Last updated 31 October 2026

Privacy policy

This page says what Symphony collects on this website, in the Symphony POS app, in Symphony Office and in the Symphony Office app, why, who sees it, how long it is kept and how to ask for it to be changed or removed.

Who we are

Symphony is run by Symphony POS Co., Ltd., Maret, Ko Samui District, Surat Thani 84310, Thailand. You can reach us at hello@symphony-pos.com.

What we collect on this website

The only thing you can send us on this website is the “Sign up” form. It asks for:

• your name, your restaurant or business name and your email address (needed);
• the kind of business, the number of branches, the city and the country (optional; they start your company’s profile when you finish signing up);
• a short message (optional).

To stop automated spam we also keep a scrambled code made from your internet address (we never keep the address itself) and the name of your browser. These two things are used for nothing else.

We do not use advertising trackers or analytics on this website, and it sets only two cookies: a short-lived one that helps you correct your email address after sending the form, and, if you change the currency beside the prices, one that keeps that choice for a year (see the cookie policy).

What a business keeps in Symphony

A restaurant, café or other business that uses Symphony keeps its own records in the Symphony POS app (the POS), Symphony Office and the Symphony Office app. Depending on what the business uses, they are:

• Its staff: each person’s name and role, and the PIN they sign in to the POS with; each Symphony Office sign-in’s email address and password. PINs and passwords are kept only as scrambled codes (hashes), never as they were typed.
• Staff and rota, where the business uses it: what the business or the employee adds to an employee’s record, such as phone, email, LINE, address, date of birth, nationality, ID card or passport, work permit and visa numbers, bank details and a bank QR code picture, and someone to contact in an emergency; their position, pay, rota, leave and absence.
• Bookings: the guest’s name and phone number, an email address if they give one, the number of guests and any note; and, if the business asks for a deposit, the photo or PDF of the guest’s payment slip.
• Bills and sales: what was ordered and how it was paid, discounts, refunds, tips, the cash drawer and which member of staff did each thing.
• Photos: of dishes, drinks and ingredients for the menu, and of QR payment slips taken at the POS. Payment slips and bank QR codes are kept privately, as they show bank details.
• The menu and the kitchen: dishes, drinks, recipes, suppliers, ingredients, stock counts and orders.

A photo or PDF of a supplier’s invoice, menu or price list is read with Claude only when someone chooses to (see Anthropic below), and the file itself is not kept.

These records are used only to run that business’s POS and back office: to show them to the business’s own people, to work out its reports and to send the emails it has set up.

Whose records they are

The business is in charge of its own staff’s and guests’ details: it decides what goes into Symphony and which of its people can see it. Symphony keeps and handles those details for the business, to provide its POS and back office.

Usage figures in Symphony Office and the apps

Inside Symphony Office, the Symphony Office app and the Symphony POS app (not on this website) we count how the screens and features are used, with a service called PostHog, so we can see what to improve. Each count names the company and the person by a number only, never by name, email or phone number, and never includes guests or what a bill holds. In Symphony Office on the web we may also record how a screen was used, with every word and every typed value hidden; the apps record no screens. The figures are kept in PostHog’s European Union data centre. Office keeps them in the browser’s storage, not in a cookie, and does not count a browser set to “Do Not Track”. The owner of a restaurant can turn this off for the whole business in Office: Settings, Logo and appearance, “Share anonymous usage with Symphony to improve it”.

Why we use it

We use a website request to read it, to reply to you by email, and, if we agree to work together, to set up your restaurant’s sign-in. A business’s records are used only as described above. We do not sell anyone’s details or use them for anything unrelated.

Who sees it

Website requests: the people at Symphony who handle them. A business’s records: the people the business gives a sign-in to, each seeing what their role allows, and the people at Symphony who set up and look after the account. The services below handle data for us, only for the jobs listed.

Services that handle data for us

• Vercel runs this website, Symphony Office and the POS server, and Neon keeps their databases, both in Singapore. Photos and files are kept in Vercel’s file storage.
• Anthropic (its AI, Claude) reads a photo or PDF of a menu, a supplier’s invoice or a price list, but only when someone in Symphony Office or the Symphony Office app chooses to read it with Claude. Claude sends back the dishes, drinks or prices it finds, which the person checks before anything is saved. We do not keep the file.
• PostHog, in its European Union data centre, keeps the usage figures described above.
• Resend sends Symphony’s emails, such as the welcome email, PIN resets, booking emails and the end-of-day drawer report, where email is set up.

How long we keep it

Website requests we decline, or that turn out to be spam, are deleted after 90 days. A business’s records are kept for as long as it uses Symphony. A branch or a business that is archived keeps its records, so it can be brought back. When a business asks for its account to be deleted, Symphony deletes the account and its records within 7 days, apart from the tax records the law asks us to keep, which are kept for as long as the law requires.

Your rights

Under Thailand’s Personal Data Protection Act you can ask to see the details we hold about you, to have them corrected or deleted, to object to how we use them, and to complain to the Personal Data Protection Committee.

• Staff and guests of a business: ask the business first, as it is in charge of your details and can correct or remove them in Symphony Office. You can also write to us at hello@symphony-pos.com.
• A business owner: ask for the whole account and its records to be deleted in the Symphony POS app (Settings, Business, Request account deletion), in the Symphony Office app (Settings, Your account, Delete this account) or by writing to hello@symphony-pos.com.
• Anyone else: write to hello@symphony-pos.com.

We will answer within 30 days.

Changes

If we change this page we will change the date at the top.