What FastPOS keeps, and why
Last updated 13 September 2026 · Applies to fastpos.in, app.fastpos.in and the FastPOS Android app
FastPOS is a point-of-sale service for restaurants and cafes, made by Guhya Software Solutions Private Limited, Chittoor, Andhra Pradesh, India. This page is written in plain language for the three kinds of people whose details pass through it: the restaurant owner who signs up, the staff who use the till, and the customers whose phone number goes on a bill. If anything here is unclear, write to hello@fastpos.in.
1. Who is responsible for the data
For the details of a restaurant and its staff, Guhya Software Solutions Private Limited is the data fiduciary (the party responsible) under India's Digital Personal Data Protection Act, 2023.
For the details of a restaurant's customers — the phone numbers and order history a restaurant collects at its counter — the restaurant is responsible for that data and FastPOS processes it on the restaurant's behalf, only to run the service. We do not use a restaurant's customer list for our own purposes, and we never share it with another restaurant.
2. What we store, and why
| Whose | What | Why |
|---|---|---|
| Restaurant | Restaurant name, area/locality, owner's name, phone and email, a password (stored hashed), the register number we assign, GST setting, UPI ID if you enter one, menu, tables, printers, theme and screen choices. | To create and run your account, bill correctly, and print or send bills. |
| Staff | Username, role, PIN (stored hashed), clock-in and clock-out times, and the bills each user took. | Sign-in, attendance and the payroll summary you asked for; an audit trail of who did what on the till. |
| Customers | Phone number, and when given: name, email, Telegram handle, whether they agreed to receive offers. Their orders, what was on them, how they paid, visits and spend. | To send the bill the way the customer asked (WhatsApp, Telegram, email), to recognise a returning customer, to run coupons and offers the restaurant chooses to send. |
| Orders & payments | Every bill and its items, discounts, taxes, payment method and amount, refunds and voids, kitchen tickets. For UPI we record the amount and the reference the restaurant enters; we never see or store card or bank details. | Because it is your sales record — reports, GST, invoices and finance screens are built from it. |
| Suppliers & bulk buyers | Names, phones, emails, delivery addresses and invoices you enter in Catering / Invoices. | To raise invoices and track deliveries, if you use those screens. |
| Calendars | Festival and fasting calendars you add or subscribe to, and which days you confirmed. | So your kitchen and website know which days you observe. |
| Technical | Server logs with IP address, time and the request made, kept briefly for security and debugging. | To keep the service up and to spot abuse. |
3. Your customers' data
The restaurant decides what to ask a customer for. A bill can be taken with no customer details at all. When a phone number is entered, that customer is recorded for that restaurant only. Two restaurants that both serve the same person each keep their own separate record, even when one owner runs both.
Marketing messages (offers, coupons, win-back reminders) are only sent to customers who ticked "agrees to receive offers" at the counter or on a sign-up page. A customer can withdraw that at any time by telling the restaurant, or by writing to us with the restaurant's name.
Bills sent over WhatsApp, Telegram or email leave through the restaurant's own WhatsApp, the restaurant's Telegram bot, or our mail server (mail.fastpos.in). We do not use a paid messaging API and we do not read replies.
4. Voice ordering and AI
Voice ordering. When a cashier holds the Speak button, the speech-to-text is done by the device's browser (Chrome) or the phone's speech service, which may send the audio to that provider (for Chrome, Google) to transcribe. FastPOS itself never receives or stores audio. What we store is the text of what was heard, which dishes it was matched to, what the cashier corrected, and the language chosen — so that we can improve the matching for that restaurant. This text may contain whatever was said near the microphone; it is kept inside the restaurant's account and is not shared.
AI menu import and dish matching. When you import a menu from a photo or a sheet, or when a spoken order contains words our matcher does not recognise, the image or the text is sent to an AI model to read it. Depending on our configuration this is either a model running on our own server, or Google's Gemini API. Only the menu image or the unrecognised phrase is sent — never customer details, never bills.
5. The Android app and its permissions
The FastPOS Android app is the same POS wrapped for a tablet. It loads app.fastpos.in and asks for permissions only when you use the matching feature:
- Camera — to scan a staff QR for attendance, scan a coupon, or photograph a menu for import. Images are used for that action only.
- Microphone — for voice ordering, only while the Speak button is held.
- Bluetooth / nearby devices and USB — to print bills on a thermal printer beside the till. We store the printer's address so you do not pair it again.
- Network — to reach app.fastpos.in.
The app keeps a copy of your menu and recent screens on the device so it opens instantly and still shows the menu if the wifi drops. Signing out clears the sign-in token; uninstalling clears everything on the device. Nothing on the device is shared with other apps.
