Introduction
Welcome to Sabri by Sabrimex. Sabrimex is a distribution company specializing in Mexican potato chips, and Sabri is our point-of-sale solution built from real-world business needs. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.
By using our services, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We may collect the following types of information to provide and improve our services:
Business Information
Business name, address, contact details, and tax identification numbers required for transaction processing and compliance.
- Transaction Data — Sales records, payment information, product inventory, and transaction history
- Customer Data — Customer names, phone numbers, email addresses, and delivery addresses stored for order fulfillment and communication
- User Account Information — Employee names, usernames, and secure access credentials
- Device Information — Device identifiers, operating system, and app version
- Location Data — Collected only for card reader fraud prevention during in-person payment processing
- Usage Data — How you interact with our application, features used, and diagnostic logs
How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our POS services
- To process transactions and manage your inventory
- To generate sales reports and business analytics
- To improve and optimize our application experience
- To provide customer support and respond to inquiries
- To send important updates and service notifications
- To comply with legal and regulatory obligations
Authentication
Sabri supports the following sign-in methods through Firebase Authentication:
- Email and password
- Google Sign-In
- Sign in with Apple
When using Sign in with Apple, you may choose to hide your email address. In that case, Apple generates a private relay email address on your behalf. We store only the email provided by your authentication provider.
SMS Communications
Customers who provide their phone number when placing an order through a merchant's online catalog may receive transactional SMS messages related to their orders. SMS messages are delivered through Twilio, a third-party communications provider. These messages may include:
- Order confirmation notifications
- Order status updates (picked, ready, out for delivery)
- Payment confirmation messages
- Order approval requests
Opting Out of SMS
You can opt out of SMS notifications at any time by replying "STOP" to any message you receive. Standard message and data rates may apply. Message frequency varies based on your order activity.
We do not send marketing or promotional SMS messages. All SMS communications are strictly transactional and related to your orders.
Payment Processing
We use Stripe as our payment processor for both in-person and online transactions. Stripe handles all payment card data in compliance with PCI-DSS standards. We do not store credit card numbers, CVVs, or full card details on our servers or devices.
- Stripe Connect is used for merchant account management and payouts
- Stripe Terminal is used for in-person card reader payments
- Payment data is transmitted directly to Stripe and is not stored by Sabri
Data Storage & Security
We implement industry-leading security measures to protect your data:
Our Security Practices
- End-to-end encryption of sensitive data in transit and at rest
- Secure authentication with Firebase Auth, Google Sign-In, and Sign in with Apple
- Regular security audits and vulnerability assessments
- Role-based access controls with 32+ granular permissions
- Offline-first architecture with secure local storage
Your data may be stored locally on your device using Core Data and/or on secure Firebase cloud servers (Firestore, Storage, Auth), depending on your configuration preferences. We use Firestore for real-time cloud synchronization with automatic offline support.
Data Sharing & Third-Party Services
We do not sell your personal information. We may share your information only in the following circumstances:
- With your explicit consent
- With trusted service providers who assist in operating our application:
- Google Firebase (Firestore, Auth, Storage, Cloud Functions) — cloud infrastructure and authentication
- Stripe (Connect, Terminal) — payment processing and merchant payouts
- Twilio — transactional SMS delivery for order notifications
- To comply with legal requirements, court orders, or government requests
- To protect our rights, privacy, safety, or property
Your Rights
Depending on your location, you may have the following rights regarding your data:
- Access — Request a copy of your personal data
- Correction — Request correction of inaccurate data
- Deletion — Delete your account and all associated data directly from the app via Settings > Delete Account, or by contacting us at admin@sabrimex.us
- Portability — Request transfer of your data to another service
- Opt-out — Opt-out of certain data processing activities
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Transaction records may be retained as required by applicable tax and accounting regulations. When you delete your account, all associated data is permanently removed from our servers, including Firestore documents, Firebase Storage files, and your authentication credentials.
Children's Privacy
Our application is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, we're here to help.