Skip to main content
Partners Last updated: October 2026 7 min read

Guest WiFi for EPOS and POS resellers: sell it with the till

C
CaptiFi Editorial Team
CaptiFi · October 2026
Guest WiFi for EPOS and POS resellers: sell it with the till
15 min
Between CaptiFi's read-only syncs of Toast and Square orders
3
Till systems CaptiFi connects to: Toast and Square natively, SumUp through Zapier
30 min
Window for a till to reverse a reward redemption through CaptiFi's Rewards till API
50
WiFi access codes a till can create in one call to CaptiFi's voucher API

When four people pay on one card, the till records one transaction and at most one name, while all four can pass through the guest WiFi sign-in page. A dealer who already has a monthly support contract with the venue can put guest WiFi on the same invoice.

Why guest WiFi pairs with a till

The till knows what was spent and the WiFi knows who walked in. On CaptiFi, guests answer the marketing question separately from getting online, and those who say no still get on. Put the resulting guest list next to the till data and the venue can see which named guests spend the most and which have stopped coming in, something a dealer can show the owner at renewal.

What the Toast, Square and SumUp connections match

Toast and Square connect natively and match orders to WiFi guests. SumUp connects one way, through Zapier. All three need the venue on Growth or above.

Toast POS

CaptiFi reads Toast orders every 15 minutes, read-only, with Standard API access credentials the restaurant creates in Toast Web (the orders:read, guest.pi:read and restaurants:read scopes). Toast's Standard API Access article says that access "is read-only", comes with Restaurant Management Essentials for US customers, and is a separate subscription for international customers and those on an MSA.

Matching is by email address only. Toast's developer guide says the guest's name, email and phone come with take-out and delivery orders, and that the customer details are empty for in-store orders. CaptiFi's Toast guide counts online and pickup orders among those, and CaptiFi has also seen emails on orders booked through Toast Tables; orders rung up in store at the till reach CaptiFi with no guest email. So most dine-in tabs count as anonymous revenue, and a table-service venue will see a low match rate (tell the owner up front). Matched orders feed the Toast Spend dashboard, with top spenders tiered VIP, Regular or Casual and a lapsed high spender list. The Toast POS integration page and the Toast spend matching guide have the detail.

Square POS

The Square connection runs both ways. Every guest who opts in to marketing is created in the venue's Square Customer Directory, in a group called CaptiFi WiFi Guests, and with Square Loyalty enrolment on, a guest who gives a mobile number and accepts texts is enrolled under it. Orders sync every 15 minutes and match through the customer record attached to the sale at the till, or the email on the order. Order access is read-only: CaptiFi never takes payments or changes prices or orders in Square, and the only things it adds are customer profiles, the CaptiFi WiFi Guests group and, if switched on, Loyalty enrolments (see the Square POS integration page).

SumUp

There is no native CaptiFi to SumUp connector. A Webhooks by Zapier Catch Hook passes each opted-in guest (email, name, venue, visit date and consent) to the venue's email tool or CRM. SumUp sales are not read back, and the venue needs its own Zapier account (limits on the SumUp page).

Integration What it sends or matches Plan
Toast POSReads orders every 15 minutes, read-only. Matches take-out, delivery and Toast Tables orders that carry an email to the WiFi guest with that email; in-store till orders carry noneGrowth and above
Square POSSends opted-in guests to the Square Customer Directory, with optional Square Loyalty enrolment. Matches orders by the sale's customer record or the order emailGrowth and above
SumUp, through ZapierSends opted-in guests to an email tool or CRM. Reads nothing from SumUpGrowth and above, plus the venue's Zapier account
Rewards till APILets a till check and redeem reward codes, reverse a redemption within 30 minutes, find members and award pointsGrowth and above
WiFi voucher POS endpointsLets a till create and check WiFi access codes, for example one printed on each receiptEssentials and above; not on Aruba Instant On, FortiGate, MikroTik or Ruckus networks

At CaptiFi's public prices, Essentials is from $69 a month and Growth is $129 a month.

