Privacy Policy

Denali Solutions LLC, an Arizona limited liability company doing business as Denali Operations and Denali POS ("Denali", "we", "us") makes Denali POS: point-of-sale software for businesses, the tools our team uses to set it up and support it, and the website www.denali-operations.com. This policy explains what information we collect, why, who processes it for us, how long we keep it, and the choices you have. It applies when you visit our website, contact us, sign up, or use Denali POS.

1. Who this covers

• Visitors to our website, and people who contact us or fill in our sign-up form.
• Our customers, the businesses that use Denali POS, and the people who manage their accounts.
• Our customers' staff who use Denali POS registers.
• Our customers' own customers: a name typed on an order, and, when they join a business's rewards program, what they give that business to join.
• Businesses we may contact about Denali POS: U.S. businesses whose contact details we found in public sources (see section 2).

For the information a business keeps in Denali POS about its own sales, staff and customers, the business decides how it is used, and we process it on the business's behalf as its service provider. If you bought from a business that uses Denali POS, that business's own privacy notice applies, and you may contact it first with questions.

2. What we collect

From our website

• What you type into our forms: your name, email, phone, business name and address, the type of business, how many registers and locations you need, and any notes.
• A scrambled version of your IP address (a one-way hash that changes every day), used only to block spam by limiting how many forms come from one place. We do not store your IP address itself.
• Your language choice (English or Spanish), saved in your own browser.
• Visit statistics: the pages you view, the links and buttons you tap (their wording, never anything you type), the site that sent you, whether you're on a phone, tablet or computer, your language and time zone, and how long you read. They tell us which parts of the site help people. We don't use cookies for this and can't tell who you are: your IP address is not stored; a one-day scrambled value is used to count unique visitors and changes every day. If your browser sends Global Privacy Control or Do Not Track, nothing is counted.
• Technical problem reports: if one of our pages shows an error, displays wrongly (for example text cut off or running off the screen), can't reach our servers, or has a script from somewhere it shouldn't, the page tells us what broke: which page, the error, the screen size, and the browser and its language. Never anything you type, and nothing that identifies you.
• Ask Denali chats: if you use the Ask Denali chat on our website, what you type or say and its answers. If you speak, your browser turns your voice into text. The chat is linked to a scrambled value that changes every day, not to your IP address.

We do not use advertising cookies, tracking pixels or cross-site tracking, and we do not build advertising profiles.

From businesses using Denali POS

• Account and billing details: business and legal name, address, phone, contacts, billing email, plan and price.
• What the business enters: items and prices, categories, stock counts, sales tax settings, receipt settings and its logo.
• Sales records: what was sold, prices, taxes, discounts, tips, how it was paid (cash, card or other) and refunds. Customer names only when staff type one on an order.
• Staff: names, roles, time clock hours, and PINs. PINs are stored only as a one-way scrambled value (a hash); nobody at Denali can read them.
• Register details: device type, browser, screen size, app version, connection status, errors, crashes and display problems, and whether a printer or barcode scanner is connected, so we can keep registers working and support them.
• Rewards program members: when a business uses the rewards (loyalty) feature, the name, phone number, email and birthday (month and day only, no year) its customers choose to give, whether they agreed to get offers, and their points, visits and what they spent there. The business decides what to ask for and controls these records. We keep them only to run its program; we never use them for our own marketing and never sell them.
• Service agreement records: when someone accepts the Denali Service Agreement for a business, we record their name and email, the business, the date and time, the IP address and the device (web browser) they used, the version they accepted, and the plan and price chosen. This shows what was agreed and lets us email them a copy.
• Imported files: a menu or product file a business uploads (a photo, PDF, spreadsheet or document) is read to find the items and prices and is not kept after reading. We keep a record that an import happened (the file name and how many items were found).
• Support: emails, problem reports sent from registers (with an optional screenshot), and our team's notes.
• Ask Denali chats on registers and in our support console: what was asked and answered, what Ask Denali looked up, and the next steps people chose. If someone speaks, the browser turns their voice into text. Card numbers, keys and passwords are taken out before anything is saved.

