Legal Agreement

Terms of Service

The agreement governing your use of ShopOS. Written to be read โ€” not buried. Built on Ugandan law.

๐Ÿ“… Effective 1 January 2025
โš–๏ธ Republic of Uganda
๐Ÿ“‹ 12 Sections
ยง 01

Definitions

TermMeaning
"ShopOS"The cloud-based point-of-sale and business management platform operated by the Service Provider.
"Service Provider"The individual or entity operating ShopOS and offering it to subscribers.
"Subscriber"Any business or individual who registers for and uses a ShopOS account.
"Subscription"A time-limited licence to access ShopOS under a chosen plan (Trial, Basic, Pro, Business).
"Shop Data"All business records โ€” inventory, sales, customers, staff, financials โ€” entered by a Subscriber.
"Customer Data"Personal information about the Subscriber's own customers stored within ShopOS.
"URA"Uganda Revenue Authority โ€” the statutory body for tax assessment and collection.
"NITA-U"National Information Technology Authority โ€“ Uganda, regulator under NITA Act Cap 110A.
ยง 02

Acceptance of Terms

By clicking "Create Account", completing onboarding, or otherwise accessing ShopOS, you confirm that:

  • You are at least 18 years old or the legal age of majority in your jurisdiction.
  • You have authority to bind any business entity you represent.
  • You have read, understood, and agree to these Terms and our Privacy Policy.
  • You will use ShopOS solely for lawful business purposes under Ugandan and East African law.
โ—† Note

If you do not agree to these terms, do not register or use ShopOS. Continued use after any amendment constitutes acceptance of the revised terms.

ยง 03

Description of Service

ShopOS is a cloud-hosted, web-based POS and business management platform. Features vary by plan:

  • Point of Sale: Sales processing, receipt generation, cash and mobile money recording, split-payment, change calculation.
  • Inventory Management: Product cataloguing, stock tracking, low-stock alerts, branch transfers, reorder management.
  • Customer Management: Customer records, purchase history, loyalty points, debt tracking.
  • Staff Management: Staff accounts, role-based access control, session management, payroll calculation.
  • Financial Reporting: Daily sales summaries, expense tracking, profit/loss analysis, CSV export.
  • Pharmacy Mode: Prescriptions, drug interaction checking, expiry alerts, NHIF/insurance tracking. Pro & Business only.
  • AI Features: Business insights, smart reorder, AI assistant. Requires internet and Groq API availability.
  • Public Pages: Customer-facing product catalogue and review page per shop.
โšก Service Availability

ShopOS is provided on an "as available" basis. Planned maintenance will be communicated in advance where practicable. Offline functionality is available via service worker โ€” data sync requires internet connectivity.

ยง 04

Account Registration & Security

4.1 โ€” Registration

You must provide accurate, complete, and current information during registration including shop name, owner name, and a valid email address. Keep this information up to date.

4.2 โ€” Account Security

  • You are solely responsible for maintaining the confidentiality of your login credentials.
  • You bear responsibility for all activities under your account, whether authorised by you or not.
  • Immediately notify the Service Provider of any unauthorised account use.
  • Ensure staff members are trained on secure platform use.

4.3 โ€” One Account Per Business

Each ShopOS account corresponds to one business entity. Multi-branch operations are supported via the branch management feature. Creating multiple accounts to circumvent plan limits is prohibited.

4.4 โ€” Trial Accounts

New accounts receive a free trial as displayed during registration. Trial accounts operate with demonstration data. At trial end, a paid plan is required for full functionality. The Service Provider may modify trial terms at any time.

ยง 05

Subscription & Payment

5.1 โ€” Plans and Pricing

Plans and current pricing (in Uganda Shillings, inclusive of applicable taxes) are displayed in the app under Settings โ†’ Billing. The Service Provider reserves the right to adjust pricing with 30 days' notice to existing subscribers.

5.2 โ€” Payment Methods

Payments are accepted via MTN Mobile Money and Airtel Money, with details displayed in the app's billing section. Bank transfer is available upon request.

5.3 โ€” Billing Cycle

Subscriptions are billed monthly. Your period begins on the date your plan is activated after payment confirmation. Mobile money payments are verified manually and activated within one business day of confirmed receipt.

5.4 โ€” Late Payment & Suspension

Accounts unpaid more than 7 days after subscription expiry may be suspended. Shop Data is retained for 90 days during suspension. Accounts unpaid for more than 90 days post-suspension may be permanently deleted.

