Run your jewelry store with speed and control
POS, inventory, shifts, offline mode, daily backups (cloud + local), Shopify-ready listings, CRM + loyalty — protected by enterprise-grade security guardrails.
Everything you need to operate daily
Clean workflows for sales, inventory, staff, locations — designed to stay fast under pressure.
Quick item search, barcode flows, receipts, and shift-based operations.
- Non-blocking printing with safe fallback
- Designed for speed at the counter
- Audit-friendly sale records
Card/cash flows that are stable and readable inside modals and settings.
- Hardened dropdowns & popovers
- Safer UX for fast checkout
- Shift reports and exports
Items, images, stock counts, transfers, and clean data for future commerce.
- Multi-image uploads in batches
- Shopify-compatible data model
- Guardrails against abuse
Work through temporary connectivity issues with robust syncing.
- Resilient workflows
- Safe recovery patterns
A global sidebar structure that keeps every module where staff expects it.
- Core, Operations, Finance, System, Admin
- Cleaner settings & faster access
Attach customers to sales, earn/redeem points, and track a clean ledger.
- Server-calculated points (no frontend trust)
- Ledger entries for auditability
- Secure search without leaking PII
Store PC agent for printing & local backups
A hardened local agent designed for production environments.
Best-effort printing via the Store Ops Agent — no double printing, graceful fallback.
- Receipt dedupe by receiptId
- Sequential print queue (stable ESC/POS TCP)
- No customer PII in print payload
Automatic backups after shift close, with robust polling and optional encryption.
- Bounded polling with backoff & timeout
- Optional AES-256-GCM encryption
- Retention cleanup for local files
Hardened uploads using signed POST policies with lifecycle cleanup for tmp objects.
- Upload-time size/type enforcement
- Automatic cleanup of invalid uploads
- Multiple images per item
Export items with images into a Shopify-friendly CSV format.
- Signed image URLs with TTL
- Hard limits to prevent cost abuse
- Designed for future ecommerce
Security guardrails that prevent expensive surprises
Built to withstand abuse, protect data, and reduce cost risk.
Tenant isolation and RBAC enforced server-side — never trusting the client for security decisions.
- JWT claims only for tenantId
- App Check enforcement (prod)
- No client Firestore writes
Transactional rate limits, daily caps, and kill switches for expensive operations.
- Rate limits (minute/hour)
- Daily caps by tenant
- Kill switches for backups/exports/uploads
Runs on localhost only, strict CORS, constant-time auth, safe logging.
- 127.0.0.1 binding
- Constant-time API key comparison
- Request size limits & download caps