IKAROS POS privacy policy
Version: 14/11/2026
This policy covers the data of system users (owners, store staff, resellers, referral partners and accounting offices). For the data of each store's customers the store is responsible (see the privacy policy on its ordering page).
1. Controller
IKAROS POS
noreply@ikaros.pro
https://ikaros.pro
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, role, PIN (hashed) | Account and sign-in | Contract |
| Business and billing details | Subscription, invoices | Contract, legal obligation |
| IP, device, security activity log | Security, abuse prevention | Legitimate interest |
| Error reports | Support and fixing problems | Legitimate interest |
| Product update emails | System news | Legitimate interest, with opt-out |
| Referral partner details: company, VAT number, contact details, IBAN, application and acceptance of the agreement (date, IP), stores they brought and commissions | Referral programme, commission payments | Contract, legal obligation |
Partner code from a referral link (cookie ikaros_ref, 90 days) |
To know which partner recommended a store | Legitimate interest; the code is shown and can be changed at signup |
| Demo request from the website: name, store, phone, email, city, preferred time, note, IP | To call you for the demo you asked for | Consent; deleted after 12 months |
| Which accounting office has access to a store, since when, and who gave or removed it | The accountant access the store sets, security log | Contract, legitimate interest |
3. Recipients
Hosting and backup providers, email / SMS providers, payment providers for the subscription, the reseller serving the store, the e-invoicing provider the store chooses. The partner who recommended a store sees only its name, city, signup date, status and commission. The accounting office the store itself appoints sees, read only and for as long as access lasts, its sales and fiscal documents. We do not sell data.
4. Retention
For as long as the account exists and then as long as the law requires (invoices). Error logs are deleted after 30 days, demo requests after 12 months.
5. Rights
Access, rectification, erasure, restriction, portability, objection: contact noreply@ikaros.pro. You may complain to the Hellenic Data Protection Authority (www.dpa.gr).