Effective Date: May 25, 2026
At TressyPOS (developed by AsanWebs), your privacy and data security are integrated into the core design of our software architecture. This Privacy Policy details how we collect, store, process, and protect your business data and the personal information of your salon clients.
1. Our Decentralized & Local-First Architecture
Unlike conventional cloud POS platforms that continuously aggregate and store all your commercial operations on centralized servers, TressyPOS implements an advanced dual-engine structure designed for extreme privacy:
- Local Hardware Sandboxing (IndexedDB): Your primary operational databases—containing client lists, daily transactions, scheduling calendars, and staff records—are stored locally on your desktop machine. This ensures that you have complete local ownership of your records, keeping them operational offline.
- Secured Private Sync (Hetzner VPS): When connected to the internet, TressyPOS securely synchronizes incremental updates using secure TLS 1.3 protocol. These backups are stored in isolated row-level database instances hosted on unlimited Hetzner VPS nodes.
- Administrative Data: We only store your primary business account credentials, licensing agreements, and active software subscription tokens centrally on secure Google Firebase authentication platforms.
2. Secure Employee Attendance Logging
TressyPOS incorporates an integrated secure Passcode/PIN Attendance module to protect business owners from time fraud and buddy punching. We operate this system under strict privacy boundaries:
- Localized PIN Storage: Staff access codes and PINs are stored 100% locally and securely on your encrypted terminal. No personal login details or PIN configurations are uploaded or transmitted to any external tracking servers.
- Cryptographic Salting: All passcode entries are salted and hashed locally before validation, ensuring complete privacy, zero identity-theft risk, and compliance with strict workplace standards.
3. WhatsApp Automation Privacy Framework
Our background automation utility enables instant booking receipts and retention marketing directly from your desktop. We strictly adhere to user boundaries:
- Direct Local Connection: Synchronization is established directly from your device to your personal or business WhatsApp number via QR-code authorization.
- Zero Access Policy: TressyPOS does not monitor, intercept, read, or catalog your personal chats or external conversations. Our script is mathematically restricted to executing outgoing programmatic template dispatches (receipts, booking confirmations, and loyalty reward announcements) as configured by your administrative control panel.
4. Secure Financial Transactions
To protect your payment card data, TressyPOS has implemented zero-retention policies regarding payment cards:
- No Financial Data Storage: We do not store, process, or have access to raw bank accounts, card numbers, CVVs, or payment passwords.
- Trusted Billing Partners: All financial transactions related to your TressyPOS software licensing and billing plans are securely processed through industry-leading payment gateways, including Paddle or Stripe, utilizing multi-layer encryption standard with strict compliance protocols.
5. Changes to This Privacy Policy
We may periodically update this policy to align with software additions or international data regulation updates. We will notify you of any structural modifications by posting the revised version on this page and updating the effective date above.