Privacy Policy
How Zolestio Labs handles information for MiniBook3 — clear about the control plane versus the ledger on your computer.
Effective date: 11 August 2026
This Privacy Policy explains how Zolestio Labs (“Zolestio,” “we,” “us,” or “our”) collects, uses, and shares information when you use MiniBook3 — the marketing website, licence/payment API, Admin console, and Linux-MiniBook3 / Windows-MiniBook3 desktop apps.
We designed MiniBook3 so that Free and Solo shops keep their day-to-day sales ledger on the till by default. This Policy is clear about what stays local and what travels to our control plane.
Who we are
Controller
Zolestio Labs operates MiniBook3. Hosts in production are intended as minibook3.zolestio.com (web) and api-minibook3.zolestio.com (API). Until custom DNS cutover, a GitHub Pages project site may serve the same marketing build.
Contact
Privacy questions and data requests: use the Contact page (topic Privacy) or admin@zolestio.com. Licence and billing operations: operations@zolestio.com.
Information we collect
Licence and account data
When you activate or manage a licence we process email address, installation identifiers, package code (Free / Solo / Enterprise), trial or subscription windows, install index, and status fields needed to prove the till is entitled to run.
Payment metadata
For paid upgrades we create checkout sessions and store payment/order references, amounts, currency, status, and related licence linkage. Card entry happens on PayHere’s hosted pages — we do not store full card PAN or CVV on MiniBook3 servers.
Transactional email
Activation keys, payment notices, and operational messages are sent via Brevo (or a successor email provider). That necessarily includes your email address and message content required for delivery.
Website and Admin technical data
Servers and browsers may log IP address, user agent, timestamps, and request paths for security, debugging, and reliability. Authenticated Admin sessions use credentials and audit events appropriate to operator access.
Support communications
If you email us, we process the content of that correspondence to help you.
Information that stays on your till
Local ledger (Free / Solo default)
Product catalogues, sales, shifts, cashiers, and related POS records for Free and Solo typically remain in the local MiniBook3 database on your Linux or Windows machine. We do not receive a continuous feed of every line item solely because you ring a sale.
Backups you create
Local or folder backups you configure are under your control. If you later enable Enterprise or optional cloud recovery features, additional data may leave the till according to that feature’s settings and Enterprise terms.
Devices
Printer and peripheral configuration stays with the OS and app settings on the machine unless a connected feature explicitly syncs device metadata.
How we use information
Operate MiniBook3
We use control-plane data to activate licences, enforce package entitlements, process upgrades, prevent abuse, and keep Admin operators informed.
Communicate
We send transactional messages required for activation and billing. Marketing email, if any, will honour unsubscribe where required by law.
Improve and secure
We analyse aggregated technical signals to improve reliability and detect fraud, scraping, or attacks against the API and site.
Legal
We may process data to comply with law, respond to lawful requests, or establish/exercise/defend legal claims.
Processors and sharing
PayHere
Payment processing and related fraud tools are provided by PayHere under their terms and privacy notices.
Brevo
Email delivery uses Brevo as a processor acting on our instructions for transactional mail.
Hosting
API, database, and static site hosting providers (for example cloud hosts and GitHub Pages) process infrastructure logs and stored application data as needed to run the service.
No sale of personal data
We do not sell your personal information. We share it with processors who help us run MiniBook3, or when law requires disclosure.
Cookies and similar technologies
Essential use
The marketing site is largely static content. Admin authentication may use browser storage or cookies necessary to keep an operator signed in. We do not load advertising trackers by default. Operators may optionally enable privacy-friendly analytics (for example Plausible) or a first-party event beacon via build configuration — those tools, when enabled, help measure Downloads and pricing CTAs without selling your data to ad networks.
Your controls
You can clear site data in your browser. Blocking all storage may prevent Admin login from persisting.
Retention and security
Retention
Licence, payment, and audit records are retained as long as needed to provide the service, meet accounting/fraud obligations, and resolve disputes — then deleted or anonymised when no longer required, subject to backups and legal holds.
Security
We apply technical and organisational measures appropriate to a licence control plane (access control, transport encryption to our hosts, least-privilege Admin). No method of transmission or storage is perfectly secure; protect your activation keys and machine access.
Your rights
Access and correction
You may request access to or correction of personal data we hold about your licence email by contacting admin@zolestio.com. We may need to verify the request.
Deletion
You may request deletion of account-related personal data, subject to records we must keep for billing, fraud prevention, or law. Deleting cloud licence rows does not erase the local SQLite ledger on your till — uninstall and wipe the machine data separately if required.
Regional rights
Depending on where you live, you may have additional rights (for example under GDPR or similar frameworks). Contact us to exercise them. We will respond within a reasonable period.
International transfers and children
Transfers
Our processors and hosts may store or process data in countries other than yours. Where required, we rely on appropriate safeguards offered by those providers.
Children
MiniBook3 is not directed at children under 16 (or the age of digital consent in your region). We do not knowingly collect personal data from children for MiniBook3 accounts.
Changes and related terms
Policy updates
We may update this Privacy Policy by posting a revised version with a new effective date. Significant changes may also be noted on the site or emailed to licensed contacts when practical.
Terms of Service
Use of MiniBook3 is also governed by the Terms of Service. If there is a conflict about product rules (licences, payments, acceptable use), the Terms control; this Policy controls how personal data is handled.
MiniBook3 is a product of Zolestio Labs. Read the terms of service for the companion document.