Version 1.1 · Effective August 23, 2026 · Last Updated August 23, 2026
This SuperSonic POS Website, Business Contact & Product User Privacy Notice (the “Notice”) describes how MSYM Investments, LLC d/b/a SuperSonic POS (“we,” “our,” or “us”) processes personal information. References to “SuperSonic,” “we,” “us,” or “our” include MSYM Investments, LLC d/b/a SuperSonic POS and its affiliated entities.
This Notice applies to:
This Notice does not apply to our consumer loyalty programs or consumer-facing applications. Consumers who transact at merchants using our point-of-sale systems, receive digital receipts, or participate in the SuperSonic Rewards program are covered by our Consumer Privacy Policy at supersonicpos.com/legal/policies/privacy/consumer.
We and our vendors may obtain personal information through the Site, such as when you request a demo or a quote, subscribe to updates, apply for an account, or fill out a contact form. We and our vendors may also collect personal information automatically through your use of the Site, as described below in the “Cookies and Other Tracking Technologies” section. In some instances, you may be able to choose what information to provide, though we may require certain information from you to enable features on the Site.
The types of personal information we collect about you will vary depending on your interactions with us, but generally include your name, email address, phone number, and account credentials.
How we use underwriting information, and who receives it. We use this information to verify identity and eligibility, to assess credit and risk, to underwrite and board the account, to meet our obligations under anti-money-laundering and customer identification requirements and card network rules, and to detect and prevent fraud. We disclose it to our sponsoring banks and payment processors, to identity verification and sanctions and watchlist screening providers, and to consumer reporting agencies. Where the Merchant Agreement authorizes it, we obtain consumer credit reports on the business and on any principal or guarantor, both during the application and while equipment remains placed, and we report payment history, including delinquencies, to credit bureaus. The customer identification notice presented during onboarding explains the identity verification that federal law requires financial institutions to perform; this Notice describes the categories of information we collect, how we use them, and who receives them.
If you apply for a merchant account. Where a business applies for payment processing or equipment through our onboarding portal, we collect considerably more than contact details from the people involved. For the business, we collect its legal and trading names, federal tax identification number, business structure, date established, addresses, telephone numbers, website, a description of what it sells, and expected processing volumes. For each owner or principal holding twenty-five percent or more of the business, and for any personal guarantor, we collect full name, title, ownership percentage, home address, telephone number, email address, date of birth, and Social Security number, and we may collect a copy of a government-issued identity document. We also collect settlement bank account details, including bank name, routing number, account number, and the name on the account, together with supporting documents such as a voided cheque, bank statements, prior processing statements, or financial statements.
If you use the Products. Where a merchant gives you access to SuperSonic Cloud or a SuperSonic POS application, we also process:
Where we collect personal information from. We collect personal information directly from you; from the merchant that employs or engages you or gives you access to the Products; automatically from your device and from the terminals and applications you use; from our service providers and vendors; from our channel partners, resellers, and referral sources; from consumer reporting agencies, identity verification providers, and sanctions and watchlist screening providers where a business applies for a merchant account; and from publicly and commercially available sources, including business contact data providers.
We may use the personal information we collect about you for various purposes, including to:
We also may use the information we obtain about you in other ways for which we provide notice at the time of collection.
In general, we disclose personal information to certain external parties as follows:
In addition, we may disclose your personal information for any purposes not inconsistent with this Notice, notice provided at the point of collection, or applicable law.
Text messaging opt-in data and consent, and mobile phone numbers collected for SMS purposes, will not be shared with or sold to third parties or affiliates for their own marketing or promotional purposes; this information may be shared only with service providers acting on our behalf to deliver messages.
