Privacy policy.

1. Who we are

This website and the AlphaTill software are operated by BeAlpha Group Limited ("we", "us", "our"), a company registered in England and Wales.

• Company number17391394
• Registered office66 Paul Street, London, England, EC2A 4NA
• Emailhello@alphatill.store
• ICO registrationRegistration pending — reference will be published here once issued

We are the data controller for the personal data described in this policy. If you have a question about it, email us at the address above and we will answer.

2. What we hold, and why

2.1 If you contact us or ask for a demo

When you use the enquiry form or email us, we hold your name, business name, email address, telephone number and whatever you tell us in your message.

Why: to reply to you and, if you go on to buy, to set your till up and support it. Lawful basis: our legitimate interest in responding to people who ask us about our product, and — once you buy — performance of our contract with you.

2.2 If you buy AlphaTill

We keep a customer record: trading name, the legal entity we invoice, company and VAT numbers where relevant, your contact name, email, telephone number and address, the licences issued to you, and notes about support we have given.

Why: to perform our contract with you, to issue and renew your licence, to support the software, and to keep the accounting records the law requires of us. Lawful basis: performance of a contract, and our legal obligations under the Companies Act and tax law.

2.3 When a till checks its licence

Each installed till periodically contacts this website to confirm its licence is valid. That message contains the licence number, the till’s identifier, the computer’s hardware serial number or system ID as reported by Windows, the version of AlphaTill running, and a checksum of the program files. We store these along with the date and a one-way hash of the network address it came from.

Why: to know our software is running under a valid licence, to spot a licence being used on more tills than were bought, to confirm a till is still the computer it was licensed for, and to tell whether an installation has been modified. Lawful basis: our legitimate interest in protecting our intellectual property and supporting our customers.

These check-ins carry no sales data, no takings, no menu, and none of your customers' details. They cannot: the till never sends them.

2.4 This website

Our host records standard server logs — the pages requested and the time — for security and to keep the site running. We do not use analytics, advertising or tracking of any kind.

3. What stays on your own till

This is the part worth being clear about, because it is unusual and it is in your favour.

AlphaTill stores everything it does — orders, takings, reports, your menu, and the names, telephone numbers and addresses of your customers — in a database file on the computer in your shop. None of it is uploaded to us. We have no copy, no access and no ability to obtain one.

That means that for your own customers' personal data, you are the data controller and we are not your processor. Your obligations to those people — telling them what you hold, answering their requests, keeping it secure — are yours, and this policy does not cover them. If you turn on the optional Google Drive backup, the backup goes to your Google account, not ours.

If you switch on Telegram alerts

AlphaTill can send a message to your phone when something happens at the till. This is the one part of the software that sends your business information somewhere else, so it is worth setting out plainly.

It is off until you turn it on. To use it you create your own Telegram bot, and enter its token and your chat ID in the till’s settings. The till then sends the messages straight to Telegram. They do not pass through us, we are not copied on them, and we have no way to read them.

When it is on, the messages can include the shop name, order and table numbers, amounts, payment method, order type, the day’s totals, and the name of the member of staff who opened the till, took the order, gave the discount, took the refund or approved it — together with any reason or note typed in at the time. Your customers’ names, addresses and telephone numbers are not included.

It also works the other way: from the chat you set up, a manager can send /x, /sales or /status and the till will reply with the live figures. Only the chat ID you configured is ever answered.

Because it is your bot, your chat and your decision to switch it on, you are the controller for that transfer, in the same way as the optional Google Drive backup. Telegram’s own terms and privacy notice apply to what it does with the messages once they arrive, and the people whose names appear in them — your staff — should be told that it is on. Turning the setting off stops it.

4. Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing. We use a small number of suppliers who process data on our behalf, under contract and on our instructions only:

• Vercel Inc. — hosts this website and its server code.
• Supabase — hosts our customer and licence database. Our project is hosted in the United Kingdom (London) region.

Telegram is deliberately not in that list. If you switch the alerts on, the till sends them to Telegram directly and we are not party to it.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

5. Where it is held

Our database is hosted in the United Kingdom. Some of our suppliers are US companies whose support staff may access systems from outside the UK; where that happens, transfers are covered by the UK International Data Transfer Addendum or equivalent safeguards.

6. How long we keep it

• Enquiries that do not become customers — up to 24 months, then deleted.
• Customer records — for as long as you are a customer, then 7 years, to meet the retention period for business and accounting records.
• Licence check-ins — 24 months.

7. Your rights

Under UK data protection law you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds not to.

Email hello@alphatill.store and we will respond within one month. There is no charge.

8. Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.

9. Changes

If we change this policy we will update the date at the top, and tell customers directly if the change is significant.