Privacy Policy
Effective September 30, 2026
Platata is a point-of-sale app for small businesses: restaurants, shops, pharmacies, service businesses and residential buildings. Platata is made by Norv Inc (“we”, “us”). This policy explains what information the Platata app and the platata.app website collect, why we collect it, who we share it with, and the choices you have.
Who is responsible
Norv Inc is responsible for the information about you as a Platata user. You can reach us at hello@platata.app.
If you run a business on Platata, you decide what you record about your own customers and employees. For that information, your business is responsible, and we process it on your behalf to provide the app.
What we collect
- Your account. When you sign in with Google: your name, email address, profile photo and Google account ID.
- Your business. Business name, country, address and tax settings; products, prices and stock; sales, receipts, refunds, tabs and cash register records; supplier invoices; and documents you upload (for buildings: bylaws, minutes, bank statements and unit records).
- People in your business. What you enter about employees (name, PIN, role, pay) and customers (name, phone or WhatsApp number, tabs, bookings).
- Payments. Card payments are processed by Stripe (United States and Canada) and Wompi (Colombia). Card numbers go to them, not to us. We receive the amount, the result, the card brand and last four digits, and a payment reference.
- Subscriptions. Plans bought in Google Play are paid to Google. We only receive whether your plan is active.
- Online orders. If you use Sell online, your customers’ orders (name, phone and what they ordered) reach your business through our servers.
- Device and usage. Device model, Android version, app version, crash reports and basic usage events (Google Firebase Analytics and Crashlytics), plus an app integrity check (Firebase App Check with Google Play Integrity).
- Location. Only when the phone takes card payments with Stripe, which the payment provider requires, and to find Bluetooth printers on older Android versions. We do not track where you are.
- Camera and photos. Used when you scan barcodes, menus, invoices or documents. Barcode and text recognition run on your device.
How we use it
- To run the app: sell, take payments, print and send receipts, keep your registers and devices in sync, and back up and restore your business.
- To read what you scan: when you import a menu, a supplier invoice or a building document, the recognized text is sent through our server to an AI provider (DeepSeek) to turn it into items, totals or dates. This only happens when you use those features.
- To fix problems and improve the app.
- To protect the app, your business and your customers from fraud and abuse.
- To meet legal obligations.
We do not sell your personal information, and Platata does not show ads.
Where it is stored
Your business lives on your device. Information shared between your devices is stored on Google Firebase (Google Cloud) servers in the United States. If you turn on backups, copies go to your own Google Drive, and Platata only uses the backup files it creates there.
Your information may be processed outside your country. We use providers that protect it with appropriate safeguards.
Who we share it with
Only with the service providers that make Platata work, and only for that purpose:
- Google (Firebase, Google Sign-In, Google Drive, Google Play and ML Kit)
- Stripe and Wompi (card payments)
- DeepSeek (reading scanned text)
- Cloudflare (this website)
When you send a receipt by WhatsApp, Platata opens WhatsApp on your phone; what you send is between you and the person who receives it. We may also share information if the law requires it, or as part of a merger or sale of the company, under this same policy.
How long we keep it
We keep your information while your account is active. When you delete your account or ask us to, we delete it within 30 days, except records the law requires us to keep, such as payment records. Backups in your Google Drive are yours to keep or delete.
Your rights and choices
You can ask to see, correct, update or delete your information, and to withdraw your consent, by writing to hello@platata.app. You can also delete your account in the app. You can refuse camera or location access in your phone’s settings; the features that need them will not work.
Colombia. Under Ley 1581 de 2012 you can know, update, rectify and delete your data, revoke your authorization and file a complaint with the Superintendencia de Industria y Comercio. We answer questions within 10 business days and claims within 15 business days.
Brazil, Canada, the United States and other countries. You have the rights your local law gives you, including those under Brazil’s LGPD, Canada’s PIPEDA and US state privacy laws. Write to us and we will help.
Security
Information travels encrypted, access is limited, and the app can be locked with a PIN or fingerprint. No system is perfectly secure, so please keep your phone and Google account protected.
Children
Platata is a tool for businesses and is not meant for children. We do not knowingly collect information from children.
This website
platata.app does not use advertising or tracking cookies. It remembers your light or dark choice in your browser, and Cloudflare Web Analytics counts visits without cookies.
Changes
If we change this policy, we will post the new version here with a new date, and tell you in the app when the change is important.
Contact
Norv Inc · hello@platata.app