5.5 โ€” Refunds

Subscription fees are generally non-refundable once a plan is activated. Refunds may be considered at the Service Provider's sole discretion in cases of proven, significant technical failure.

โš–๏ธ Consumer Protection Act (Uganda) Cap 99B

You have the right to receive services as described. If ShopOS materially fails to deliver features described in these terms, you may raise a complaint as outlined in Section 11.

ยง 06

Acceptable Use

6.1 โ€” Permitted Use

ShopOS may only be used for legitimate businesses โ€” retail, wholesale, food service, pharmacy, services โ€” operating lawfully under Ugandan law.

6.2 โ€” Prohibited Use

  • Recording or facilitating transactions involving prohibited, counterfeit, or stolen goods.
  • Evading taxes or duties under the Income Tax Act Cap 340, VAT Act Cap 349, or any URA regulation.
  • Processing data in violation of the Data Protection and Privacy Act 2019.
  • Money laundering or activity prohibited under the Anti-Money Laundering Act 2013.
  • Operating a licensed business without holding the required licence (e.g. controlled substances, financial services).
  • Reverse-engineering, copying, redistributing, or reselling ShopOS or any part of it.
  • Interfering with or disrupting platform infrastructure or other users' accounts.
  • Sending unsolicited commercial messages (spam) to customers.
โš  Pharmacy Mode

You must hold a valid NDA (National Drug Authority) licence to operate in Pharmacy Mode. ShopOS's drug interaction checker is informational only and does not constitute medical or pharmaceutical advice.

ยง 07

Data Ownership & Intellectual Property

7.1 โ€” Your Data

You own all Shop Data and Customer Data you enter. The Service Provider claims no ownership over your business records. You grant us a limited, non-exclusive licence to store and process your data solely to provide the service.

7.2 โ€” Data Export

Export your data at any time in CSV format via Reports and module export functions. Maintaining your own backups is your responsibility.

7.3 โ€” Platform Intellectual Property

The ShopOS software, interface, branding, and documentation are the exclusive intellectual property of the Service Provider. Nothing in these terms grants you any right to reproduce, distribute, or create derivative works from the platform.

7.4 โ€” Feedback

Suggestions, feedback, or feature requests may be used to improve the platform without compensation or attribution.

ยง 08

Tax & Regulatory Compliance

โš–๏ธ Uganda Revenue Authority

ShopOS is a record-keeping and management tool. It does not replace your obligation to file tax returns, issue EFD receipts where required, or comply with URA reporting obligations.

8.1 โ€” VAT and Tax Records

ShopOS calculates and records VAT at a configurable rate (default 18% per VAT Act Cap 349) for internal record-keeping only. If VAT-registered, you remain solely responsible for filing returns, issuing URA-compliant invoices, and maintaining records for 5 years (Tax Procedures Code Act 2014).

8.2 โ€” TIN

Enter your TIN in Settings for display on receipts. Ensuring its accuracy and consistency with your URA registration is your responsibility.

8.3 โ€” Electronic Fiscal Devices (EFD)

ShopOS receipts are not a substitute for EFD receipts where EFD use is legally mandated. Determining your EFD obligation is your responsibility.

8.4 โ€” Business Permits

You are responsible for all permits and licences required by KCCA, district councils, and sector-specific regulators applicable to your business.

8.5 โ€” Mobile Money Float

The float tracking feature is an internal cash management tool only. Bank of Uganda mobile money agent compliance is your sole responsibility.

ยง 09

Liability & Warranties

9.1 โ€” No Warranty

ShopOS is provided "as is" and "as available" without warranty of any kind. We do not warrant that the platform will be error-free, uninterrupted, or meet your specific requirements.

9.2 โ€” Limitation of Liability

To the maximum extent permitted under Ugandan law, our total liability for any claim shall not exceed the total subscription fees paid by you in the three months preceding the claim.

9.3 โ€” Exclusions

  • Loss of profits or business opportunity arising from service downtime.
  • Data corruption or loss caused by events outside our reasonable control.
  • Financial penalties or regulatory fines arising from your failure to comply with applicable law.
  • Errors in AI-generated insights, suggestions, or drug interaction information.
  • Third-party service failures including Firebase, Netlify, Groq, MTN, or Airtel.

9.4 โ€” Your Indemnity

You agree to indemnify and hold harmless the Service Provider from claims, losses, or expenses arising from your breach of these terms, violation of any law, or infringement of any third party's rights.

ยง 10

Termination

10.1 โ€” By You

You may terminate your account at any time by contacting us. Data is retained for 30 days for export, then permanently deleted.

