1. Introduction

This Cookie Policy explains how Invoco uses cookies and similar tracking technologies on our Restaurant POS service at https://pos.invoco.org.

By using the Service, you consent to our use of cookies as described in this Policy.

2. What Are Cookies?

Cookies are small text files stored on your device by your web browser. They help websites remember information about your visit, such as your login status and preferences.

Types of Cookies:

Session Cookies: Temporary cookies deleted when you close your browser
Persistent Cookies: Stored on your device until they expire or you delete them
First-Party Cookies: Set by Invoco directly
Third-Party Cookies: Set by external services like Cloudflare or Stripe

3. Why We Use Cookies

We use cookies to:

Keep you logged in — Remember your session so you don't have to sign in repeatedly
Remember your preferences — Language, layout, and settings
Understand how you use the Service — Analyze page views, clicks, and usage patterns
Improve performance — Optimize loading times and functionality
Protect against abuse — Detect and prevent fraud, spam, and security threats

4. Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the Service to work. You cannot disable them without breaking core functionality.

Authentication Session Cookie

Keeps you logged in while you use the Service. Without this, you'd have to sign in on every page.

Provider: Supabase | Expiry: When you close your browser

Refresh Token

Allows you to stay logged in for up to 30 days without re-entering your password.

Provider: Supabase | Expiry: 30 days

Bot Protection

Protects the Service from automated attacks, spam, and malicious bots. Ensures only real humans can access your data.

Provider: Cloudflare | Expiry: 30 minutes

Analytics Cookies

These cookies help us understand how you use the Service so we can improve it. You can opt-out via the cookie banner or your browser settings.

Usage Analytics

Tracks which pages you visit, what you click, and how long you stay. Helps us identify popular features and fix bugs.

Provider: Invoco (first-party) | Expiry: 12 months

Web Traffic Analytics

Monitors website performance, load times, and traffic patterns. Helps us optimize speed and reliability.

Provider: Cloudflare | Expiry: 12 months

Functional Cookies

These cookies remember your preferences to make your experience better. Optional but recommended.

User Preferences

Remembers your settings like language, theme, and dashboard layout. Saves you from reconfiguring every time you visit.

Provider: Invoco (first-party) | Expiry: 12 months

5. Third-Party Services

We use trusted third-party services that may set their own cookies:

Cloudflare

CDN, security, and analytics

View Cloudflare Privacy Policy →

Stripe

Payment processing (only on checkout pages)

View Stripe Privacy Policy →

Supabase

Database hosting and authentication

View Supabase Privacy Policy →

6. Managing Cookies

Cookie Consent Banner

When you first visit the Service, you'll see a cookie consent banner with two options:

Accept All: Allow all cookies (strictly necessary + analytics + functional)
Essential Only: Only allow strictly necessary cookies (Service will still work, but we won't track analytics)

Your choice is saved and remembered on future visits.

Browser Settings

You can also manage cookies directly in your browser:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy
Edge: Settings → Cookies and site permissions

Note: Disabling strictly necessary cookies will prevent the Service from working properly. You won't be able to log in or use core features.

7. Do Not Track (DNT)

We respect the "Do Not Track" (DNT) browser setting. If DNT is enabled, we will not set analytics cookies. Strictly necessary cookies will still be used to ensure the Service functions.

8. Impact of Disabling Cookies

Cookie Type	Impact if Disabled
Strictly Necessary	Service will not work (cannot log in)
Analytics	Service works, but we cannot improve based on usage data
Functional	Service works, but preferences are not saved

9. Cookie Lifespan

Cookies are automatically deleted after their expiry period. You can manually delete cookies at any time via your browser settings.

10. Updates to This Policy

We may update this Policy periodically. Changes will be reflected in the "Last Updated" date at the top. Continued use of the Service after changes constitutes acceptance of the updated Policy.

11. Contact Us

For questions about cookies or to exercise your rights, contact:

Invoco
Email: [email protected]
Website: https://pos.invoco.org