OnaPOS Waiter is a tool for restaurant staff. It is not a consumer app, it contains no advertising, and it does not track you across other apps or websites.
OnaPOS is operated by Finis Ventures LLC ("OnaPOS", "we").
If you are a member of restaurant staff and want to exercise a right over your data, you can contact your employer (the restaurant) or us directly — see section 9.
| Data | Why |
|---|---|
| Staff account — name, work email, job role, and a one-way hashed password and hashed 4-digit unlock PIN | To sign you in, to keep a shared restaurant device locked between users, and to attribute each action (who took an order, who closed a tab) as required for accountability and tax records. |
| Operational records you enter — table and tab contents, order lines, number of covers, discounts and their reason, tender type (cash / card / other), voids, shift clock-in and clock-out times | To run the dining room and produce the restaurant's sales, cash and staffing reports. |
| Fiscal records — simplified invoices, hash-chained per restaurant | Required by Spanish invoicing law. These records are immutable by design: a correction is issued as a void plus a new document, never by rewriting history. |
| Push notification token — the device token issued by Apple or Google, plus your interface language | To deliver floor signals to the right device in the right language (for example "table calls waiter", "bill requested"). |
| Diagnostic logs — timestamps, error messages, request identifiers | To keep the service reliable and to investigate faults. |
When a guest orders through the connected Ona ordering channel, OnaPOS Waiter shows restaurant staff a masked contact number only. The full number is never displayed in the waiter app or the manager console.
Each permission is requested only when you first use the feature that needs it, and the app works without granting them:
Data is stored on Amazon Web Services in the EU (Ireland, eu-west-1) region.
Databases are encrypted at rest and all traffic between the app and our servers uses TLS. Passwords and unlock
PINs are stored only as salted one-way hashes — they cannot be read back by us or by anyone else.
We do not sell personal data and we do not share it for advertising. We use a small number of processors strictly to deliver the service:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, database and file storage (EU region) |
| Apple (APNs) / Google (Firebase Cloud Messaging) | Delivery of push notifications to your device |
| Vercel | Hosting of the browser version of the app and of this website |
| Email delivery provider | Transactional email such as password resets |
We may also disclose data where we are legally required to — for example to the Spanish tax authority in relation to invoicing records.
If you are in the EU or the UK, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to receive a copy in a portable format. You may also lodge a complaint with your local data protection authority (in Spain, the AEPD).
Write to contact@onapos.com from the email address on the account, or ask your restaurant manager to remove your staff account. We will action a deletion request within 30 days and confirm when it is done.
One legal exception: invoices already issued cannot be erased, because Spanish tax law requires them to be retained and their integrity chain preserved. Where that applies we restrict the record instead of deleting it, and we tell you exactly what was kept and why.
OnaPOS Waiter is a workplace tool intended for restaurant staff. It is not directed at children and we do not knowingly collect data from children.
Questions, requests or complaints about privacy:
contact@onapos.com
Finis Ventures LLC
If we change this policy we will update the "Last updated" date above, and for material changes we will notify restaurant administrators by email.