Privacy Policy
How we collect, use and protect personal data on kasyro.com and in the Kasyro app.
Last updated: November 6, 2026
1. Who processes the data
The controller of personal data is Kasyro s.r.o., Masarykova 360, 735 81 Bohumín, company ID 30145465, registered in the Commercial Register kept by Regional Court in Ostrava, section C, file 105567. Privacy contact: info@kasyro.com. The data you enter in Kasyro about your customers, staff and sales belong to you. For those we act as a processor: we process them only to provide the service and only on your instructions.
2. What data we process
• Account — e-mail, password (stored only as a hash), name and company details (name, company ID, address) you enter when signing up. • Operating data — products, stock, bills, payments, shifts, closings and documents you create in the app. • Staff — names, roles, permissions and PIN (stored only as a hash). • Customers and reservations — if you use these modules: name, phone, e-mail, loyalty points, credit, vouchers and table reservations of your guests. • Operating statistics — see section 3. • Technical data — device model and operating system, app version and error logs for diagnostics. • Payments for Kasyro Premium and e-shop orders — billing details and payment status. We do not process card details; you enter them directly with the payment gateway. • Contact form — name, e-mail and message. • Contact from the demo — see section 7. • Support chat on the website — see section 8. We do not process your guests' card details: card payments are handled directly by the terminal and its provider (SumUp, Comgate).
3. Operating statistics
Every till — Kasyro Free included — sends us once a day aggregate statistics on how and on what the app is used: counts (e.g. of bills or items), settings and modules in use, technical facts about the device and app (versions, screen, connected peripherals, database and sync health, start-up times) and turnover only as a band. The statistics never contain names, specific amounts, free text, or anything about guests or staff. We use them to develop the app and fix errors (legitimate interest).
4. Face login
If a company turns on face login, the app creates a mathematical template of an employee's face from the photos taken. The template stays on the device only, encrypted; it is not sent to any server and camera images are not stored. The feature can be turned off and the template deleted at any time; it is never set up without the employee's consent.
5. Sales registration (EET)
If sales registration is turned on, the app sends the data on each sale directly to the Financial Administration of the Czech Republic, in the scope set by law. On Kasyro Free, none of these records is sent to Kasyro's own servers.
6. AI assistant
The AI assistant (Kasyro Premium) sends your question and the data needed to answer it to a language model provider (OpenAI, Google or Anthropic). Voice input is transcribed by the same provider. The assistant runs only when you start it.
7. Contact from the demo
The Kasyro demo (no sign-up) may show you a message from us after a payment or at its end, with a form where you can leave us your contact details or a message. • What we process — only what you fill in yourself, and none of it is required: e-mail, phone, a rating of the demo (1–5 stars) and a message of up to 1,000 characters. The time of sending, country, platform, app version, language, the type of business chosen in the demo and an anonymous identifier of the demo installation are added automatically. • Why — only so that we can get back to you when you ask us to. We do not send you marketing or automated e-mails and we do not share the data with anyone else, except the processors in section 13 that run our database and hosting. • On what basis — your consent, given by sending the form. You can withdraw it at any time by e-mail to info@kasyro.com. • Linking to a company — if you later set up a company on the same device, we may link the contact to it. • How long — at most 24 months, sooner on request. We delete the data manually. • Your rights — to request access, correction or erasure, write to info@kasyro.com.
8. Support chat on the website
On kasyro.com you can write to us in the support chat. It is answered by an AI assistant — artificial intelligence, not a person. When the assistant cannot or may not answer, it passes your question to a person from our support team, who then replies to you. • What we process — the text of your chat messages, their time, the page of the website you wrote from, and the language. If you enter them, also your phone number, e-mail and name so that we can get back to you. Of your IP address we keep only an opaque fingerprint that protects the chat against abuse; we delete it after 2 days. • Who answers — the AI assistant. To create a reply, we send the text of the conversation and material from our documentation to the Claude API of Anthropic (section 13). The AI assistant does not see the data of your account or company. • Notifying the team — when a question needs a person or you leave your contact, we tell our support team in the internal tool Slack: the beginning of the question and the contact you entered (section 13). • Why and on what basis — to handle your question; you start the chat with your request for support. • How long — a chat opened without a single message is deleted within 1 day. A conversation with a message is a support ticket; we keep it for at most 24 months after the last activity on the ticket, sooner on request. We delete tickets manually. • Your rights — to request access, correction or erasure, write to podpora@kasyro.com. Please do not write passwords, payment details or other sensitive data in the chat.
9. Why we process data and on what basis
• Providing the service, sync and cloud backup — performance of contract. • Invoicing and accounting — legal obligation. • Support, error diagnostics and operating statistics — legitimate interest. • Important service information (outages, changes to terms) — performance of contract. • Replying to a contact from the demo — consent given by sending the form, which you can withdraw at any time. • Replying in the support chat — handling your request for support. • News and offers — only with your consent; you can unsubscribe at any time. We do not sell your data or use it for advertising.
10. How long we keep data
• Account and operating data — while you use the service; fully erased from the server 90 days after the company is deleted. • Invoices and accounting records — for the period required by law (usually 10 years). • Operating statistics — at most 24 months. • Contact from the demo — at most 24 months, sooner on request. • Support chat — a conversation with a message (including the contact you leave) at most 24 months after the last activity on the ticket, sooner on request; a chat opened without a message within 1 day; the IP address fingerprint 2 days. • Data stored only on the device (Kasyro Free: receipts, sales, catalog and stock) — until the app is uninstalled or its data cleared. On Free, too, the account and the basic company details from when the company was set up are on the server, and the first point applies to them.
11. Security
• All communication is encrypted (TLS). • The on-device database is encrypted; its key is kept in the operating system's secure storage. • Server data are encrypted and isolated per company at database level (Row Level Security). • Access to production data is limited to a small group of people.
12. Cookies
kasyro.com uses only strictly necessary cookies (e.g. the selected language). We do not use analytics, advertising or tracking cookies. The support chat remembers the current conversation in your browser (session storage) so that it survives moving between pages; it is forgotten when you close the tab.
13. Who we share data with
We share data only with processors that help us run the service: • Supabase — cloud database, sign-in and storage (servers in the EU). • PowerSync (JourneyApps) — data sync between devices. • Resend — sending e-mails (closings, alerts, account verification). • OpenAI, Google, Anthropic — AI assistant in the app (section 6). • Anthropic (Claude API) — AI assistant in the support chat on the website (section 8). • Slack — internal notifications to the support team about questions from the chat (section 8). • Payment gateways — card payments for Kasyro Premium and the e-shop. • Wedos (Czech Republic) — website and e-mail hosting. If you connect a payment terminal (SumUp, Comgate) or a bank account (Fio banka), the app talks to them directly from your device and on your behalf. Some providers (Resend and the AI providers in particular) may process data outside the EU, in the USA. Such transfers rely on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
14. Your rights
Under the GDPR you have the right to access your data, have it corrected or erased, to data portability (export in a machine-readable format), to restrict processing and to object to processing. You may also lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz). To exercise your rights, write to info@kasyro.com. Guests whose data a venue entered should contact that venue first — it is their controller.
15. Deleting your account
How to request deletion of your account and data is described on the Account deletion page (kasyro.com/en/account-deletion).
16. Changes
We may update this policy. We will tell you about material changes by e-mail or in the app. The current version is always on this page.
Contact
Privacy questions: info@kasyro.com.