MarketIQ Analytics Program. Through our SuperSonic POS platform we collect transaction-level, SKU and PLU, product-movement, category, pricing, inventory, offer, and redemption information generated at participating merchant locations. Through our MarketIQ program — owned and operated by us, not by a third party — we may collect, combine, analyse, use, commercialise, license, sell, and disclose that information, and create data products from it. Where our merchant agreement permits it, or where a merchant has activated an enhanced program that requires it, this information may identify the merchant or an individual store, including its business name, address, internal location identifier, program enrolment, offer configuration, and store-level or transaction-level product and promotional performance. We may disclose store lists in order to evaluate or enrol locations in programs, and report identified store participation and performance to brands, manufacturers, suppliers, distributors, consumer packaged goods companies, promotional partners, market-research firms, financial partners, and other data customers. MarketIQ is not designed to identify an individual consumer, cardholder, or employee, and it does not include consumer contact details, loyalty identifiers, full payment card numbers, payment credentials, or sensitive authentication data. Where we use information in aggregated or de-identified form we maintain measures designed to prevent it being re-associated with any individual, we do not attempt to re-identify it except to test our de-identification processes, and we contractually require recipients not to attempt re-identification. Personal information is otherwise handled as described in this Notice.
The merchant decides who has access, what each role can see and do, whether optional features such as point-of-sale recording or timeclock are enabled, how long the merchant keeps its own business records, and how the merchant uses information about its staff. For those purposes we act on the merchant’s instructions as its service provider, and questions about the merchant’s own practices should be directed to the merchant.
We decide, and are independently responsible for, matters including platform security and fraud prevention, authentication and access control, audit logging, our own legal and regulatory compliance, operation and improvement of the Products, and our own communications with you about the Products. For those purposes we act as an independent business, or controller, and this Notice describes what we do.
If we receive a request about information we hold only on a merchant’s behalf, we will handle it as that merchant’s service provider and coordinate with the merchant, so that you have a single point of contact.
We or our vendors may use cookies, web beacons, pixels, local storage, software development kits, and other similar technologies (collectively, “Cookies”) on the Site, our portals, and the Products for various purposes, including to: provide functions, improve performance, personalize your interactions with us, support security and fraud prevention, and analyze how users interact with us. Cookies may collect certain information, including, but not limited to, device identifiers, IP addresses, navigation paths, and the lengths and times of visits.
We and our service providers also use device-recognition technologies, including services provided by Fingerprint, in our merchant onboarding and application flows at crm.supersonicpay.com. These technologies collect device and browser characteristics — such as device type, operating system, browser attributes, and network information — to generate a device identifier used to detect and prevent fraudulent applications, secure accounts, and protect our services. We do not use that identifier for advertising or marketing, and these technologies are not used on our product sign-in screens.
What we use, which providers are involved, why, and the choices available to you are described in our Cookie & Tracking Notice at supersonicpos.com/legal/policies/cookies.
Different web browsers come with their own default Cookie settings, and may allow you to manage, remove, or block Cookies. You can view your browser’s settings for information about these options. Deleting or rejecting Cookies may affect various website features or services.
Some web browsers include “Do Not Track” options that allow users to send signals to websites expressing a preference not to be tracked. There is no common industry standard for responding to these signals, and the Site does not support Do Not Track.
When using the Site, you may come across links or interactive features related to third-party websites and services that we do not operate or control. Your use of these interactive features is voluntary, and we may retain the information that you submit through these features. For example, we may offer an interactive chat feature on the Site to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf. Chats and inquiries submitted through our website or app chat features may be retained and processed by our service providers, and chat transcripts may be kept for future reference.
Accessing and Updating Your Information. Access to the Products is provisioned by the merchant that employs or engages you, and by our onboarding team for merchant owners and administrators — not by self-registration on the Site. Where the Products expose profile settings to your role, you can review and update that information there. Your merchant’s administrator can also correct your account information. For anything you cannot reach yourself, use the request methods below.
Email Communications. You may opt out of marketing emails or manage your subscription preferences for emails from us at any time by using the unsubscribe mechanism within any marketing email we send to you. Even if you opt out, we may still send you non-commercial emails, including account-related information and responses to your requests.