10.2 โ€” By Service Provider

We may suspend or terminate your account immediately for breach of these terms, illegal activity, non-payment, or provision of false registration information.

10.3 โ€” Effect

Upon termination, access ceases immediately. Provisions relating to intellectual property, legal data retention, and limitation of liability survive termination.

ยง 11

Governing Law & Disputes

11.1 โ€” Governing Law

  • The Contract Act Cap 73 (Uganda)
  • The Electronic Transactions Act 2011 (Act No. 8 of 2011)
  • The Computer Misuse Act 2011 (Act No. 2 of 2011)
  • The Consumer Protection Act Cap 99B
  • The Data Protection and Privacy Act 2019 (Act No. 9 of 2019)

11.2 โ€” Dispute Resolution

Disputes shall first be addressed through good-faith negotiation within 30 days of written notice. Unresolved disputes shall be referred to mediation under the Uganda Arbitration Centre before any court proceedings commence.

11.3 โ€” Jurisdiction

The parties submit to the exclusive jurisdiction of Ugandan courts. The Commercial Court Division of the High Court of Uganda has jurisdiction over disputes exceeding UGX 50,000,000.

ยง 12

Changes to These Terms

The Service Provider may update these terms at any time. Material changes will be communicated via in-app announcement at least 14 days before taking effect. Continued use constitutes acceptance. The current version is always accessible from the ShopOS login screen.

Service Provider
ShopOS
Location
Kampala, Uganda
WhatsApp / Phone
+256 701 488 273
Data Protection

Privacy Policy

What data ShopOS collects, why we collect it, how we protect it, and your full rights under Uganda's Data Protection and Privacy Act 2019.

๐Ÿ“… Effective 1 January 2025
๐Ÿ›ก๏ธ PDPA 2019 Compliant
๐Ÿ“‹ 12 Sections
ยง 01

Data Controller

The data controller for ShopOS is the Service Provider operating the platform. As a Subscriber, you are also a data controller in respect of your customers' personal data stored in ShopOS โ€” a layered relationship governed by the Uganda Data Protection and Privacy Act 2019 (PDPA).

โš–๏ธ PDPA 2019 โ€” Act No. 9 of 2019

Uganda's PDPA governs the collection, processing, storage, and sharing of personal data. Both the Service Provider and Subscribers storing customer personal data have obligations under this Act. Non-compliance may result in penalties enforced by the Personal Data Protection Office (PDPO).

ยง 02

Data We Collect

2.1 โ€” Account Data

  • Registration: Shop name, owner name, email, phone, city, country.
  • Business data: TIN, address, business category, currency settings.
  • Authentication: Email/password hash (Firebase Auth) or Google OAuth token.
  • Subscription: Plan type, dates, payment references submitted via mobile money.

2.2 โ€” Business Operation Data

  • Inventory: product names, prices, stock levels, SKUs, categories.
  • Sales: amounts, payment methods, dates, times, staff names associated with sales.
  • Expenses: descriptions, categories, amounts.
  • Staff: names, roles, PIN codes (hashed), payroll records.
  • Suppliers: names, contact details, payment terms.

2.3 โ€” Customer Data (Your Customers)

Personal data you enter about your customers โ€” names, phones, emails, purchase history, loyalty points, balances. See Section 7 for your obligations.

2.4 โ€” Technical Data

  • Browser type, device type, OS (Firebase, for authentication and session management).
  • IP address (Firebase and Netlify infrastructure).
  • Usage data in Firebase Firestore as part of normal cloud sync.

2.5 โ€” Data We Do NOT Collect

  • We do not store mobile money PINs or full account credentials.
  • We do not collect payment card data โ€” ShopOS does not process cards.
  • We do not use advertising trackers or third-party analytics beyond Firebase.
ยง 03

How We Use Your Data

PurposeData Used
Provide the serviceAll account and business operation data
Authenticate & secure accountsEmail, password hash, device data
Process & verify paymentsPayment references, plan data, contact details
Service notificationsEmail address, in-app messaging
Customer supportAccount data, error logs where applicable
Legal obligationsAccount and transaction records as required
Platform improvementAggregated, anonymised usage patterns only
โ—† AI Features

When AI features are used, shop data is sent to Groq's API for processing. Data is used solely to generate the requested insight, not stored for training. Groq is US-based. By using AI features, you consent to this transfer.

