business data and the personal information of your salon clients.
1. Our Decentralized & Local-First Architecture
Unlike conventional cloud POS platforms that continuously aggregate and store all your commercial operations on centralized servers, TressyPOS implements an advanced dual-engine structure designed for extreme privacy:
- Local Hardware Sandboxing (IndexedDB): Your primary operational databases—containing client lists, daily transactions, scheduling calendars, and staff records—are stored locally on your desktop machine. This ensures that you have complete local ownership of your records, keeping them operational offline.
- Secured Private Sync (Hetzner VPS): When connected to the internet, TressyPOS securely synchronizes incremental updates using secure TLS 1.3 protocol. These backups are stored in isolated row-level database instances hosted on unlimited Hetzner VPS nodes.
- Administrative Data: We only store your primary business account credentials, licensing agreements, and active software subscription tokens centrally on secure Google Firebase authentication platforms.
2. Biometric & AI Facial Recognition Attendance
TressyPOS incorporates an integrated AI Face ID Attendance module to protect business owners from time fraud. We operate this system under strict privacy boundaries:
- No Image Capture: The webcam processing engine runs 100% locally on your terminal. TressyPOS does not capture, store, or transmit live video streams or photographic files of your salon staff to any external servers.
- Mathematical Face Descriptors: The face geometry is instantly calculated and mapped into an irreversible string of numbers (a Face Descriptor array). This mathematical hash is the only data saved to match logs, making it impossible to reconstruct an image of a person from the saved descriptor.
3. WhatsApp Automation Privacy Framework
Our background automation utility enables instant booking receipts and retention marketing directly from your desktop. We strictly adhere to user boundaries:
- Direct Local Connection: Synchronization is established directly from your device to your personal or business WhatsApp number via QR-code authorization.
- Zero Access Policy: TressyPOS does not monitor, intercept, read, or catalog your personal chats or external conversations. Our script is mathematically restricted to executing outgoing programmatic template dispatches (receipts, booking confirmations, and loyalty reward announcements) as configured by your administrative control panel.
4. Secure Financial Transactions
To protect your payment card data, TressyPOS has implemented zero-retention policies regarding payment cards:
- No Financial Data Storage: We do not store, process, or have access to raw bank accounts, card numbers, CVVs, or payment passwords.
- Trusted Billing Partners: All financial transactions related to your TressyPOS software licensing and billing plans are securely processed through industry-leading payment gateways, including Paddle or Stripe, utilizing multi-layer encryption standard with strict compliance protocols.
5. Changes to This Privacy Policy
We may periodically update this policy to align with software additions or international data regulation updates. We will notify you of any structural modifications by posting the revised version on this page and updating the effective date above.