Vesopa GoVesopa Go privacy policy
Last updated 28 October 2026
Vesopa Go is the iPad, iPhone and Android app for venues that use Vesopa EPOS: staff take orders and payments with it, and everything goes to the venue's Vesopa back office. This page says what the app collects, why, and what you can do about it.
Who is responsible
Vesopa Software Ltd, Baglan, Port Talbot, SA12 7AX, Wales, United Kingdom, registered in England and Wales under company number 17362206 ("Vesopa", "we").
Each venue decides what it records about its own customers and staff, so for that information the venue is the controller and Vesopa processes it on the venue's behalf. For the Vesopa account a manager signs the app in with, Vesopa is the controller.
What the app collects
| Information | Whose | Why |
|---|---|---|
| Name and email address | Venue managers and staff | Signing the device in with a Vesopa account, and naming who took each sale |
| Staff ID, PIN, staff card number, photo | Staff, set by the venue in its back office | Signing on at the device, permissions, the name and photo shown while signed on |
| Name, email, mobile, member number, loyalty points, membership | The venue's customers, when staff add or look them up | Loyalty, memberships, event tickets and emailed receipts |
| Sales, payments, refunds, tips | The venue | Running the venue's tills and its reports |
| A random device ID | The device | Counting the venue's licensed devices and keeping each one's place |
The app does not collect location, contacts, messages, health data or advertising identifiers. It has no advertising and no analytics or tracking software, and nothing is sold.
Card payments
Card payments are taken by the payment provider the venue chooses: Stripe, Dojo or Teya, by Tap to Pay on iPhone or Android, or the venue's card reader. Card numbers and PINs are read by the provider's own certified software and are never seen, collected or stored by Vesopa Go. The provider receives the amount and a payment reference. See Payments and card security.
The camera, NFC and Face ID
The camera is used only to scan QR codes and barcodes (tables, products, gift cards, member cards, event tickets); no picture is kept or sent. NFC reads staff cards and table tags on the device. Face ID or a fingerprint is checked by the device itself; Vesopa never receives it.
Who it is shared with
The venue, through its Vesopa back office; the venue's payment provider (Stripe, Dojo or Teya), for card payments; and our hosting on servers in the UK and the European Union. Nobody else, unless the law requires it.
How long it is kept
As long as the venue keeps its Vesopa account, and as the law requires for financial records (normally six years). A customer can ask the venue, or us, to delete their details at any time.
Your rights
Under UK data protection law you can ask to see, correct, move or delete your information, and object to how it is used.
Delete a Vesopa account: auth.vesopa.com/delete-account
Anything else: support@vesopasoftware.com. We answer within one month.
If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113 · ico.org.uk.
Security
Everything the app sends is encrypted in transit. The device's sign-in is kept in the device's secure storage. Staff only see what their venue's permissions allow.
Changes
If this policy changes we update this page and the date at the top.