Privacy Policy
Last updated 2026-11-11
Posy is a bookkeeping app for flower shops. It helps a shop record sales, keep stock and plan staff shifts. This policy explains what data the app and this website handle and why.
Who is responsible
The operator of Posy is Lev Verbitskii, a private individual in Cyprus. Each flower shop that uses Posy decides what is recorded in it and manages its staff accounts; Posy stores and processes that data on the shop’s behalf. Contact: support@posy.pro.
What the app collects
- Account data: name, email address, the role in the shop and which shops the person works at. There are no passwords: people sign in with a one-time code sent to their email (or a permanent code set by the Posy team for some accounts, stored only as a secure hash).
- Shop records: products and prices, bouquets and their compositions, sales, deliveries, write-offs, stock, shift schedules and, if the shop turns it on, shift check-in times. Each record notes which staff member made it.
- Photos of products and bouquets that the shop chooses to add. The app asks for access to the camera (to take a product photo) and to the photo library (to pick an image), only when you use those features.
- Location of a shop, if an administrator sets one. The app asks for your device location only to center the map when you pick the shop’s address, and does not store or send your device location. The address pin the administrator chooses is saved as part of the shop’s data.
- Last activity: the time a person last used the app, so the shop and Posy can see who is using it.
Posy does not process payments and does not collect card numbers or bank details. A sale only records the payment method chosen by the staff member (for example card or cash). The app has no third-party analytics or advertising and does not track you across other apps or websites.
What this website collects
If you send the “Connect your shop” form, we store what you write (name, phone, email, shop name, city, comment), your language and the IP address used to send it (to limit spam). We use it only to reply to you. The website has no cookies and no analytics.
Why we use it
Only to run the service: to sign people in, keep a shop’s records in sync between devices, show reports to the shop’s managers, and answer enquiries. We do not sell data or show ads.
Who processes it
- Railway hosts the servers and the database. Data is stored in the European Union (Netherlands, Amsterdam). A copy of a shop’s data is kept on staff members’ phones so the app works offline.
- Resend sends our emails: sign-in codes and invitations. It receives the recipient’s email address and the text of the message.
Connections use HTTPS. We do not share data with anyone else, except where the law requires.
How long we keep it
Records are kept while the shop uses Posy. When a shop stops using Posy, or on request, its data is deleted. Enquiries from the website form are kept for as long as needed to answer them.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its processing, or receive a copy of it. Write to support@posy.pro; we answer within 30 days. To delete an account or all of a shop’s data, see Support. You can also complain to the Commissioner for Personal Data Protection in Cyprus or your local data protection authority.
Children
Posy is a workplace tool and is not intended for children.
Changes
If this policy changes, the new version will be published on this page with a new date.