1. About this policy
This policy explains how Sales Assist, the Android app developed by SaaS Holic, S.A. and published on Google Play by SaaS Holic, handles personal data. The app lets the authorized sellers of a store record sales at events and fairs directly in the store's management system (iVend Retail). Anyone can download it, but only a seller with an active user in the store's system can use it. Buyers do not create an account in the app.
2. Who is responsible
The store that uses Sales Assist is the controller of the data: it decides why it is processed and keeps it in its own system. In the current pilot, that store is Time Out Panama, S.A., operator of Puma in Panama.
SaaS Holic, S.A. (Clayton, Ciudad del Saber, Panama) develops the app and acts as the store's processor: it handles the data only to provide the service the store hired, following its instructions.
3. What data the app handles
- The seller. Their user in the store's system, name and seller code. The password is checked once against the store's system over an encrypted connection and is never stored.
- The buyer, only if the sale is in their name. Otherwise the sale goes to the store's walk-in customer and nothing is asked. When it is: national ID (cédula) or passport number; first and last names, only to register a new customer; the passport's country, only with a passport; and, optionally, phone and email to send them the invoice and receipt. When the ID's QR code is scanned, only the number and names are taken. If the buyer is already a customer, their name, phone and email are read from the store's system to show them and prefill the delivery, without storing them in the app.
- The sale. Items, quantities, prices, taxes, payment method and seller. For card payments, only the last 4 digits: the charge is made on a separate terminal and the app never sees the full card number.
4. Why it is used and on what basis
- To record the sale and register the buyer as a customer of the store. Basis: the purchase the buyer is making and the commercial relationship with the store.
- To issue the electronic invoice. Basis: the store's tax obligations.
- To send the invoice and receipt by phone or email. Basis: the buyer's consent, since those details are optional.
If the buyer prefers not to give their details, the sale can still be made in the name of the walk-in customer. The app makes no automated decisions about anyone.
6. What stays on the device
- The seller's session and the app settings, encrypted with AES-256 and the Android Keystore. They are erased when the day changes, when the shift is closed or when another seller signs in.
- The day's product catalog.
- Any sale the seller suspends to finish later, which is also recorded in the store's system. On the device it keeps the sale lines, the customer's internal code and short name (for example, "JUANA P."), never their ID, phone or email. It stays until the sale is resumed or discarded; discarding it deletes it from the device and from the store's system.
- App data is excluded from the device's backups, and uninstalling the app deletes it.
7. How long the data is kept
On the device, as described in section 6. In the store's system, the store decides how long it keeps sales and customer records, according to its legal and tax obligations; ask the store for its retention period.
8. Your rights
You can ask to access, rectify, cancel (delete) or object to the use of your data, or receive it in a portable format, and withdraw your consent to be contacted by phone or email. Since the store is responsible for the data, send your request to the store, with a copy to [email protected]; if you write only to us, we will forward it to the store. Access requests are answered within 10 business days, as Panamanian Law 81 of 2019 requires. If you are not satisfied, you can complain to Panama's data protection authority (ANTAI), antai.gob.pa.
9. Security
The app only asks for network access (no camera, location or storage permissions), uses encrypted connections (HTTPS) exclusively and never sends unencrypted traffic. On production devices, the screen is protected against screenshots.
10. Minors
Sales Assist is a work tool for store sellers and is not directed at minors. If a sale must be made in the name of a minor, the store handles it with the minor's legal representative.
11. Changes and contact
We will publish any change on this page with a new version number and effective date. For questions about this policy, write to [email protected].