Connecting a till you sell yourself

Dealers who write till software have two documented APIs. With the Rewards till API (app.captifi.io/api/v1/rewards-pos) a till can check a reward code against the bill, redeem it once with a reference for the receipt, reverse that sale within 30 minutes, find a member and award points. Each terminal has its own key and a limit of 120 requests a minute, amounts travel as whole pence or cents, and every redeem carries an Idempotency-Key, so a till retrying after a dropped connection never redeems twice. The Loyalty and Rewards page lists the endpoints.

WiFi vouchers have two POS endpoints of their own, authenticated with a per-venue key: one creates up to 50 codes in a call, each keeping a guest online for the hours you set, and the other checks a code without using it. Put the venue in voucher mode and the till can print a WiFi code on every receipt.

Keeping guests away from card terminals

Guest WiFi belongs on its own SSID and VLAN with client isolation, with no route to the tills, card terminals or office machines, which is CaptiFi's standing advice.

The PCI Security Standards Council's information supplement, Guidance for PCI DSS Scoping and Network Segmentation (December 2016), says isolating the cardholder data environment (CDE) "is not a PCI DSS requirement", then strongly recommends it as a method that may reduce the scope and cost of an assessment. Without adequate segmentation, "the entire network is in scope". A device on the same subnet or VLAN as systems that store, process or transmit cardholder data counts as a CDE system, so a guest phone on the till VLAN is in scope by that test. And "the existence of separate network segments alone does not automatically create PCI DSS segmentation": the separation needs controls such as firewall and router rules that stop traffic passing between out-of-scope networks and the CDE.

Scoping is the merchant's decision, and the supplement (written against PCI DSS v3.2) sends merchants to their acquirer for compliance programmes, so check with them before calling a network compliant.

Toast's network requirements keep non-Toast devices such as phones and tablets off the Toast network, and say that where physical separation isn't possible "a VLAN should be set up for the Toast POS network, separate from all other traffic". Its access point guide adds that "Toast doesn't supply or support guest or personal Wi-Fi networks".

CaptiFi never needs the guest network to reach a till: the Toast and Square connections run between the cloud platforms, and on existing access points CaptiFi is the external portal on the guest SSID only. Plug the CaptiFi device into a port on a VLAN of its own with internet access; it needs outbound HTTPS (TCP 443) and WireGuard (UDP 51820), plus DNS and NTP.

Selling guest WiFi on the till invoice

Reselling fits a dealer that already bills the venue monthly. You buy CaptiFi at wholesale in your account currency, set your own retail price and put guest WiFi on the same invoice as the till. Sold at CaptiFi's public price, your margin is more than a third of that price, and first-line support is yours, with CaptiFi as second line. If you would rather not take the calls, refer the venue instead and earn 20% of every payment it makes to CaptiFi for the client's lifetime ($25.80 a month on Growth). White label adds your brand at the same wholesale rates plus a minimum monthly commitment, though clients still use CaptiFi's dashboard sign-in page at my.captifi.io (the white-label page lists what is branded). The hub guide to guest WiFi for MSPs and resellers compares the three, and the rate card is on the MSP programme page.

As a reseller, client tickets raised in the dashboard come to your support address and a morning digest flags client venues that need attention. Where a venue has no suitable access points, the CaptiFi device (a WiFi 5 access point) plugs into its router by Ethernet. It comes with every plan from Essentials up for a refundable deposit when a venue signs up directly; resellers order it from the client's page and it is billed through the partner agreement.

Where a POS dealer starts

Start with your existing client list.

  1. Sort your venues by till: Toast and Square sites can match spend on Growth, SumUp sites get the Zapier route, and other tills can use the voucher and Rewards APIs.
  2. For each Toast site, check whether Standard API access comes with its Toast subscription or has to be added.
  3. On your next site visit, check that guest WiFi sits on its own SSID and VLAN, away from the till and card terminals.
  4. Decide whether you will refer or resell, then apply to the CaptiFi partner programme.

Sources: PCI Security Standards Council, Information Supplement: Guidance for PCI DSS Scoping and Network Segmentation (December 2016); Toast, Building a CRM & Guest Engagement integration (developer guide), Toast Network Requirements Overview, Install Wireless Access Points and Standard API Access, read 22 October 2026; CaptiFi's partner programme pages and customer documentation, October 2026. Toast, Square, SumUp, Zapier and the other product names here are trade marks of their owners; CaptiFi is not affiliated with or endorsed by them.