From public sources (businesses we may contact)

To find U.S. businesses that may want Denali POS, our sales tools search public OpenStreetMap listings and read the business's own public website. For each business we keep its name, type, public address, phone, website, an email address listed publicly there, the OpenStreetMap listing and website we found them on, and when. We also keep what its website says that matters to us, for example its opening hours, how many locations it has, whether it takes orders online, and the point-of-sale system it uses.

Payment cards

Denali POS never receives or stores payment card numbers. Card payments on a card reader go through Stripe, on the business's own Stripe account and under Stripe's terms: only the reader and Stripe see the card. For each of these payments we keep the card brand, the last four digits, the amount, Denali's fee and Stripe's payment ID, to show the sale and its refunds. A business can also run cards on its own card terminal from its own card processor, under that processor's terms.

When a business pays Denali for its plan, Stripe takes and keeps the card on its own secure page. We keep Stripe's customer and subscription IDs, the bills and their status.

The Denali POS Android app

The app opens the same register as the website. To take cards on a Stripe card reader or with Tap to Pay, Stripe needs the device's approximate location (to stop fraud), Bluetooth or USB (to reach the reader) and NFC (to read a tapped card). Tap to Pay also checks that the phone is safe to take payments. The camera is used only to scan barcodes, and nothing from it is saved. Receipt printers and cash drawers are reached by Bluetooth, USB or Wi-Fi. We never see or keep the card number.

3. How we use it

• To provide Denali POS: run the registers, keep a business's data in step across its registers, back it up, and show reports.
• To set up new businesses from our sign-up form, and to answer people who contact us.
• To support customers: watch the health of registers, investigate problems, and fix them.
• To bill customers for their subscription and keep the records the law requires.
• To keep a record of the service agreement a business accepts, and to email a copy of it.
• To answer questions in Ask Denali.
• To find U.S. businesses that may want Denali POS, and to email them about it.
• To keep Denali POS secure: sign-in checks, two-step sign-in codes, audit logs, and spam and abuse protection.
• To improve Denali POS, using information about how the software works (errors, speed, which features are used).
• To meet legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not share it for advertising. The email we send:

• Service email: sign-in codes, sign-up links, replies to you and, if you are a customer, email about your account, including reminders to finish setting up a new store.
• "What's new" email to customers, at most once a week, when we release something new.
• Sales email to U.S. businesses that list an email address publicly. AI writes a draft; a person at Denali reads it and sends it from sales@denali-operations.com.

Every "What's new" and sales email says it is an advertisement, and has our postal address and an unsubscribe link. When you unsubscribe, we put your email address on our do-not-email list and keep it there, so we never send it sales or "What's new" email again. If a business replies or unsubscribes, any sales email to it that is still waiting is stopped.

4. Automated tools (AI)

We use AI (automated tools) for these jobs:

• Ask Denali, the chat and voice helper on the registers, in our support console and on this website, answers questions. It can look things up and offer a next step, such as reporting a problem, but a person confirms each step. It doesn't change data and doesn't send anything by itself.
• Reading files: a menu or product file a business uploads is turned into items and prices for the business to check.
• Writing drafts: sales emails, replies to support messages, setup reminders and our team's daily reports. For a business found in public sources, AI also reads its listing and website and scores whether Denali POS may fit it.
• Investigating problems: helping our support team by reading the problem report or the technical problem report, the recent errors and the related records, and by checking our own pages.

These tools don't make decisions about people. A person approves every sales and "What's new" email before it goes out, and a person at Denali sends every sales email. Only when we switch it on may AI send two kinds of email without a person checking each one: replies in a store's own support conversation, and reminders to a new store to finish setting up. A person checks the results before any of a business's data or settings, or our code, is changed; the only things AI may do by itself, when we switch it on, are routine repairs on a register, such as sending its unsent sales to the cloud again.

Ask Denali, reading files and writing drafts run on Cloudflare Workers AI. Investigating problems uses Anthropic's Claude, which can also read uploaded files.

5. Who we share it with

We share information only with service providers that run parts of Denali POS for us, under contracts that limit their use of it to providing their service:

We may also disclose information when the law requires it (for example a valid court order), to protect the rights, safety or property of people or of Denali, to investigate fraud or security problems, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to it.

