Privacy

Last updated: 11.10.2026

Website

The website uses no analytics or advertising services and does not track visitors. Cookies are kept for two purposes only: to remember the chosen theme (light or dark) and — once you sign in to the customer or tester account — to keep that session; there are no others. Like any website, the server keeps a technical log (IP address, request time) for security and troubleshooting.

The name, phone, email, company name and message you enter in the request form are stored on VICO’s server and used only to contact you and to arrange the service. The IP address is stored to limit abuse of the form.

The getting started form also stores the store type, register count and current software to prepare installation. Unsuccessful help searches store the search phrase, language, count and last search time so we can improve the guides. The IP address is used to limit request frequency.

VICO ONE

Store data — sales, stock, staff, suppliers — belongs to the store, stays on the store’s computers and is not sent to VICO’s servers without the store’s permission. Exporting the data is always available, including when a plan is unpaid.

The app connects to the internet only in these cases:

  • Update checks — every 6 hours. Only the version, computer type, number of terminals and computer ID are sent. Updates can be switched off in settings;
  • Exchange rates — from the National Bank of Georgia;
  • rs.ge waybills — if the store turns this feature on;
  • VICloud backup — only if the store owner turns it on (below);
  • The day’s figures on the owner’s phone — only if the store owner turns it on (below).

Licence

The licence code is checked offline inside the app — no internet and no VICO server are needed for it, and nothing about the plan is added to the update check. VICO’s server keeps the customer’s name, contact details, plan, licences and payments. No card or bank details are stored by VICO.

The licence order form stores the shop name and phone you enter, the chosen options, the number of computers, the period and the amount on VICO’s server — to issue the invoice and the licence. The IP address is stored to limit abuse of the form. The order button in the app only opens the browser: if you already have a licence, the address carries its number — nothing else is passed from the app.

Customer account

Access to the customer account is opened by VICO — there is no sign-up. It stores the sign-in email, the name (if given), an irreversible hash of the password, the last sign-in time and the live sessions (IP address, browser description and the time of the last activity), used only for signing in and for security. The account shows your own plan, licences, invoices, payments and backup history. Payment is by bank transfer — VICO neither receives nor stores card details.

Testers

Tester accounts are created by VICO — there is no sign-up. They store the email, name, an irreversible hash of the password, the last sign-in time and the live sessions (IP address, browser description and the time of the last activity), and the tester’s reports: the verdict, the description, the app version, a description of the computer and the uploaded screenshots. Screenshots are re-encoded (EXIF and location removed) and never published — only the report’s author and VICO’s administrators can see them. A report may carry other files too — a log, an archive or a screen recording; these are kept exactly as sent (content and metadata unchanged) and, like the screenshots, are seen only by the report’s author and VICO’s administrators. The time a tester downloaded a task’s build is recorded as well. A tester cannot see other testers’ reports. When e-mail notifications are switched on, a tester receives a message about a new task or a report sent back — carrying only the task’s title and a link, never a password or the report’s content. Test builds are for testers only: they are never offered as updates, and only a tester given a task with that build can download it.

VICloud backup

  • Only the owner can turn it on, with the administrator password and a separate consent.
  • The database copy is encrypted on the store’s computer (AES-256) with a key derived from the owner’s password, and only then uploaded. VICO’s server cannot read what is inside.
  • The server keeps each copy’s size, date and kind (automatic or manual) — for the backup history the store sees in the app. Copies are thinned with age: daily for the last fortnight, then one a week, then one a month, reaching back about half a year.
  • The store can delete any copy from the app. It leaves the history at once, and its file is removed from the server within 14 days — long enough for a deletion made by mistake to be undone.
  • When a plan is unpaid, new copies may be paused, but viewing and downloading the copies already stored stays available.

VICO Mini — the day’s figures on the owner’s phone

  • Only the owner can turn it on, with the administrator password, after the app has shown what is sent. Nothing is sent until a phone has been added.
  • About once a minute the store’s computer sends a short summary: sales for the day, the week and the month, the number of receipts and the average receipt, profit, the totals paid in cash and by card, refunds and cancelled receipts, trade by the hour and sales by day for the last thirty days, the day’s best-selling products, products running low (a list and a count), and the open shifts (the cashier’s name and the opening time). Individual receipts, customers, the price list and copies of the database are not sent.
  • The summary is encrypted on the store’s computer (AES-256). The key is made on that computer and handed to the phone in a QR code — it never reaches VICO’s server, so the server cannot read what it stores.
  • The server keeps only the latest summary (each one replaces the last), the time it arrived, and the list of connected phones: the name the owner gave each, when it was added and last used, and an irreversible hash of its access code.
  • The phone keeps the access code and the key in the browser’s storage; they can be removed from the page itself. Whoever holds the QR code can see the figures — the owner can disconnect any phone from the app.
  • Turning it off makes the app ask the server to delete the summary and the list of phones. When a plan is unpaid no new summaries are sent; the last one stored stays visible on the phone until the owner turns the feature off.