Privacy policy

1. Who we are

Harmony is a POS platform run by One Click 2025, a business registered in Novi Pazar, Serbia (full legal name and registration details are in the Contact section). This policy explains which personal data we collect through the harmonypos.io website and through the Harmony apps for iOS, Android, Windows, macOS and Linux, why we collect it, who we share it with and which rights you have.

We process personal data under the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti, "Sl. glasnik RS" br. 87/2018) and, where it applies, the GDPR.

2. Which data we collect

Account and authentication data

Email address, name, role in the business and a hashed password. We use them to identify you, keep the account secure and give you access to the app.

Business data you enter into the app

Orders, items, stock levels, receipts, staff accounts and, in hotels, guest registry data. This data belongs to the business using Harmony; we store and process it so the app can do its job.

Contact and inquiry data

Name, email address, phone number and company name when you fill in the contact form or book a demo.

Technical and usage data

IP address, device and browser type, pages visited and time of visit. Collected through cookies and analytics tools.

3. Why we use the data and on what legal basis

Performance of a contract

Running the app, managing user accounts, support and invoicing.

Legal obligation

Fiscal and accounting records, e-fiscalisation, and for hotels the registration of guests with eTurista and the Ministry of the Interior.

Legitimate interest

Security of the service, abuse prevention, aggregate traffic statistics and answering your inquiries.

Consent

Marketing emails, promotions and marketing cookies. You can withdraw consent at any time, without affecting processing done before the withdrawal.

4. Data in the Harmony apps

The apps published on the App Store and Google Play collect the account data described above. The email address is collected directly from you or from the business that created your account, travels over an encrypted connection and is stored on secured servers.

We do not use app data for advertising, we do not build advertising profiles from it and we do not sell it to anyone. We share it with third parties only when the law requires it.

Deleting your account: write to one of the addresses in the Contact section and we will delete your account and the related data within 30 days. Records we are required by law to keep, such as fiscal receipts, stay for the statutory period.

5. When we are the controller and when the processor

For website visitors, inquiries and our own user accounts, One Click 2025 is the controller.

For data that a business enters into Harmony about its guests, customers and staff, that business is the controller and we act as the processor on its instructions, under a data processing agreement.

6. Who else has access to the data

We do not sell personal data. We share it only with service providers that keep Harmony running, and only to the extent each of them needs:

Hosting and infrastructure

Servers and file storage for the website, the app and installation downloads.

Contact form delivery

Forwarding messages sent through the form to our inbox.

Analytics

Google Analytics, for aggregate statistics on site traffic.

Advertising measurement

Meta Pixel, to measure the results of our ads.

App distribution

Apple App Store and Google Play, each under its own privacy policy.

7. Transfer outside Serbia

Some of these providers process data outside Serbia and the European Union. In that case the transfer rests on standard contractual clauses or another safeguard the law recognises as equivalent.

8. Cookies and analytics

The site uses cookies needed for it to work, plus Google Analytics and Meta Pixel, which load only after you interact with the page. You can block or delete cookies in your browser settings. The site keeps working without them; only the measurement stops.

9. How long we keep the data

Account data

While the account is active, and 30 days after a deletion request.

Fiscal and accounting records

For as long as tax and accounting regulations require.

Contact form inquiries

Up to 24 months after the last contact.

Analytics data

Up to 14 months, in aggregate form.

10. How we protect the data

Encrypted connections (HTTPS/TLS), hashed passwords, access limited to the people who need it for their work, and regular backups. No system is completely secure, but every incident that touches your data is treated seriously and reported within the deadlines the law sets.

11. Your rights

In relation to your personal data you have the right to:

• access — find out which data we process about you and get a copy;
• rectification — correct data that is inaccurate or incomplete;
• erasure — request that we delete your data;
• restriction of processing — while a dispute over accuracy or legal basis is open;
• portability — receive your data in a machine-readable format;
• object — including objection to direct marketing;
• withdraw consent — at any time, for processing based on consent.

12. Complaints

Send a request to one of the addresses in the Contact section and we will reply within 30 days. If you are not satisfied with our reply, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

13. Children

Harmony is a business tool and is not intended for children under 15. We do not knowingly collect their personal data. If you believe a child has sent us data, write to us and we will delete it.

14. Changes to this policy

We can change this policy. Substantive changes are announced on the website, and the date at the top of the page always shows the last update.

15. Contact

For any request about personal data, write to us: