Privacy Policy

2. Data We Collect

Personal Information

• Name and contact information (email address, phone number)
• Account credentials (username, encrypted password)
• Company information (company name, address, tax ID)
• Employee information (for HR module users)
• Financial data (for accounting module users)
• User role and permissions data

Usage Data

• IP address and device information
• Browser type and version
• Pages visited and features used
• Access times and dates
• System performance metrics
• Error logs and debugging information

Business Data

• Customer and vendor information
• Inventory and product data
• Sales and purchase transactions
• Financial reports and analytics

3. How We Use Your Data

We use the collected data for various purposes:

• Service Provision: To provide and maintain our ERP services
• User Management: To manage user accounts and authentication
• Business Operations: To process transactions and manage business workflows
• Communication: To send important notifications and updates
• Support: To provide customer support and respond to inquiries
• Improvement: To analyze usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and enforce our terms

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for basic functionality, authentication, and security. These cannot be disabled.

Analytics Cookies

Help us understand how users interact with our service to improve performance and features.

Preference Cookies

Remember your settings and preferences for a personalized experience.

You can manage cookie preferences through our cookie consent tool or your browser settings.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share data with:

• Service Providers: Third-party vendors who assist in operating our service (hosting, analytics, support)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit consent for specific purposes
• Aggregated Data: Non-identifiable aggregated data for analytics and reporting

6. Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data transmission
• Encrypted storage for sensitive information
• Role-based access control (RBAC)
• Regular security audits and penetration testing
• Multi-factor authentication options
• Regular automated backups
• Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Complain: Lodge a complaint with supervisory authorities

To exercise these rights, please contact our Data Protection Officer using the contact information provided below.

8. Data Retention

We retain personal data for as long as necessary to:

• Provide our services and fulfill contractual obligations
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records for tax and accounting purposes

Typical retention periods:

• Active account data: Duration of service + 30 days
• Financial records: 7 years (legal requirement)
• Support tickets: 2 years
• Analytics data: 13 months
• Backup data: 90 days after deletion request

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. We ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by the European Commission
• Data processing agreements with all third-party processors
• Adequacy decisions where applicable
• Privacy Shield certification (where applicable)

10. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact:

We aim to respond to all privacy inquiries within 30 days.