Developer terms

These terms are an agreement between you (the developer, and the agency you work for) and Positack (Pty) Ltd, registration number 2026/210756/07, A1 Farm Holm Hill, Beacon Bay, East London, 5241, South Africa (“PosiTack”, “we”).

They cover your developer account, the developer portal, the PosiTack for WordPress plugin, and any PosiTack website key a venue gives you. They sit alongside our general Terms of Service and Privacy Policy; where they differ on something developer-specific, these terms apply.

• Your account is by invitation. It is for one person: do not share your sign-in with colleagues — ask us to invite them instead.
• Keep your password private. Tell us at support@positack.co.za straight away if you think someone else has used your account.
• The details you give us (name, agency, email) must be true and kept up to date.
• Your account lets you read the portal and download the plugin. It does not by itself give you access to any venue's data.

A website key belongs to the venue that created it, not to you. By using one you agree that:

• You use a key only for the website that venue asked you to build, and only while they want you to.
• You never share a key with anyone outside your agency, publish it, put it in a public code repository, or show it in a browser.
• The venue can change or revoke the key at any time, and the website stops working when it does. That is the venue's decision; we will not overrule it.
• If a venue asks you to stop, or your work for them ends, you stop using their key and remove it from any system you control.
• You do not use one venue's key to reach, or try to reach, another venue's information.

If you think a key has leaked, tell the venue and support@positack.co.za at once so it can be rotated.

A site using the plugin can handle diners' personal information: names, email addresses, orders and, if customer accounts are switched on, order history and loyalty balances. Under the Protection of Personal Information Act (POPIA), the venue is the responsible party for that information and you act for the venue as its operator. You agree to:

• Use diners' information only to run the venue's website as the venue instructs, and for nothing else — not for marketing, profiling, resale, or your own lists.
• Keep the website secure: served only over HTTPS, WordPress and its plugins kept up to date, administrator accounts protected with strong passwords.
• Not copy, export or store diners' information outside the website unless the venue asks you to in writing.
• Tell the venue and support@positack.co.za within 72 hours of discovering that diners' information may have been accessed by someone who should not have it, and help both of us respond.
• Delete any diners' information you hold when your work for the venue ends, unless the law requires you to keep it.

The plugin is built so the site key never reaches a browser and a diner's sign-in is kept in a secure cookie. Do not change the plugin in a way that undoes either.

You must not:

• Try to get around a key's permissions, the plugin's request limits, or any other security control.
• Test PosiTack's security (scanning, load testing, probing for weaknesses) without our written permission first. If you find a weakness by accident, tell us privately at support@positack.co.za and do not use it.
• Copy large amounts of menu or venue data for any purpose other than the venue's own website.
• Present yourself or your work as PosiTack, or suggest we endorse you, beyond saying truthfully that you build sites that use PosiTack.
• Change the plugin so that it calculates prices, totals or tips itself. PosiTack prices every order; a website showing a different total from the till misleads diners.

• The PosiTack for WordPress plugin is licensed under the GNU GPL, version 2 or later, like WordPress itself. You may use, study and change its code under that licence.
• The GPL covers the code, not our name or logo. You may say a site “uses PosiTack” or is “powered by PosiTack”; you may not use the PosiTack name or logo in your own product names, domain names or advertising without our permission.
• Keep client sites on the current version of the plugin. Updates can fix security problems, and WordPress offers them automatically.

Card payments are taken by the venue's own payment provider. Diners are sent there to pay and returned to the website afterwards. You must never collect, store or ask for card details on a site that uses the plugin.

• The portal, the plugin and the website-key service are provided free of charge to developers and as they are. We do our best to keep them running, but we give no guarantees of any kind, express or implied — including that they will be available, error-free, secure against every attack, or suitable for a particular purpose. You decide whether they suit your client's needs.
• We may improve or change them. If a change could stop an existing website working, we will give at least 30 days' notice by email or in the portal, except where a change is needed urgently for security.

• You can close your account at any time by emailing support@positack.co.za.
• We may suspend or close your account, with or without notice, if you break these terms, if your account appears to be misused, or if a venue asks us to because of your work for them. Where it is safe to, we will tell you why.
• Closing your account does not switch off a venue's website: the key belongs to the venue. Sections 3, 4, 10 and 11 keep applying after your account ends.

• To the extent the law allows, PosiTack is not liable for any indirect or consequential loss (for example lost profit, lost business, lost data or reputational harm) arising from the portal, the plugin, a website key or these terms.
• Our total liability to you, for everything arising from these terms, is limited to R1,000.
• You are responsible for the websites you build and the work you do for venues. You will cover PosiTack, its directors and staff against any loss, damage, fine, claim or reasonable legal cost that arises because you broke these terms, because of how you built or ran a website, or because of a claim by a venue or diner about your work.
• Nothing in these terms limits liability that the law does not allow to be limited.

Keep private anything about PosiTack or a venue that is not public and that you learn through this work, such as website keys, unreleased features, or a venue's business information. This does not stop you sharing what is already public or what the law requires you to disclose.

We may update these terms. Each version is dated. When the terms change, the portal asks you to accept the new version before you continue; until you do, you can still sign in but cannot rely on the old version for new work. If you do not accept, you can close your account.

• These terms are governed by the law of the Republic of South Africa, regardless of where you are.
• Disputes are handled as in clause 21 of the main Terms of Service: write to legal@positack.co.za first, and if the dispute is not resolved either party may go to court. Each party consents under section 45 of the Magistrates' Courts Act 32 of 1944 to the jurisdiction of the Magistrates' Court for the district of East London for any claim arising from these terms, even if the amount would otherwise exceed that court's jurisdiction, without limiting either party's right to approach the High Court of South Africa, Eastern Cape Division. Either party may approach a court at any time for urgent relief.
• Questions, notices and security reports: support@positack.co.za, or Positack (Pty) Ltd, A1 Farm Holm Hill, Beacon Bay, East London, 5241.

• You are an independent business. You are not PosiTack's employee, agent, partner or representative, and you cannot make promises or agreements on our behalf.
• Your agreement with a venue — what you build, what you charge, when you deliver — is between you and the venue. PosiTack is not part of it and is not responsible for your work or your fees.
• If you send us suggestions or feedback, we may use them freely, without paying you or crediting you.

• These terms, with the documents named in section 1, are the whole agreement between you and PosiTack about developer access. They replace anything said or written earlier about it.
• If a court finds part of these terms invalid, the rest still applies.
• If we do not enforce a right straight away, we have not given it up.
• You may not transfer your account or these terms to anyone else. We may transfer them to a company that takes over the PosiTack business.
• We may send notices to the email address on your account; they count as received the next business day.