Privacy Policy

Version: 1.0|Effective Date: March 1, 2026|Last Updated: July 16, 2026

Privacy Principles

Your data belongs to you. Pedestal does not sell merchant, employee, or customer information. We collect only the information reasonably necessary to provide the Services.

Introduction

This Privacy Policy applies to Pedestal Business Suite, including Pedestal POS, CFD, KDS, Back Office, Online Ordering, related websites, APIs, and mobile applications operated by Pedestal Studios Inc.

Information We Collect

Pedestal may collect merchant account information, employee information, customer information, and merchant billing information necessary to provide the Services. Merchant data remains owned by the merchant.

Payment Processing

Pedestal is software and is not a payment processor. Full card numbers, CVV, PINs, magnetic stripe data, and EMV authentication data are not intentionally stored by Pedestal.

Security

Pedestal uses HTTPS/TLS, authentication, role-based permissions, audit logging, device provisioning, merchant data isolation, secure synchronization, and offline-capable local storage.

Third-Party Services

Pedestal may utilize trusted providers including Supabase, Vercel, Sentry, Apple Push Notification service, and supported payment processors.

Data Ownership

Merchants retain ownership of Merchant Data. Pedestal stores and processes it solely to provide the Services.

Retention

Merchant data may be archived after approximately ninety (90) days following account closure or prolonged inactivity unless deletion is requested and permitted by law.

Rights

Applicable privacy rights under U.S. law, CCPA/CPRA, and GDPR are honored where applicable.