1. The essentials at a glance

Your sales, customers, products, prices and receipts stay on your computer: CodesNova does not receive them. Two exchanges with our servers are indispensable (the licence and the updates). Technical diagnostics are sent only with your explicit consent — and the till works exactly the same way if you decline.

2. Who is responsible for what

CodesNova (publisher — manager: FERRAT Yanis; RC 15/00-5226573 A 20; NIS and NIF available on simple request; Boulevard Krim Belkacem, Immeuble Makhlouf, Cage A, Bureau N° 94, Tizi Ouzou, Algeria) is the data controller for the data described in section 5: licence and workstation activation, customer account and purchase, technical diagnostics (with your consent), website and support.

You, the shop owner, are the data controller for your shop's data: customer records, sales, suppliers, employees. It is stored on your workstation and CodesNova has no access to it (section 4). It is up to you to inform your customers, set the retention period, answer their requests and secure your workstation. If you entrust us with a backup or remote access for support, CodesNova then acts only on your instructions and for that support alone.

3. Who this policy applies to

It covers the POS Nova and BrakePro tills ("the Tills") and the repair-pro.tech website (purchase, customer area, contact form). The Tills share the same licence system with the other applications of the Repair PRO range, described in section 5 (A). The technical diagnostics of the Repair PRO application for workshops are not covered by this policy.

Applicable law: Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons with regard to the processing of personal data, under the supervision of the National Authority for the Protection of Personal Data (ANPDP). For people located in the European Union, we also apply the principles of the GDPR (Regulation (EU) 2016/679).

4. Your shop data: it stays with you

• Where: in the Till's local database, in the data folder of your Windows session (%LOCALAPPDATA%), as well as in local technical logs and the backup files you create (the Till also automatically keeps the last 5 backups made before a database update).
• What: customer records (name, telephone, address depending on what you enter), sales and receipts, products and prices, suppliers, employees (name and PIN code, the latter being kept only in hashed form).
• Sent to CodesNova: none of this. The error message in a diagnostic report is technical text, not designed to contain commercial data; if any appeared there by accident, you may request its deletion (section 10).
• Several workstations: on a local network, your shop's workstations exchange data directly with each other, without going through our servers. With the optional remote synchronisation module, exchanges go through our relay (section 5, F).
• Your obligations: inform your customers, protect access to the Windows session and change the administrator PIN set at installation without delay. The local database is not encrypted by the application: we recommend encrypting the disk (for example BitLocker) and keeping backups away from the workstation.

5. Data we process, why and on what basis

A. Licence and workstation activation — necessary for the contract

• Data: licence key; technical workstation identifier (Windows hardware identifier or its SHA-256 fingerprint); computer name; product used (POS Nova or BrakePro); workstation session token (kept encrypted on the workstation); IP address seen by the server; e-mail of the licence holder (returned by the server and stored on the workstation).
• Purposes: activate the licence, check the number of authorised workstations, the expiry and the product purchased, prevent fraudulent use.
• Legal basis: performance of the licence contract.
• When: at activation, at each connected startup, then about every hour. Offline, the Till keeps working for a tolerance period (currently 30 days after the token's validity ends) — never beyond the licence expiry date.

To check that an Internet connection is available, the Till briefly opens a connection to a public DNS server (8.8.8.8, port 53), without sending any data to it.

When you open the "Change licence" window, the Till loads fonts from Google Fonts (Google, United States), which then receives your IP address.

B. Customer account, purchase and payment — necessary for the contract and legal obligation

Name, e-mail, telephone, country, order, chosen payment method and supporting documents. Online payment is handled by our payment providers (Chargily for payments in Algeria, PayPal for other countries): CodesNova neither receives nor keeps card numbers. Payments by CCP or in cash are recorded from the supporting documents you give us. Keeping accounting records meets a legal obligation.

C. Sign in with Google (optional)

If you choose "Sign in with Google", your system browser opens Google's sign-in page through our authentication service. We receive your Google name and e-mail address to create or retrieve your account and licence, then we ask you to complete your telephone number (Google does not provide it). Legal basis: performance of the contract (your sign-in request). You can also sign in without Google.

D. Updates

At each update check, our download server receives the IP address, the application version and the target system (for example 64-bit Windows). Updates are signed and installed automatically; the Till's database is backed up before any migration. Legal basis: performance of the contract and legitimate security interest.

E. Technical diagnostics — only with your consent

At the first startup after activation, the Till asks whether you agree to send technical information to CodesNova. Nothing is sent until you have answered "Accept", and declining removes no feature. If you accept, the Till sends:

• Purpose: detect failures, fix errors and improve the software. This data is neither resold nor used for advertising or commercial profiling.
• Legal basis: your consent, given freely and separately from the purchase.
• Withdrawing your consent: at any time in the Till's Settings, "Confidentialité" (Privacy) section. Sending stops immediately. Your choice is stored on the workstation concerned (one choice per workstation); you are asked again if this policy changes regarding the data collected.
• Technical safeguard: the Till itself blocks any diagnostic sending until consent is recorded; the decision is kept in a local file.

F. Several workstations: local network and remote relay

• Local network: your shop's workstations exchange data directly with each other, with authentication by shared token and message signing. Nothing goes through CodesNova.
• Remote relay (paid "remote synchronisation" module): if you enable it, the commands exchanged between your workstations (which may contain data about your sales or customers) pass through our relay server, over an encrypted connection (TLS) and signed. The relay does not record them: it keeps them in memory for the time of a transmission (35 seconds at most) then forgets them; only technical traces (IP address, shop identifier, command name, date) appear in the server logs. CodesNova does not look at their content.

G. The repair-pro.tech website

• Language cookie (display preference, 12 months): strictly necessary.
• Approximate location deduced from the IP address (country), to display suitable prices and payment methods; the IP address is not kept for this purpose.
• Audience measurement with Google Tag Manager and Google Analytics (Google, United States): pages visited, device, country. These tools load on every visit to the website: the website does not display a banner collecting consent before they load. You can block them with your browser settings or a blocking extension.
• Anti-bot protection: a third-party anti-bot service, which receives the IP address and browser information when certain forms are used (for example a reservation in an online shop).
• Contact form: name, e-mail, message, and where applicable the origin of the visit (campaign). They are used to reply to you and are recorded in the tool we use to follow our commercial enquiries. Legal basis: your request, then our legitimate interest in following up the relationship.
• Information e-mails (marketing): sent through Brevo; each one contains an unsubscribe link, and you may also ask to be removed by writing to contact@codesnova.com.

H. What the Tills do not include

In their current version, the Tills do not include online backup, WhatsApp messaging, document recognition (OCR) or online mobile synchronisation: these functions, specific to other applications in the range, are not wired into them. If they were added, this policy would be updated and your consent would be requested again if necessary.

6. Recipients and processors

Your data is neither sold nor rented. It is accessible only to the members of CodesNova who need it, and to the following providers, within the limits of their role:

7. Transfers outside Algeria

Some recipients in section 6 process data outside Algeria, in particular: our servers are located in the European Union (Germany and Ireland); Google (Google sign-in, audience measurement) and the website delivery and protection network are located in the United States. These transfers take place only under the conditions provided by Law No. 18-07 (country offering an adequate level of protection, ANPDP authorisation or legal exception). For people located in the European Union, they rely on the safeguards provided by the GDPR (adequacy decision or standard contractual clauses) where the provider offers them.

8. Retention periods

9. Security

• All communications between the Till and our servers use an encrypted connection (HTTPS / TLS).
• The workstation session token is encrypted on disk (AES-256-GCM) with a key specific to the workstation: copied to another computer, it is unusable. PIN codes are hashed (bcrypt).
• Exchanges between workstations are authenticated and signed, with protection against message replay.
• Diagnostic sending is rate-limited and automatically suspended after repeated failures.
• Updates are signed: the Till refuses an update whose signature does not match.
• In the event of a data breach likely to harm you, we will inform you and the competent authority, in accordance with the applicable regulations.

10. Your rights and how to exercise them

Under the conditions provided by Law No. 18-07, you may: be informed about the processing of your data, access your data, have it rectified or updated, obtain the erasure or blocking of data whose processing is not compliant, and object on legitimate grounds to its processing — without any ground, in the case of commercial prospecting. For people located in the European Union, under the GDPR you also have the right to restriction of processing, portability, withdrawal of consent at any time (without affecting what was done before) and the right to lodge a complaint with the supervisory authority of your country.

How: write to contact@codesnova.com stating your name, your licence e-mail and, if possible, your workstation identifier (shown in Settings, Licence section). We may ask for proof of identity to prevent a third party from making the request in your place. We reply as soon as possible and at the latest within the time limit set by Law No. 18-07.

Your shop's data: requests from your own customers must be addressed to you; CodesNova does not hold this data.

Complaint: you may refer the matter to the ANPDP (National Authority for the Protection of Personal Data, Algeria) or, if you are in the European Union, to the data protection authority of your country.

11. Children

The Tills and the website are intended for professionals. We do not knowingly collect data from people under 18.

12. Changes to this policy

We may amend this policy, in particular if the list of data collected changes. When the data collected by diagnostics changes, the Till asks for your consent again at the next startup. The date and version appear at the top of this document.

13. Contact us

CodesNova — Boulevard Krim Belkacem, Immeuble Makhlouf, Cage A, Bureau N° 94, Tizi Ouzou, Algeria · contact@codesnova.com · Support: +213 554 31 99 03.

See also: Legal notice · Terms of use and licence · Cookie policy.

This English text is a translation provided for information. In case of divergence, the French version prevails.