ยง 04

Legal Basis for Processing

  • Contract performance (PDPA s.16(b)): Processing necessary to provide the ShopOS service you subscribed to.
  • Legitimate interests (PDPA s.16(f)): Platform security, fraud prevention, service quality improvement.
  • Legal obligation (PDPA s.16(c)): Compliance with Ugandan tax and data protection law.
  • Consent (PDPA s.16(a)): AI features and marketing communications, where explicit consent is obtained.
ยง 05

Data Storage & Security

5.1 โ€” Storage Location

Data is stored in Google Firebase Firestore in the europe-west1 (Belgium) region โ€” the closest Firebase region to Uganda. By using ShopOS, you consent to storage in this region.

5.2 โ€” Security Measures

  • In transit: All data encrypted using TLS 1.2 or higher.
  • At rest: Firebase encrypts all data using AES-256.
  • Access control: Firestore Security Rules ensure each subscriber accesses only their own data.
  • Authentication: Passwords are hashed by Firebase โ€” never stored in plaintext.
  • Staff PINs: Hashed before storage, never transmitted in plaintext.

5.3 โ€” Offline Storage

ShopOS uses browser localStorage for offline functionality. Secure your device with a password or PIN, especially when staff share it.

โš  Shared Devices

Enable staff session lock in Settings if staff share a device. The Service Provider is not liable for unauthorised access resulting from unsecured shared devices.

ยง 06

Data Sharing & Third Parties

We do not sell your data. We share data only with these sub-processors, only as necessary to provide the service:

ProviderPurposeLocation
Google FirebaseDatabase, authentication, cloud storageBelgium (EU)
NetlifyWeb hosting and serverless functionsUSA
GroqAI feature processing (when used)USA

We may also disclose data where required by Ugandan law, court order, or a lawful request from a government authority.

ยง 07

Your Customers' Data โ€” Your Obligations

โš–๏ธ You Are a Data Controller (PDPA 2019)

When you store customer personal information in ShopOS โ€” names, phones, purchase history, debts โ€” you become a data controller with direct legal obligations to those individuals under the PDPA.

7.1 โ€” Your Obligations

  • Inform customers that their data is being collected and how it will be used.
  • Obtain consent before collecting data for purposes beyond fulfilling a transaction.
  • Respond to access requests โ€” provide a customer's data upon their reasonable request.
  • Delete data upon a customer's reasonable request where no lawful basis for retention exists.
  • Secure data using ShopOS's role restrictions and session timeout controls.

7.2 โ€” Marketing

Only send marketing messages to customers who have explicitly consented. Unsolicited bulk messaging may violate the PDPA and MTN/Airtel terms of service.

7.3 โ€” Review Pages

The public review page collects customer names and feedback voluntarily. You are responsible for moderating reviews appropriately.

ยง 08

Data Retention & Deletion

  • Active accounts: Data retained as long as your account is active. Delete individual records at any time within the app.
  • Voluntary termination: Data retained 30 days for export, then permanently deleted.
  • Suspension for non-payment: Data retained 90 days, then permanently deleted.
  • Legal hold: Where required by law (Tax Procedures Code Act 2014 โ€” 5-year retention), a minimal dataset may be retained for the statutory period.
ยง 09

Your Rights Under the PDPA 2019

  • Right of Access (PDPA s.27): Request a copy of the personal data we hold about you.
  • Right to Rectification (PDPA s.28): Request correction of inaccurate or incomplete data.
  • Right to Erasure (PDPA s.29): Request deletion where there is no lawful basis for retention.
  • Right to Object (PDPA s.30): Object to processing for direct marketing or legitimate interests purposes.
  • Right to Portability: Request your data in machine-readable format โ€” ShopOS provides CSV export.
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.

We will respond within 21 days as required by the PDPA.

ยง 10

Local Storage & Cookies

ShopOS uses browser localStorage โ€” not cookies โ€” to store session data, settings, and offline data. Locally stored items include app settings, cached business data for offline use, authentication state, and pending sync data. Clear at any time via Settings โ†’ Advanced โ†’ Clear Local Data. ShopOS does not use advertising cookies or tracking pixels.

ยง 11

Children's Privacy

ShopOS is a business platform for adults. We do not knowingly collect data from individuals under 18. If a customer of your business is a minor, you bear sole responsibility for ensuring appropriate parental or guardian consent before storing any personal data about them in ShopOS.

ยง 12

Contact & Complaints

Data Controller
ShopOS
Location
Kampala, Uganda
WhatsApp
+256 701 488 273

Regulator

If unsatisfied with our response, lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda:

  • Website: www.pdpo.go.ug
  • Address: NITA-U, Palm Courts, Plot 7A, Rotary Avenue, Kampala