BrewPOS Privacy Policy

NextPOS LLC, doing business as BrewPOS

Mailing address: 1751 Hover Street B-4, #209, Longmont, CO 80501 | brewpossales.com

Version 1.4| Effective October 25, 2026 | Replaces the policy dated 4/25/23

What this policy covers

NextPOS LLC, a Nevada limited liability company doing business as BrewPOS ("BrewPOS," "NextPOS," "we," "us" or "our"), makes point-of-sale software and Equipment for bars and restaurants and helps merchants set up credit card processing. This policy explains what personal information we collect, how we use and share it, and the choices you have.

It covers information we collect:

  • through our websites, including brewpossales.com, and brewpos.com, and brewposadmin.com, and brewpos-supplies.com, and any other website or web page we operate that links to this Policy, and our forms, chat, email, text and phone contacts (the "Site");

  • when you apply for, buy or use the BrewPOS software, Equipment and services (the "Services"), including the admin portal and the point-of-sale software; and

  • from partners and public sources, as described below.

It does not cover third-party websites or services we link to, or the information a payment processor or bank collects under its own agreement with you. Those are covered by their own policies.

Our Terms and Conditions (brewpos.com/terms-and-conditions) explain the rules for using the Site and the Services.

Our role: merchants, their customers and their staff

BrewPOS serves businesses. When a merchant uses the BrewPOS software, the merchant decides what information goes into it, such as its employees, its menu, and its customers' orders and tips. For that information, the merchant is in charge of the data and BrewPOS acts as the merchant's service provider, handling it on the merchant's instructions and under our agreement with the merchant. If you are a customer or employee of a BrewPOS merchant and have a question about your information, start with that merchant. We will help the merchant respond.

For information we collect for our own purposes, such as marketing to prospective merchants, signing up merchants, billing, support and running the Site, BrewPOS is in charge of the data.

Payment processors and banks are separate

BrewPOS is not a bank and is not a payment processor. When we handle card processing contracts, we do so as an independent sales organization (ISO) or sub-ISO working with payment processors, acquirers and sponsor banks such as Fiserv, TSYS, Paysafe and others. Your merchant processing agreement is directly with the processor and its bank. It is not controlled by BrewPOS or NextPOS. The processor and bank collect and use the information on your application and your transactions under their own agreements and privacy notices, and they are responsible for how they handle it. BrewPOS may help you apply and may manage parts of your account, and in doing so we pass information to them. See the How we share information section.

Information we collect

Information you give us. This includes:

  • contact details: name, business name, title, email address, phone number and mailing address;

  • information you submit in forms, demo requests, chats, surveys, emails, calls and texts, and records of those contacts;

  • account and login details for the admin portal;

  • business information: legal name, type of business, locations, tax ID, number of stations, monthly card volume, menus and prices;

  • application and underwriting information for card processing, which may include the owners' and officers' names, dates of birth, home addresses, Social Security or other government ID numbers, and the business bank account details needed to deposit funds and debit fees;

  • payment details for billing, such as a bank account or card on file for ACH and card charges;

  • signed agreements, authorizations and the records of when and how you accepted them.

Information created when you use the Services. The point-of-sale software and Equipment generate:

  • transaction records: amounts, dates, times, items, tips, tender type, station and employee, and, for card payments, limited details such as card brand, last four digits, authorization codes and processing results;

  • station and device data: station status, login activity, software version, error logs, IP address and network information;

  • activity data used to apply your plan, such as the days a station has completed sales;

  • employee and payroll data you enter, such as names, roles, permissions, clock-in and clock-out times, hours, tips and, where you choose to use those features, pay information;

  • customer data you choose to collect, such as names, phone numbers or email addresses for receipts, online ordering, wait lists, gift cards or loyalty;

  • support records: tickets, remote support session logs and call recordings where the law allows.

Full card numbers and card security codes are handled by the payment processing systems and are subject to PCI DSS. We do not sell cardholder data.

Information collected automatically on the Site. This includes your IP address, device and browser type, operating system, pages viewed, links clicked, referring page, dates and times, approximate location from your IP address, and information collected through cookies, pixels and similar technologies (see the Cookies and tracking section).

