Privacy

Last updated 16 October 2026

Who this is for

OAM is operations software that businesses use to run hotels, guesthouses, restaurants and cafés. It includes the web app and the OAM Station app for shared devices such as tills and kitchen screens. This notice covers the OAM service and the OAM Station app.

Each business that uses OAM decides what it records about its guests, customers and staff, and is responsible for that information. OAM keeps and processes it on the business’s behalf, only to provide the service.

What OAM keeps

• Accounts: the name and email address of each person who signs in to OAM, their roles, and when they signed in.
• The business’s records: bookings, guests, orders, payments, stock, rosters and the other records the business enters. Card numbers are never entered into OAM; a card payment records its amount and, if typed, the card slip number.
• Devices: for each paired device, its name, model, platform and the public half of its key, and when it was last seen.
• Logs: requests and errors, kept for a limited time to keep the service running and secure.

The OAM Station app

• A manager pairs the device with a one-time code. The device makes its own key, which never leaves it (on iPhone and iPad it is held in the Secure Enclave); only the public half is sent.
• Staff unlock the device with their PIN. The PIN is checked by the business’s OAM service. To unlock while offline, the device keeps a one-way check value made from each PIN, never the PIN itself.
• So the till keeps working offline, the device keeps a copy of the business’s menu, prices, tables, staff names and roles, and the orders and payments made on it until OAM has received them.
• The app has no advertising, no analytics and no tracking, and sends nothing to anyone but the business’s OAM service.
• When a device is unpaired or its pairing is revoked, the app deletes everything it kept for that business.

What OAM does not do

• OAM does not sell information, show advertising or track people across other apps and websites.
• OAM shares information only with the providers that run the service (hosting, email delivery and backups), under contract and only for that purpose, or where the law requires it.

Security and keeping

Everything travels over encrypted connections. Each business’s records are kept apart from every other business’s. Records are kept while the business uses OAM, and deleted after it leaves, unless the law requires them to be kept longer.

Your choices

To see, correct or delete information about you, ask the business you work for or deal with: it controls its records in OAM and can make the change, and OAM helps it do so. A person who signs in to OAM can ask the business’s administrator to close their account.

Changes

When this notice changes, the date at the top changes with it.