Privacy Policy

Last updated: May 9, 2026 · Effective: May 9, 2026

Who we are

AMS Backoffice is operated by AMS IT Solutions, Inc. ("AMS," "we," "our," or "us"). AMS Backoffice is a business-to-business product used by convenience store owners and their staff to manage day-to-day operations (point-of-sale data, gas inventory, deliveries, employee payroll, documents, and reporting).

This Privacy Policy explains what information we collect when you use the AMS Backoffice mobile app or web dashboard, why we collect it, who we share it with, and the choices you have.

Sign-in only — no public sign-up

AMS Backoffice does not allow self-service account creation. Accounts are provisioned by store owners or by AMS staff on behalf of a contracted store. If you receive an invitation email, you set your password through a secure link and then sign in to the app or web dashboard with that email and password.

Information we collect

Account information

  • Email address (required) — used as your sign-in identifier and to send you product, security, and support communications.
  • Password — stored as a salted hash by our authentication provider; we never see the plaintext.
  • Profile fields (optional) — first name, last name, username, and department, if you choose to fill them in.

Business operating data

When you use AMS Backoffice, the system stores data about the store you operate or have been granted access to. This includes:

  • Store profile (name, address, phone, business hours).
  • Sales, transaction, and inventory data pulled from your in-store point-of-sale system (POS terminal or equivalent).
  • Fuel deliveries, tank readings, and gas pricing.
  • Vendor and purchase records.
  • Employee profile and payroll data, where you use the payroll module.
  • Documents you upload to Doc Vault (licenses, permits, insurance, contracts, and similar files).
  • Notification preferences and alert history.

This data describes your store's operations rather than personal information about end consumers. AMS does not collect or process payment-card data from customers transacting at your store — card-present transactions are handled by your POS and processor.

Device and usage data

  • Push notification tokens — when you opt in to push notifications, we store the device token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) so we can deliver alerts you've enabled.
  • Server logs — standard request logs (timestamp, IP address, user-agent, route accessed) used to operate and secure the service.
  • Camera and photo library — accessed only when you tap "Take Photo" or "Choose Photo" in Doc Vault to upload a document. We do not run background scans of your camera roll.

What we don't collect

  • No advertising identifiers (IDFA, GAID). AMS Backoffice contains no ads.
  • No third-party analytics SDKs (Google Analytics, Facebook Pixel, Mixpanel, etc.) embedded in the app.
  • No cross-site tracking. We don't share data with ad networks or data brokers.
  • No location tracking. The app does not request or record your device location.

How we use your information

  • To create your account and authenticate your sign-ins.
  • To deliver the core product features — show your sales, fuel, inventory, payroll, and document data; sync with your POS; deliver push notifications you've enabled.
  • To respond to support requests and incident reports.
  • To monitor service health, debug issues, prevent abuse, and protect against unauthorized access.
  • To comply with legal obligations.

We do not use your data to train machine-learning models that are shared across customers, and we do not sell your data.

Service providers (subprocessors)

We use the following third-party services to operate AMS Backoffice. Each is contractually bound to handle data only as needed to provide their service.

ProviderPurpose
Supabase, Inc.Database, authentication, file storage
Vercel Inc.Application hosting, serverless functions, edge network
Verifone Inc.Point-of-sale data integration (read-only)
Apple Push Notification serviceDelivering iOS push notifications
Google (Firebase Cloud Messaging)Delivering Android push notifications
Zoho CorporationOperating the support@amsbackoffice.com inbox
Gusto, Inc.Payroll processing (only for stores that enable Payroll)

Subprocessors may change as we improve the service. Material changes are reflected in the "Last updated" date at the top of this policy.

Data location and security

Your data is stored on servers located in the United States. We use encryption in transit (HTTPS/TLS) and at rest, role-based access controls, row-level security policies in our database, and audit logs on sensitive actions.

No system is perfectly secure. If we become aware of a breach that affects your data, we will notify affected users and the appropriate authorities within the timeframes required by applicable law.

Data retention

We retain your account and store data for as long as your store has an active subscription with AMS, plus a reasonable period afterward to honor tax, accounting, and legal obligations. When a store contract ends, you may request export of your data and deletion of your account.

Server logs are retained for up to 90 days. Backups are retained for up to 30 days and are then overwritten.

Account deletion

You can request deletion of your AMS Backoffice account and associated personal data at any time by emailing support@amsbackoffice.com with the subject line “Account Deletion Request”. Please include your account email address and store name in the message so we can verify your identity and locate your data.

What happens after you request deletion:

  • We acknowledge receipt within 5 business days.
  • We complete deletion within 30 days of verifying your request.
  • We email you to confirm when deletion is complete.

What we delete: your user account (login email, name, phone, profile), your access to all linked stores, documents uploaded to Doc Vault, push-notification tokens, and any other personal identifiers tied to your account.

What we may retain: aggregated, anonymized analytics; transaction records and audit logs for up to 7 years as required by U.S. IRS retention rules for business records; and records required for active or anticipated legal matters. Retained records do not include your name, email, phone, or other personal identifiers.

Your rights and choices

  • Access and correction — most of your data is visible inside the app and editable on your profile or settings screens.
  • Account deletion — because AMS Backoffice is sign-in-only, account deletion is handled by request rather than an in-app destructive button. Email support@amsbackoffice.com from the email address on file. We will confirm the request and complete deletion within 30 days, subject to records we are legally required to retain.
  • Push notifications — you can turn push on or off from the Settings → Notifications screen in the app, or in your device's system settings.
  • Camera and photo access — you can revoke these permissions at any time in your device's system settings; the app will fall back to letting you choose files from elsewhere.

Depending on where you live, you may have additional rights under laws like the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). To exercise those rights, contact us using the information below.

Children

AMS Backoffice is a business tool intended for store owners, managers, and back-office staff. It is not directed to children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. If the changes are material, we'll notify you in the app or by email before they take effect.

Contact us

AMS IT Solutions, Inc.
Email: support@amsbackoffice.com