Terms of service

What this covers

These terms govern the use of this service by an organisation and by the people that organisation gives access to. The commercial clauses — pricing, term, liability, termination — are being prepared with counsel and are not yet published. Until they are, this document states the commitments the software itself keeps, which are the ones you can verify.

Your records are yours, and nobody can edit them

Sales, payments, stock movements and the audit trail are append-only at the database level. The account this service runs as holds no permission to change or remove a row in any of them, and a trigger refuses the attempt even from the database owner. A correction is a new, reversing entry that leaves the original visible.

This applies to us as much as to you. Nobody operating this service can amend or delete an audit entry, and an attempted deletion is itself recorded.

Your data is isolated from every other organisation

Every row carries the organisation it belongs to, enforced by PostgreSQL row-level security reading a per-request setting, with a second check in the application above it. A query that forgets to scope itself returns nothing rather than another organisation’s takings.

What we ask of you

Keep credentials to the person they were issued to. Staff PINs exist so that a shared tablet can attribute each drink to whoever poured it; sharing one defeats the only mechanism that makes that attribution meaningful, and the records will then be accurate about the wrong person.

Tell your staff that their actions are recorded. The audit trail names who did what and when, and that is a fact people are entitled to know about their workplace.

Still to be published

Pricing and payment terms. Service levels and planned maintenance windows. Liability and indemnity. Term, suspension and termination, including how your data is returned to you. Governing law and dispute resolution.