Privacy.
Last updated: September 2026.
Platinum Halo (Pty) Ltd operates the OnPointStack brand, part of OnPoint Group. This page explains what information we collect when you use onpointstack.com or the OnPointPulse mobile app, why we collect it, and what we do with it.
What we collect
We collect only the information you voluntarily submit through this website. That is primarily the contact form: your name, email, optional company name, project description, and the type of work you're asking about.
We also capture standard server-side information — IP address, browser user-agent, and request timestamps — for security, abuse prevention, and site performance purposes.
OnPointPulse mobile app
OnPointPulse is a business mobile application for approved OnPoint operators and managers. The app helps approved users receive POS branch alerts, review branch activity, and manage notification settings.
OnPointPulse collects the minimum information needed to pair and operate an approved device: POS user number or user identifier, branch or site authorization status, a device UUID generated by the app, push notification tokens, app version, device registration status, selected branch, notification preferences, silent-hours settings, and alert read/unread state.
The app may display operational POS alert data such as event type, till, user name, timestamp, and alert details. The app uses the camera only to scan OnPointPulse branch pairing QR codes and does not store photos or videos from QR scanning.
OnPointPulse does not collect precise location, contacts, payment card or bank account details, health data, fitness data, calendar data, audio recordings, SMS messages, email contents, or browsing history.
Why we collect it
We use contact form submissions to respond to your enquiry. We use server logs to secure the site, detect abuse, and improve performance. We use OnPointPulse app information to register and approve devices, deliver operational POS alerts and push notifications, show alert history and activity summaries, save notification preferences, protect branch access, and troubleshoot the service. We do not sell or rent your information to anyone.
Where it is stored
Contact form submissions are stored on our hosting server (Xneelo, South Africa) and emailed to info@onpointstack.com. Server logs are retained for a limited period for security and operational purposes. OnPointPulse data is processed by OnPointPulse hosting infrastructure and mobile push notification providers used to operate the app.
Cookies and tracking
We use a single session cookie named OPSSESS to maintain authenticated sessions for the DEVGRU area and to protect forms against cross-site request forgery. We do not use advertising cookies or third-party tracking on this site.
DEVGRU area
The DEVGRU section of this site is a restricted area for authorised internal testers. Access is password-protected and session-based. Downloads from that area are logged (timestamp, IP address, and filename) for security and audit purposes.
Your rights
You can ask us at any time to confirm what information we hold about you, correct it, or delete it. OnPointPulse users can also request device removal or branch access changes. Write to info@onpointstack.com and we'll respond within a reasonable timeframe.
Changes to this policy
We may update this policy from time to time. The current version and its last-updated date are shown at the top of this page.