Privacy Policy

Baltas Digital — Last updated April 2026

This privacy policy applies to all products and services operated by Baltas Digital, including the Baltas POS Android application, the Baltas staff portal, the admin portal, and the associated server infrastructure accessible via bpos.au.

1. Who we are

Baltas Digital provides point-of-sale software and infrastructure to restaurant businesses in Australia. Our platform is not available to the general public — access is restricted to authorised business clients and their staff.

2. Data collected

In the course of providing our services, we collect and process the following data:

Staff credentials — usernames and hashed passwords used to log into the POS app and staff portal
Order and transaction data — items ordered, quantities, prices, order types, and timestamps
Payment records — transaction amounts and payment method (e.g. card, cash). Raw card numbers are never stored by our systems.
Menu and product data — menu items, categories, modifiers, and pricing entered by business operators
Device and network information — device type and local network details used to connect the POS app to the restaurant server
Manager account details — names and contact information provided when setting up a business account

3. Payment data

Payments are processed through Zeller. Baltas Digital does not store, transmit, or have access to raw card numbers or sensitive cardholder data. All payment handling is managed by Zeller in accordance with their privacy policy and PCI-DSS obligations.

4. How data is used

Data collected through our platform is used solely to:

Operate the point-of-sale system for each client business
Provide business owners and managers access to their order and sales data
Maintain system availability, including failover and backup services
Support troubleshooting and technical assistance when requested

5. Data storage and security

Data is stored on private servers operated by Baltas Digital, hosted in Australia. Backups are encrypted and stored using Cloudflare R2. Access to servers and data is restricted to authorised Baltas Digital personnel only.

6. Data sharing

We do not sell, rent, or share client or staff data with any third parties, except as required to operate the service (e.g. Zeller for payment processing) or as required by Australian law.

7. Data we do not collect

Our platform does not collect:

Personal data of restaurant customers
Location data from any device
Advertising identifiers or tracking data
Analytics sent to third-party platforms

8. Data retention

Order and transaction records are retained for business and accounting purposes in accordance with Australian tax law. Staff credentials are removed upon termination of employment or client contract. Clients may request deletion of their data at any time.

9. Your rights

Under the Australian Privacy Act 1988, you have the right to request access to, or correction of, personal information we hold about you. To make a request, contact us at the address below.

10. Contact

For any privacy-related questions or requests, contact Baltas Digital at nickmbaltas@gmail.com.