Privacy
Política de privacidad
Last updated: 27 October 2026
This policy explains how personal data is processed on the tpvstream.com website and in the TPV Stream app (Android, Windows and web version).
1. Data controller
- Owner: Anthony Brioit (self-employed, autónomo)
- NIE: Y2387651N
- Address: Carretera del Portitxol, 136, 03730 Jávea (Alicante), Spain
- Email: info@tpvstream.com
2. What data we process and why
2.1 Website
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone and message from the contact and demo forms | Answer your request | Consent and pre-contractual steps |
| Account and billing data (name or company name, tax ID, address, email) | Manage the purchase and the licence, issue invoices | Performance of the contract and legal obligation |
| Payment data | Collect the payment. Card details are processed directly by Stripe: we neither see nor store them | Performance of the contract |
| Technical cookies and, if you accept them, anonymous audience measurement (Plausible, no advertising) | Running the site and visit statistics | Legitimate interest and consent (see the Cookie policy) |
2.2 TPV Stream app
Your business data. Sales, products, customers, employees and cash closures are stored on your own device. We have no access to them, except in the cases described below.
| Data | Purpose | Legal basis |
|---|---|---|
| Licence serial number, device identifier, business name, IP address and activation dates | Activate and check the licence, prevent its use on another device without authorisation | Performance of the contract and legitimate interest (security and fraud prevention) |
| Cloud backups (only if the service is enabled): a copy of the business database, encrypted on your device (AES-256) before it is sent | Let you restore your data | Performance of the contract |
| Remote support (only at your request, after you give a code and accept the connection): the technician sees the POS interface during the session. The date, duration and technician are logged | Provide you with support | Performance of the contract |
| App version | Check for available updates | Performance of the contract |
VeriFactu. Invoicing records are sent directly from your device to the Spanish Tax Agency (AEAT), as required by tax law. They do not go through our servers.
Device permissions:
- Camera: scan the QR code to pair terminals and take product photos. Images stay on your device (and in your backups).
- Bluetooth and, up to Android 11, location: Android requires this permission to search for Bluetooth printers and scales. We do not collect your location.
- Local network: connect the main POS with the terminals, printers and other devices.
- Internet and network / Wi-Fi state: activate the licence, send cloud backups and VeriFactu records, check for updates and find the main POS and printers on the local network.
- Keep the screen awake: stop the device from going to sleep during service.
The app contains no advertising, no tracking or analytics tools and no third-party SDK that collects data. We do not sell any data or use it for advertising.
2.3 Google Play summary
Data that the Android app may send off the device:
| Data type (Google Play) | When | Purpose | Required? |
|---|---|---|---|
| Device or other IDs (licence serial number, device identifier) | When the licence is activated and checked | App functionality, security and fraud prevention | Yes |
| Personal info: name, email, phone, address and other data of your customers and employees | Only inside cloud backups, if you enable them | Let you restore your data | No |
| Financial info: sales history, payments and cash closures | Only inside cloud backups, if you enable them | Let you restore your data | No |
| Product photos | Only inside cloud backups, if you enable them | Let you restore your data | No |
- All data is encrypted in transit (HTTPS/TLS), and cloud backups are also encrypted on your device before they are sent.
- We do not share data with third parties: only our service providers process it on our behalf (see section 4).
- The app does not require you to create an account.
- You can ask for your data to be deleted at any time (see section 7).
3. Data of your business's customers
When you record data about your own customers or employees in the POS, you are the controller of that data. If you use cloud backups or remote support, we act as a processor: we only process that data to provide the service, following your instructions, and never for any other purpose.
4. Recipients
We do not disclose your data to third parties, except:
- the Spanish Tax Agency (AEAT) and other authorities, when required by law;
- service providers, bound by a contract that guarantees data protection: website and server hosting (o2switch, France, European Union) and payments (Stripe).
If a provider processes data outside the European Economic Area, it does so with the safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision).
5. Retention
- Licence and activation: while the licence is active, then for the legal limitation periods.
- Invoices and billing data: 6 years (Spanish Commercial Code) and the applicable tax periods.
- Cloud backups: at most 90 days and 30 copies per licence. Older ones are deleted automatically.
- Remote support session log: 12 months.
- Contact forms: as long as needed to answer you, and at most 12 months.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@tpvstream.com, giving your name and, where relevant, your licence number. We reply within one month at most.
To delete the licence, the cloud backups and the other related data, follow the steps in section 7.
If you believe your data has not been processed correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Deleting your licence and data
This procedure applies to the TPV Stream app (developer: Anthony Brioit) and to the tpvstream.com website.
How to ask:
- Write to info@tpvstream.com, if possible from the email used for the purchase, with the subject "Data deletion".
- Give the business name and the licence serial number (shown on your invoice and in the app).
- We check that the request comes from the licence holder and delete the data within 30 days at most. We confirm the deletion by email.
Data that is deleted: licence activation data, device identifiers, cloud backups, remote support session log, customer area account and form messages.
Data that is kept: invoices and billing data, for 6 years, because the law requires us to keep them. They are deleted afterwards.
You can also ask us to delete only the cloud backups, without cancelling the licence.
Data stored on your device: deleted by uninstalling the app or clearing its data in the Android settings. Make a backup first if you want to keep it. Records already sent to the Spanish Tax Agency cannot be deleted: tax law requires them to be kept.
8. Security
Communications are encrypted (HTTPS/TLS). Cloud backups are encrypted on your device before they are sent. Connections between the main POS and the terminals are encrypted and authenticated. Each device signs its requests with its own key.
9. Minors
The app and the website are intended for professionals. They are not intended for anyone under 18.
10. Changes
We may update this policy. The date of the last update is shown at the top. If the changes are significant, we will let you know.