Frequently asked questions

Quick answers to the most common questions about this topic.

Can I bill guest WiFi on the same invoice as the till software?
Yes, as a CaptiFi reseller. You buy CaptiFi at wholesale in your account currency, set your own retail price and invoice the venue yourself, so guest WiFi can sit on the same invoice as the till software. The venue never sees CaptiFi pricing or a CaptiFi invoice. Sold at CaptiFi's public price, your margin is more than a third of that price, and first-line support is yours, with CaptiFi as second line. If you would rather not bill or support the venue, refer it instead and earn 20% of every payment it makes to CaptiFi.
Does CaptiFi match Toast till orders to WiFi guests?
Mostly not. CaptiFi matches Toast orders to WiFi guests by email address only. Toast's developer guide says the guest's name, email and phone come with take-out and delivery orders and are empty for in-store orders; CaptiFi counts online and pickup orders among those and has also seen emails on orders booked through Toast Tables. Orders rung up in store at the till reach CaptiFi with no guest email, so most dine-in tabs count as anonymous revenue on the Toast Spend dashboard. CaptiFi reads Toast orders every 15 minutes, read-only, on the Growth plan and above.
How does CaptiFi link Square sales to guest WiFi sign-ins?
CaptiFi syncs Square orders every 15 minutes, read-only, and matches each one to a WiFi guest through the Square customer record attached to the sale at the till or through the email on the order. In the other direction, every guest who opts in to marketing on the WiFi sign-in page is added to the venue's Square Customer Directory in a CaptiFi WiFi Guests group and, if the venue switches that on, a guest who gives a mobile number and agrees to texts is enrolled in Square Loyalty under that number. The Square integration is on CaptiFi's Growth plan and above.
Does CaptiFi have a SumUp integration?
CaptiFi has no native SumUp connector. A venue on SumUp connects CaptiFi to Zapier with a Webhooks by Zapier Catch Hook, and Zapier passes each guest who opted in on the WiFi sign-in page (email, name, venue, visit date and consent) to an email tool or CRM. Nothing is read back from SumUp, so there is no spend matching. The Zapier route needs CaptiFi's Growth plan or above and the venue's own Zapier account.
Should guest WiFi share a network with card terminals?
No. CaptiFi's standing advice is a separate SSID and VLAN with client isolation and no route to tills or card terminals. The PCI Security Standards Council's 2016 guidance on scoping and network segmentation strongly recommends segmentation, though it is not a PCI DSS requirement, and says that without adequate segmentation the entire network is in scope. Toast's network requirements ask for the Toast POS network to be physically separated from other traffic or, where that isn't possible, put on a VLAN of its own, separate from all other traffic.
Can a till print a guest WiFi code on the receipt?
Yes, through CaptiFi's WiFi voucher POS endpoints. The venue generates a till API key on its Voucher and POS Setup page, and the till calls one endpoint to create codes, each keeping a guest online for the number of hours set, and another to check a code without using it. With the venue in voucher mode, only guests with a valid code get online. WiFi vouchers are on every CaptiFi plan from Essentials up, but not on Aruba Instant On, FortiGate, MikroTik or Ruckus networks.
Can my own till software redeem CaptiFi rewards?
Yes. CaptiFi's Rewards till API lets a till or kiosk check a reward code against the bill, redeem it once with a reference for the receipt, reverse that sale within 30 minutes, find a member by email or phone and award points for a sale. Each terminal has its own API key, every redeem carries an Idempotency-Key so a retry never redeems twice, and each terminal is limited to 120 requests a minute. Rewards is on CaptiFi's Growth plan and above.
C
Written by
CaptiFi Editorial Team

The CaptiFi Editorial Team writes about guest WiFi marketing, captive portals, GDPR-compliant data capture, and local SEO for venue operators. We base our recommendations on real customer outcomes and verified third-party reviews from G2.com.

Ready to turn your guest WiFi into a marketing engine?

CaptiFi captures customer data from every WiFi login, automates Google reviews and email follow-ups, and plugs into the tools you already use. Hardware included (refundable deposit), transparent pricing, 30-day free trial.

Related reading