Data and privacy
What the app reads, what it stores, what it never touches, where data lives and how long it is kept.
What does the app read from Clover?
Employees (names, IDs, roles), orders (amounts, times, discounts, state, the employee login), payments (amounts, times, tender type, void status, the employee login), refunds and manual refunds, and cash-drawer events. It also reads your business name, address (for the region check), timezone and currency, and your subscription tier.
What does it never read or store?
Customer names, contact details, card numbers or any customer record. Item-level inventory. Anything outside the permissions shown at install. The app holds read-only permissions and cannot create, change, refund, void or delete anything in Clover.
Where is data stored?
In a database hosted in the United States (Virginia) with encryption in transit and at rest. Clover access tokens are additionally encrypted at the application level.
How long is data kept?
Raw transaction rows are kept for 120 days on a rolling basis (the rules need 30). Alerts, with the records they were computed from, are kept while the app is installed and for 13 months after uninstalling, then deleted. You can request deletion sooner by email.
Is my data compared with or shared with other businesses?
No. There is no cross-business feature of any kind, and no data is sold or shared with third parties beyond the email provider used to deliver your alerts.
Who do I contact about privacy?
privacy@cashovershort.com. The Privacy Policy in the app has the full details, including the contact for Canadian merchants.