Information from other sources. This includes processors, banks and financing or placement partners (for example, application status and funding information); marketing and lead partners; our service providers (for example, delivery of payments and communications); credit and identity verification services used in underwriting; and public sources such as business registries and websites.

How we use information

We use personal information to:

  • respond to your requests, book demos, and provide quotes and sales information;

  • evaluate and sign up merchants, submit applications to processors and banks, and set up and manage your account;

  • provide, install, support, maintain, improve and secure the Software, Equipment and Site;

  • bill you, collect amounts you owe, and administer your plan, including measuring station activity;

  • provide customer support and send service, account, billing and security notices;

  • send marketing communications about BrewPOS, which you can opt out of at any time;

  • detect, investigate and prevent fraud, abuse, security incidents and violations of our agreements;

  • comply with laws, card brand and network rules, processor requirements, and legal requests, and enforce our agreements; and

  • analyze how the Site and Services are used, and develop new features, using de-identified or aggregated data where we can.

We do not use the information we hold for a merchant to market a different product to that merchant's customers, and we do not sell merchants' customer lists.

How we share information

We share personal information only as described here.

  • Payment processors, acquirers and sponsor banks. We send application, underwriting and account information, and related transaction and status information, to the processors and banks that provide your card processing, and we receive information from them. They use it under their own agreements and privacy notices.

  • Placement and financing partners. If you choose Equipment or financing outside the $0 Placement Plan, we share the information a partner needs to evaluate and administer it. That partner's terms and privacy practices apply.

  • Service providers. We use vendors who help us run the business, such as hosting, customer relationship management, scheduling, communications (email, text and phone), analytics, remote support, document signing, billing and payment collection, and security providers. They may use the information only to provide services to us, under confidentiality obligations.

  • Card brands, networks and compliance. We share information as card brand and network rules, Nacha rules or PCI DSS require.

  • Professional advisers. Lawyers, accountants, insurers and auditors, under confidentiality duties.

  • Legal and safety. We may disclose information to respond to a subpoena, court order or government request, to enforce our agreements, to collect amounts owed, or to protect the rights, property or safety of BrewPOS, merchants or others, including to prevent fraud.

  • Business transfers. If BrewPOS is involved in a merger, acquisition, financing, sale of assets or similar event, information may be transferred as part of it. We will tell you if the new owner will use it differently in a material way.

  • With your direction or consent. We share information when you ask us to or agree to it.

  • Aggregated or de-identified data. We may share information that no longer identifies you.

Mobile information and text message consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell your personal information for money. We do not share it with third parties for their own marketing without your consent. Some advertising and analytics tools on the Site, if we use them, may count as "targeted advertising" or "sharing" under some state laws, and you can opt out as described in the Your choices section.

Cookies and tracking

The Site uses cookies, pixels (web beacons), local storage and similar technologies to make the Site work, remember preferences, understand traffic, measure marketing, and, where we use them, to show advertising on other sites.

  • You can block or delete cookies in your browser settings. Some parts of the Site may stop working if you do.

  • We honor the Global Privacy Control (GPC) signal and similar universal opt-out signals as required by Colorado law, for opting out of targeted advertising and sales.

  • Some browsers send "Do Not Track" signals. There is no standard for them, and we treat GPC as the opt-out signal.

  • Advertising networks and analytics providers may set their own cookies. We do not control them. You can opt out of many interest-based ads through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org).

Text messages, calls and email

If you give us your mobile number and opt in, BrewPOS sends you text messages (SMS and MMS). These can include demo and appointment reminders, account, billing and support notices, and, if you agree to them, offers about BrewPOS products and services. We collect your mobile number and a record of your consent (the date, time and way you opted in) through our web forms, by phone or in person. We use them only to send the messages you agreed to and to keep proof of that consent.

  • Message frequency varies.

  • Message and data rates may apply.

  • Reply STOP to any message to opt out. We send one message confirming you are unsubscribed, and then no more texts unless you opt in again.

  • Reply HELP for help, or contact us at 1-800-676-9874 or [email protected].

  • Consent to receive texts is not a condition of any purchase.

  • Carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

You can unsubscribe from marketing emails with the link in them, or contact us. We may still send required account, billing and legal notices. We may record support calls where the law allows, and we tell you when we do.

How long we keep information

We keep personal information as long as needed for the purposes in this policy and to meet legal, tax, accounting, card brand, processor and contract requirements. For example, we keep signed agreements and acceptance records for the life of the relationship and afterward to handle disputes, and we keep ACH authorizations for at least two years after they end. We keep transaction and activity logs for the period needed to support billing, chargebacks and disputes. When we no longer need information, we delete it or de-identify it, unless the law requires us to keep it.

How we protect information

We use administrative, technical and physical safeguards designed to protect personal information, including access controls, encryption in transit, and limiting access to people who need it. The Software is built to work with PCI DSS requirements. No system is completely secure, and we cannot guarantee the security of information. You are responsible for keeping your login credentials confidential and for securing your own systems and devices.

If there is a breach of security involving personal information, we will notify affected people and regulators as the law requires. Under Colorado law, that notice goes to affected Colorado residents no later than 30 days after we determine a breach occurred, and to the Colorado Attorney General when 500 or more residents are affected.

Your choices and rights

Everyone. You can unsubscribe from marketing emails, reply STOP to texts, block cookies in your browser, and send us a request to access, correct or delete personal information we hold about you, as described below.

Colorado and other state privacy laws. Colorado and several other states give residents rights over their personal data, subject to exceptions. Depending on where you live and whether the law applies to the information, you may have the right to:

  • confirm whether we process your personal data and access it;

  • correct inaccuracies;

  • delete personal data we hold about you;

  • get a copy of your personal data in a portable format, up to twice per year;

  • opt out of targeted advertising, the sale of personal data, and profiling that has legal or similarly significant effects; and

  • appeal if we decline your request.

Many of these laws do not apply to information collected from people acting for a business in a commercial setting, or to information regulated by financial privacy laws or held for a merchant as its service provider. We apply these rights to personal information we control where we reasonably can, regardless of where you live. We do not discriminate against you for using your rights.

How to make a request. Email us at [email protected] or call 1-800-676-9874, or write to NextPOS LLC, Attn: Privacy, at the mailing address above. We will verify your identity before acting, and may ask for information to do that. We respond within 45 days, and may extend once by another 45 days if needed and tell you why. You can use an authorized agent. If we decline your request, you can appeal by replying to our response, and we will respond to your appeal within 60 days. If you are still unsatisfied, you may contact the Colorado Attorney General.

If you are a merchant's customer or employee. Contact the merchant first, since it controls that information. We will help the merchant respond.

Deletion limits. We may not be able to delete information we must keep for legal, tax, card brand or contract reasons, or information needed to complete a transaction, detect fraud or defend claims. Cached or archived copies may remain for a time.

California and other states

If you are a California resident and the California Consumer Privacy Act applies to our handling of your information, you have the rights it provides, including to know, delete, correct, and opt out of sale or sharing, and to not be discriminated against for using them. The categories of personal information we collect and the purposes are described in the Information we collect and How we use information sections, and the categories of recipients are described in the How we share information section. We do not sell personal information for money and do not knowingly sell or share the personal information of anyone under 16. Use the contact methods above to make a request.

Children

The Site and the Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.

International visitors

BrewPOS operates in the United States and the Site is intended for U.S. businesses. If you use it from elsewhere, your information will be processed in the United States, where privacy laws may differ from those in your country.

Third-party links

The Site may link to other websites, such as processors, banks, partners and social media. This policy does not cover them, and we are not responsible for their content or privacy practices.

Changes to this policy

We may update this policy. We post the new version on the Site with a new effective date, and for material changes we also notify merchants by email or a notice on the Site. We keep prior versions and will provide them on request. Using the Site or Services after a change takes effect means you accept it, except where the law requires more.

Contact

NextPOS LLC d/b/a BrewPOS
Attn: Privacy
1751 Hover Street B-4, #209, Longmont, CO 80501
brewpossales.com | 1-800-676-9874 | [email protected]

Version 1.4| Owner: NextPOS LLC d/b/a BrewPOS