Privacy

Website

The website uses no analytics or advertising services and does not track visitors. Cookies are kept for two purposes only: to remember the chosen theme (light or dark) and — once you sign in to the customer or tester account — to keep that session; there are no others. Like any website, the server keeps a technical log (IP address, request time) for security and troubleshooting.

The name, phone, email, company name and message you enter in the request form are stored on VICO’s server and used only to contact you and to arrange the service. The IP address is stored to limit abuse of the form.

The getting started form also stores the store type, register count and current software to prepare installation. Unsuccessful help searches store the search phrase, language, count and last search time so we can improve the guides. The IP address is used to limit request frequency.

VICO ONE

Store data — sales, stock, staff, suppliers — belongs to the store, stays on the store’s computers and is not sent to VICO’s servers without the store’s permission. Exporting the data is always available, including when a plan is unpaid.

The app connects to the internet only in these cases:

• Update checks — every 6 hours. Only the version, computer type, number of terminals and computer ID are sent. Updates can be switched off in settings;
• Exchange rates — from the National Bank of Georgia;
• rs.ge waybills — if the store turns this feature on;
• VICloud backup — only if the store owner turns it on (below).

Licence

The licence code is checked offline inside the app — no internet and no VICO server are needed for it, and nothing about the plan is added to the update check. VICO’s server keeps the customer’s name, contact details, plan, licences and payments. No card or bank details are stored by VICO.

Customer account

Access to the customer account is opened by VICO — there is no sign-up. It stores the sign-in email, the name (if given), an irreversible hash of the password, the last sign-in time and the live sessions (IP address, browser description and the time of the last activity), used only for signing in and for security. The account shows your own plan, licences, invoices, payments and backup history. Payment is by bank transfer — VICO neither receives nor stores card details.

Testers

Tester accounts are created by VICO — there is no sign-up. They store the email, name, an irreversible hash of the password, the last sign-in time and the live sessions (IP address, browser description and the time of the last activity), and the tester’s reports: the verdict, the description, the app version, a description of the computer and the uploaded screenshots. Screenshots are re-encoded (EXIF and location removed) and never published — only the report’s author and VICO’s administrators can see them. A report may carry other files too — a log, an archive or a screen recording; these are kept exactly as sent (content and metadata unchanged) and, like the screenshots, are seen only by the report’s author and VICO’s administrators. The time a tester downloaded a task’s build is recorded as well. A tester cannot see other testers’ reports. When e-mail notifications are switched on, a tester receives a message about a new task or a report sent back — carrying only the task’s title and a link, never a password or the report’s content. Test builds are for testers only: they are never offered as updates, and only a tester given a task with that build can download it.

VICloud backup

• Only the owner can turn it on, with the administrator password and a separate consent.
• The database copy is encrypted on the store’s computer (AES-256) with a key derived from the owner’s password, and only then uploaded. VICO’s server cannot read what is inside.
• The server keeps each copy’s size, date and kind (automatic or manual) — for the backup history the store sees in the app. Copies are thinned with age: daily for the last fortnight, then one a week, then one a month, reaching back about half a year.
• The store can delete any copy from the app. It leaves the history at once, and its file is removed from the server within 14 days — long enough for a deletion made by mistake to be undone.
• When a plan is unpaid, new copies may be paused, but viewing and downloading the copies already stored stays available.