Text Messaging. If you request a demo or provide your phone number through our forms, we may, with your consent, send you recurring marketing and informational text messages about our products, services, and offers, including messages sent using automated technology. Message frequency varies; message and data rates may apply. Reply STOP to opt out or HELP for help. See our Messaging Terms at supersonicpos.com/legal/policies/messaging-terms.
Your Privacy Rights — United States. Several U.S. states give their residents privacy rights. Where a state privacy law applies to you and to us, you may have the right to: know and access the personal information we hold about you and obtain a copy; be informed of the categories of personal information we collect, the categories of sources, our purposes, the categories of third parties to whom we disclose it, and the categories we have sold or shared; correct inaccurate personal information; delete personal information we collected from you, subject to exceptions permitted by law; obtain a portable copy where technically feasible; opt out of the sale or sharing of personal information, including for cross-context behavioral advertising; appeal a decision we make on a request; and be free from discrimination for exercising these rights.
How to submit a request. Use our Privacy Requests page at supersonicpos.com/legal/privacy-requests, email privacy@supersonicpos.com, or call 800-791-8324. We will confirm receipt within ten (10) business days. We act on a request to opt out of the sale or sharing of personal information, or of targeted advertising, within fifteen (15) business days. We respond to all other requests within forty-five (45) days; where reasonably necessary we may extend that period once by a further forty-five (45) days and will notify you before the first period ends.
Verification and authorized agents. We will take reasonable steps to verify your identity before acting on a request; what we ask for depends on the nature of the request and the sensitivity of the information involved. You may use an authorized agent, and we may require written permission signed by you or a valid power of attorney and may verify your identity directly.
Appeals. If we deny your request you may appeal by emailing privacy-appeals@supersonicpos.com with “Appeal” in the subject line. We will respond in writing within forty-five (45) days. If we deny your appeal we will tell you how to contact the Attorney General in your state.
Advertising and analytics choices. To ask us to stop using your personal information for interest-based advertising, or for the sale or sharing of personal information, submit a request as described above and we will act on it. You can also use the browser controls, device settings, and industry opt-out programs described in our Cookie & Tracking Notice, which explains which technologies those controls reach.
Opt-out preference signals. Some browsers and extensions send an automated opt-out preference signal, such as Global Privacy Control. Our websites do not currently detect or respond to those signals. To opt out, use the request methods described above.
We retain personal information for as long as reasonably necessary for the purposes described in this Notice, and then delete or de-identify it. In deciding how long to keep information we consider how long we need it to provide the service, our legal, tax, accounting, card network, and program recordkeeping obligations, the period during which a dispute could arise, and our security and fraud-prevention needs.
We use commercially reasonable measures to protect personal information we obtain through the Site and the Products. However, no method of transmission over the internet and no means of electronic or physical storage is absolutely secure. As such, we cannot guarantee the security of your personal information. You are responsible for maintaining the confidentiality of any credentials used to access your account with us.
If you access the Site or the Products from outside of the United States, please be aware that personal information collected may be transferred to, processed, stored, and used in the United States. Data protection laws in the United States may be different from those of your country of residence, and personal information may be accessible to courts, law enforcement, and authorities under the laws of that country. Where required, we put in place appropriate protections for those transfers and complete the assessments applicable law requires. Your use of the Site or the Products, or provision of any personal information to us, constitutes your consent to the transfer of such personal information to (or from) the United States, and the usage, sharing, storage, or other processing of your information in the United States as set forth in this Notice.
We may change this Notice from time to time. If we update the Notice, we will post the revised Notice on this page and update the version number and the “Last Updated” date at the top of this page. Where required by law we will provide additional notice of material changes. Superseded versions are available on request.
Change: Updated to clarify scope, applicable services, data practices, user choices, and related terms.
Effective: 21 Jul 2026
Change: Website Privacy Notice — first publication of this document. Supersedes the Privacy Policy previously published on our former website.
If you have a question about this Notice or our information practices, you may email us at privacy@supersonicpos.com or call 800-791-8324. You may also write to us at MSYM Investments, LLC d/b/a SuperSonic POS, 5850 W Cypress St, Ste A, Tampa, FL 33607.