Version 1.1 · Effective August 23, 2026 · Last Updated August 23, 2026
This Notice replaces version 1.0, the Cookie Policy dated July 21, 2026.
This Notice explains how MSYM Investments, LLC d/b/a SuperSonic POS (“SuperSonic,” “we,” “us,” “our”) uses cookies and similar technologies on our websites, our business portals, and our applications.
It supplements our Website, Business Contact & Product User Privacy Notice and our Consumer Privacy Policy.
What these technologies are. Cookies are small data files placed on your device when you visit a website. Session cookies expire when you close your browser; persistent cookies remain until they expire or you delete them. First-party cookies are set by us; third-party cookies are set by another company through our site. We also use technologies that are not cookies, described in Section 3.
Required for our sites and applications to work — session management, load balancing, authentication, access control, and security.
These cannot be switched off through a preference control.
These technologies help us understand how our sites and applications are found and used, measure performance, identify errors, and improve them.
Google Tag Manager
Provider: Google
Purpose: Loads and manages the technologies listed in this Notice.
Google Analytics 4
Provider: Google
Purpose: Website usage and performance analytics.
Cloudflare Analytics
Provider: Cloudflare
Purpose: Aggregate site performance and traffic analytics.
Ahrefs Analytics
Provider: Ahrefs
Purpose: Search visibility and site analytics.
Segment
Provider: Twilio Segment
Purpose: Event collection and routing for our applications.
Amplitude
Provider: Amplitude
Purpose: Product usage analytics for our applications.
These technologies are used to measure our marketing campaigns and to show you advertising about our products on other platforms.
These technologies may involve the sharing of personal information with advertising platforms for cross-context behavioral advertising. You may exercise choices as described in Section 4.
Google Ads and Google Marketing Platform
Provider: Google
Purpose: Advertising measurement, conversion tracking, and remarketing.
Meta Pixel
Provider: Meta
Purpose: Advertising measurement and audience building.
Vibe
Provider: Vibe
Purpose: Connected-television advertising measurement.
Intellimize
Provider: Intellimize (Webflow)
Purpose: Tests and personalises page content and layout.
Business visitor identification
Provider: Business visitor identification providers
Purpose: Uses IP address, device and network signals, and matched business-profile data to identify business visitors to our websites. These services may provide us with a business email address, job title, employer, professional profile, approximate location, the pages you viewed, timestamps, and how you reached our site, for business-to-business marketing and sales outreach. They are used on our business-facing websites and are not used in connection with consumer transactions at merchant locations.
Fingerprint
Provider: FingerprintJS
Purpose: Used in our merchant onboarding and application flows at crm.supersonicpay.com. Collects device and browser characteristics — such as device type, operating system, browser attributes, and network information — to generate a device identifier used to detect and prevent fraudulent applications, secure accounts, and protect our services. It is not used on our public product sign-in screens.
We use this technology for fraud prevention and security only. We do not use the identifier it generates for advertising, marketing, or audience building.
Because it protects the integrity of our application process, it continues to operate when you exercise the advertising choices described in Section 4.
Intercom
Provider: Intercom
Purpose: In-product and website messaging and support. Chat content and transcripts may be retained.
HubSpot
Provider: HubSpot
Purpose: Marketing and sales forms. Loads when you interact with a form rather than on page load.
Segment, Amplitude, Google Analytics, and Intercom load on the sign-in and account-activation screens of our applications, before authentication, for analytics, security, and support purposes. Advertising technologies do not load on those screens.
Pixels and web beacons. Small transparent images embedded in web pages and HTML emails that record whether a page was viewed or an email opened or clicked.
Browser local storage. Including HTML5 local storage, used for similar purposes to cookies with greater capacity. Your browser may allow you to clear it separately from cookies.
Software development kits (SDKs). Third-party code in our mobile applications that provides analytics, support, and security functions and may allow the provider to collect information directly.
Device and network signals. Including IP address, device and browser characteristics, and similar attributes, used for security, fraud prevention, and business visitor identification.
Browser controls. Most browsers let you refuse, restrict, or delete cookies through their settings, and many let you block images so that pixels do not load. If you disable cookies, parts of our sites may not work properly. You need to apply these settings on each browser and device you use.
Industry opt-out programs. You can opt out of interest-based advertising from many participating companies through the Digital Advertising Alliance at aboutads.info/choices and the Network Advertising Initiative at thenai.org/how-to-opt-out. For mobile applications, the DAA offers the AppChoices app, and your device settings allow you to limit the use of your advertising identifier.
Google Analytics. You can opt out of Google Analytics measurement using the browser add-on at tools.google.com/dlpage/gaoptout, and you can adjust your Google advertising settings at myadcenter.google.com.
Do Not Track and opt-out preference signals. Some browsers and extensions send an automated signal such as “Do Not Track” or Global Privacy Control. There is no common industry standard for responding to Do Not Track, and our websites do not currently detect or respond to Do Not Track or to opt-out preference signals including Global Privacy Control. To opt out, use the methods in Section 4.1.
We are not responsible for the effectiveness of any third party’s opt-out mechanism.
How to opt out. To ask us to stop using your personal information for interest-based advertising, or for the sale or sharing of personal information, submit a request through our Privacy Requests page at:
supersonicpos.com/legal/privacy-requests
You may also email privacy@supersonicpos.com or call 800-791-8324.
We will confirm receipt within ten (10) business days and act on the request within fifteen (15) business days.
What we do when you opt out. We stop future uploads of contact identifiers under our control, remove identifiers from uploaded audiences where the platform supports it, and submit suppression or deletion requests to advertising platforms where those are available. Advertising technologies may continue to collect browser or device events unless you block them using the controls described above. We do not currently operate per-browser suppression of advertising tags, so those controls are the only way to stop the technologies loading on your device.
What continues. Strictly necessary technologies described in Section 2.1 continue because our sites cannot function securely without them. The fraud prevention and security technologies described in Section 2.6 continue because they protect the integrity of our application process.
Analytics and performance technologies described in Section 2.2 may also continue; where they do, they are used to measure and improve our own sites and applications, not to build cross-site advertising profiles.
No cookie banner, and no automated signal. We do not use a cookie consent banner, and our websites do not currently detect or respond to automated opt-out preference signals such as Global Privacy Control.
The browser controls, device settings, and industry opt-out programs described in this Section are available to you at any time, and you can contact us using the methods above.
The technologies we use change from time to time, and we update this Notice when they do.
We will post the revised Notice on this page and update the version and dates at the top. Superseded versions are available on request.
For what personal information we collect, how we use it, and the rights available to you, see our Website, Business Contact & Product User Privacy Notice and our Consumer Privacy Policy.
Questions about this Notice may be sent to:
privacy@supersonicpos.com