6. Where the data lives, and who sees it
FastPOS runs on servers we rent from Hetzner Online GmbH in the European Union, on encrypted connections (HTTPS) end to end. Backups are kept on the same provider. India's data-protection law allows this transfer; if a rule is issued restricting it, we will move the data to comply.
Only Guhya's engineers who operate the service can reach the database, and only to run, back up, secure and support it. We do not sell, rent or trade any data. The only parties that receive data are the ones needed to deliver the service:
- Hetzner — hosting, as above.
- Google — speech-to-text inside Chrome, and the Gemini API for menu import and dish matching when so configured (section 4).
- Your own WhatsApp / Telegram and our mail server — to carry bills and offers you send.
- Public calendar publishers you subscribe to — we fetch their published files; nothing about you is sent to them.
We will disclose data if the law requires it, and we will tell the restaurant when we are allowed to.
7. How long we keep it
- While your account is active — everything, because bills and customer history are the product.
- After you close your account — we delete restaurant, staff and customer data within 90 days, keeping only what Indian tax and company law require us to keep about the subscription itself (our invoices to you), for the period that law sets.
- Server logs — 30 days.
- Voice transcripts — 12 months, then deleted.
- Sign-up not completed — a registration that is never verified is removed after 30 days.
8. Your rights
A restaurant owner can see and change everything in their account from the Settings page, and can ask us for an export or to close the account by writing to us. Staff can ask their restaurant, or us, to see or correct what is held about them.
A customer of a restaurant can ask that restaurant to see, correct or delete their record, or to stop receiving offers; the restaurant can do all of this from its Customers screen. If a customer writes to us instead, we will pass the request to the restaurant and make sure it is done.
Under the Digital Personal Data Protection Act you may also nominate someone to exercise these rights for you, and you may complain to the Data Protection Board of India if you believe we have not handled a request properly. We would ask you to write to us first — we answer within 7 working days.
9. Cookies and analytics
fastpos.in (this website) sets no cookies and runs no analytics or advertising scripts. The sign-up form talks directly to app.fastpos.in. Fonts are loaded from Google Fonts, and the how-to videos are embedded from YouTube; each of those providers may set its own cookies when you load a page that includes them, under their own policies.
app.fastpos.in (the POS) stores your sign-in token and a cached copy of your menu in the browser's local storage so the till opens fast and works through a brief loss of wifi. It sets no third-party or advertising cookies.
10. Terms of service
The service
FastPOS is a subscription billing and point-of-sale service for food businesses in India. Sign up creates one account per outlet, with a register number, an owner login and any staff logins you add. You must be 18 or over and entitled to act for the business.
Price and payment
The price is a flat fee per outlet, shown on fastpos.in at the time you join, with the free period stated there. We never take a commission on your sales. We may change the standard price with 30 days' notice by email; a locked founding rate stays locked for the period promised.
Your responsibilities
Keep your password and staff PINs private. Enter correct prices and tax settings — the GST on a bill is calculated from what you set. Collect your customers' details lawfully and only send offers to customers who agreed to receive them. Do not use the service for anything unlawful or to send unsolicited messages.
Our responsibilities
We keep the service running, backed up and secure, and tell you promptly if something goes wrong with your data. We give reasonable support by WhatsApp and email. We do not guarantee that the service is never interrupted; when it is, the Android app and the POS keep showing your menu and we restore service as quickly as we can.
Payments between you and your customers
UPI payments go straight from your customer's bank to your UPI ID. FastPOS shows the QR and records what you confirm; it is not a payment gateway, holds no money, and is not a party to the payment.
Ending the service
You can stop at any time; a paid year is not refunded for the unused part unless we have failed to provide the service. We may suspend an account that is used unlawfully or that harms the service for others, and we will say why. On closure, section 7 applies to your data, and you may ask for an export first.
Liability and law
To the extent the law allows, our liability to you is limited to the subscription fees you paid in the twelve months before the claim. These terms are governed by the laws of India and the courts of Chittoor, Andhra Pradesh.
11. Changes to this page
When we change what we collect or how we use it, we update this page, change the date at the top, and email every restaurant owner before the change takes effect. Small wording fixes are made without notice.
12. Contact
Guhya Software Solutions Private Limited
Chittoor, Andhra Pradesh, India
Email: hello@fastpos.in — this is also the address for data-protection requests and the grievance officer.
Short version: your restaurant's data is yours, your customers' data is your restaurant's, we keep it only to run the till, we never sell it, and we delete it when you leave.