Privacy Policy
Effective 2026-10-01. This policy explains what Cash Over Short LLC (“Cash Over Short”) reads, stores and shares when a merchant installs Cash Over Short from the Clover App Market.
Who we are in this relationship
The merchant that installs Cash Over Short is the business (controller) that decides why the data is used. We are the merchant's service provider (processor): we process data only to provide the service to that merchant and on that merchant's instructions. Employees whose transaction records appear in the service should direct questions to their employer, who controls that data; we will assist the employer with any lawful request.
What we read from Clover
- Merchant profile: business name, address (used to determine service availability), currency, time zone.
- Employees: Clover employee ID, display name and role. We do not store employee email addresses, phone numbers, PINs or passwords.
- Transactions: orders, payments, refunds, discounts and cash-drawer events — identifiers, amounts, timestamps, tender type (for example “cash” or “credit card”), device ID and the employee ID attached by Clover.
- Subscription status: whether the merchant's subscription is active and which tier.
We do not read or store customer information. No customer names, contact details, card numbers or loyalty data are requested from Clover or kept by us. We never write to a Clover account.
Why
To apply the merchant's configured rules to the merchant's own records, show results in the merchant's dashboard, send transactional emails the merchant has enabled, keep an unalterable log of alerts, and operate, secure and support the service. We do not use data for advertising, do not sell or share it for cross-context behavioural advertising, do not combine one merchant's data with another's, and do not use it to train models.
Who we share with
Only sub-processors needed to run the service: a cloud hosting provider (application and database, United States), a transactional email provider (to deliver alert and summary emails), and an error-monitoring provider (technical error reports, which are scrubbed of tokens). We share data with authorities only when legally compelled, and where lawful we notify the merchant first. We may transfer data in a merger or sale of the business, under this policy.
Retention
Transaction records and alerts are kept while the app is installed. After uninstall, all records for that merchant are deleted within 13 months (the period exists so that a merchant who reinstalls does not lose history and so that we can respond to legal process). Access tokens are deleted immediately on uninstall. Email logs are kept 13 months.
Security
Clover access tokens are encrypted at rest. Data moves over TLS. Every database query is scoped to a single merchant. Alert records cannot be modified after creation. Secrets are never logged.
Your choices and rights
Merchants can change or remove notification addresses at any time and can uninstall at any time. Every email carries an unsubscribe link that takes effect immediately. Individuals in California, Virginia, Colorado, Connecticut and other states with privacy laws, and in Canada under PIPEDA and provincial laws, may have rights to access, correct or delete personal information; because the merchant controls this data, please contact your employer, who can direct us. You may also contact us at privacy@cashovershort.com and we will pass the request to the merchant and assist.
Canada
Data is stored in the United States. We comply with Canada's Anti-Spam Legislation: every email identifies us, includes a postal address and offers a working unsubscribe honoured without delay. We do not offer the service to merchants located in Quebec at this time.
Children
The service is for businesses and is not directed to children.
Changes; contact
We will post any changes here with a new effective date. Contact: privacy@cashovershort.com, Cash Over Short LLC, Ashburn, Virginia, USA.