Privacy Policy

This Privacy Policy explains how LeisureOS, operated by Aiby Technologies, collects, uses, stores and protects personal information when people use the LeisureOS website, business dashboard, Staff interface, customer QR experience and related services. For some information, LeisureOS acts as the organization responsible for deciding why the information is used. For data that a business enters about its own customers, Staff or operations, the business may be the primary decision-maker and LeisureOS processes the information to provide the service.

In the current core product, LeisureOS records operational payment information such as Cash, POS or Transfer, the amount recorded and an optional transaction reference. LeisureOS does not intentionally require customers to enter full payment-card numbers into the core platform. If payment-processing integrations are introduced later, this Policy should be updated to explain which provider processes card or bank details and what information LeisureOS receives from that provider.

We use information where necessary to:

A venue or business using LeisureOS may decide what personal information it collects from its Staff and customers and why it collects that information. In those situations, the business is responsible for its own notices, permissions and legal obligations. LeisureOS processes that business-controlled data to provide the software. Additional processor terms are described in the Data Processing Addendum .

We do not sell personal information to advertisers. Information may be shared with service providers that help operate LeisureOS, such as hosting, infrastructure, email, monitoring, backup or security providers, but only to the extent reasonably necessary for them to provide their service. We may also disclose information where required by law, to protect legal rights or security, or as part of a legitimate business transaction such as a merger or acquisition, subject to appropriate safeguards.

We aim to retain personal information only for as long as needed for the purposes described in this Policy, to maintain legitimate business records, resolve disputes, enforce agreements, comply with legal obligations and support backup/recovery requirements. Specific retention periods should be finalized before commercial launch based on customer needs, legal requirements and the backup architecture used in production.

LeisureOS uses safeguards designed to protect account and business information, including authenticated sessions, password hashing, access controls, tenant and branch separation, CSRF protections, signed QR links, rate limiting, server-side validation, audit records and encrypted HTTPS transport when deployed in production. No system can guarantee absolute security. Businesses should protect account credentials and devices and should notify LeisureOS if unauthorized access is suspected.

LeisureOS currently uses essential session technology needed for authentication and platform security. The current public website is not designed around advertising cookies. See the Cookie Policy for more information.

Depending on the law that applies to you, you may have rights relating to access, correction, deletion, restriction, objection, portability or withdrawal of consent. If the information is held by a business using LeisureOS, requests may need to be directed to that business because it controls the relationship with the customer or Staff member. LeisureOS will reasonably assist business customers with valid requests where required.

LeisureOS may use infrastructure or service providers located in different countries. Where applicable law requires safeguards for international transfers, appropriate contractual or technical measures should be used.

LeisureOS business accounts are intended for organizations and authorized adult users. The platform is not designed as a consumer service directed at children. A venue that records information about minors is responsible for ensuring that collection is lawful and appropriate for the service being provided.

We may update this Privacy Policy as the product, infrastructure or legal requirements change. The “Last updated” date will show when the current version was published.

Privacy questions can be raised through the LeisureOS contact page until a dedicated privacy email or postal contact is formally published.