Compliance & Security

MerchantOS is built to keep payment data safe and demos honest.

General Compliance Statement

MerchantOS maintains minimal PCI scope by not storing card data, uses industry-standard tokenization, and provides a demo environment with synthetic data only.

Data Handling & Privacy

MerchantOS does not store, process, or retain merchant card numbers or sensitive cardholder data on its servers.

All payment data is tokenized through a PCI-compliant third-party gateway at the point of entry. The raw card data is exchanged directly between the merchant and the gateway — MerchantOS only receives and stores a non-sensitive token reference.

Because card data never resides on MerchantOS servers, our platform maintains a minimal PCI compliance footprint. All data in transit is protected with industry-standard TLS encryption, ensuring your information is securely transmitted end to end.

POS Demo Launcher

The POS Demo Launcher uses synthetic, test data only. No real customer or merchant data is used in the demo environment.

The demo renders POS features for illustration purposes only and does not replicate any proprietary POS system interface, branded workflow, or trademarked screen design.

No data from the demo is exported, stored, or retained after the session ends.

For Educational/Testing Purposes Only

Copyright & Intellectual Property

All content, assets, and features within MerchantOS are either proprietary to MerchantOS or properly licensed for use within the platform.

Third-party content is used only with proper authorization, and attribution is provided where required by the applicable license.

Unauthorized reproduction, redistribution, or use of MerchantOS content is prohibited.