Denali's data is stored in the United States.

6. How long we keep it

• Business and sales records: while the business is a customer. After it cancels, it can export its data for 30 days; we then delete it within 60 days, except records we must keep by law (for example billing and tax records, kept for 7 years).
• Service agreement records: while the agreement is in force, and for 7 years after it ends.
• Rewards program members: until the business removes them (which erases their name, phone, email and birthday) or closes its account, then as for business records above.
• Register health check-ins: about 14 days. Error and crash reports and support conversations: up to 24 months.
• Website visit statistics: 13 months.
• Technical problem reports: 60 days (a problem our team investigates is kept with its support record).
• Website forms from people who don't become customers: up to 24 months, or sooner if you ask.
• Ask Denali chats: website chats 30 days; register and console chats 90 days; a chat that led to a support case or a sales conversation, 1 year.
• Businesses we found in public sources: 12 months from when we found them or last contacted them, whichever is later, then deleted; sooner if they ask.
• Do-not-email list: kept so we never email that address again. It holds only the email address, why it is on the list, and the date.
• Backups: deleted data leaves our backups within 30 days.

7. Security

Information is encrypted in transit (HTTPS) and stored with our database provider's encryption at rest. Our team's console requires a password and an emailed code, risky changes ask for the code again, and database rules limit who can see what. PINs are stored as hashes. Each register has its own key, which our team can switch off if a device is lost. No system is perfectly secure; if a security breach affects your personal information, we will notify you and the authorities as the law requires.

8. Your choices and rights

• See, correct, download or delete your personal information: email support@denali-operations.com with "Privacy request" in the subject. We'll confirm we got it within 10 days and answer within 45 days (we may extend once by 45 more days, and will tell you why).
• Businesses can download a full backup of their data from any register at any time, and close their account by contacting us.
• Staff and customers of a business: the business controls its records, so please contact it first; we will help it respond. A rewards member can ask the business to remove them at any time, and to stop sending offers.
• Stop our sales and "What's new" email: tap the unsubscribe link in the email, or email us. If we found your business in public sources, you can also ask us to delete what we keep about it. We keep only your email address on our do-not-email list, so we never email you again.
• To protect your information, we verify requests by matching them to details we already have (for example by replying to the email address on the account). You may use an authorized agent with your signed permission.
• We won't treat you differently for using any of these rights.

9. California residents

The California Consumer Privacy Act (as amended by the CPRA) gives California residents the rights above to know, delete and correct their personal information, plus the right to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. We do not sell or share personal information (as those words are defined in the law), and we use sensitive personal information (account sign-in details) only to provide the service and keep it secure, so there is nothing to opt out of. We honor Global Privacy Control browser signals.

In the last 12 months we collected these categories of personal information, from you, from the business you work for, from your device, and from public sources (for businesses we may contact), for the purposes in section 3: identifiers (name, email, phone, address, and the IP address in a service agreement record); commercial information (sales records, subscription details); professional information (the business you represent and your role); internet or device activity (register details and errors); and account sign-in details (staff PIN hashes). We disclosed them for business purposes only to the service providers in section 5. We do not knowingly collect personal information of anyone under 16.

California's "Shine the Light" law: we don't share personal information with others for their own direct marketing.

10. Other states, children, and changes

Other U.S. states. If you live in a state with its own privacy law (for example Colorado, Connecticut, Oregon, Texas, Utah or Virginia), you have similar rights, and we honor the same requests from everyone. If we decline a request, you may appeal by replying with "Appeal" in the subject; if you still disagree, you may contact your state's attorney general.

Children. Denali POS is for businesses and is not directed to children under 13. We don't knowingly collect personal information from children; if you believe a child has sent us information, contact us and we'll delete it.

Changes. If we change this policy, we'll post the new version here with a new effective date, and tell customers by email at least 30 days before an important change takes effect.

11. Contact us

Denali Solutions LLC (Denali Operations)
4611 E Chandler Blvd, Ste 112 #4267, Phoenix, AZ 85048
Privacy questions and requests: support@denali-operations.com
Sales: sales@denali-operations.com