Privacy Policy
At ERP, we value your privacy and are committed to protecting the personal and business information you entrust to us when using our SaaS ERP system.
This Privacy Policy describes how we collect, use, store, and protect your information. By using our services, you agree to the terms outlined below.
1. Information We Collect
-
1. Account Information
When you or your company register for our services, we collect personal and business information such as:
- Company name
- Contact person’s name
- Email address
- Phone number
- Billing information
-
2. User Data
Users within your company may provide personal information, such as:
- Name
- Email address
- Role or position
- Login credentials (encrypted)
- Profile settings
-
3. ERP Usage Data
In the course of using our ERP system, we collect operational and transactional data, including but not limited to:
- Invoices, payments, and accounting records
- Inventory and product information
- Purchase and sales history
- Customer and supplier data
- Multicompany and multi-currency configurations
-
4. Technical Information
We automatically collect certain technical data when you use our services:
- IP address
- Browser type
- Device type and OS
- Log files
- Usage statistics and analytics
-
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences
- Maintain session state
- Analyze system usage
2. How We Use the Information
-
1. To Provide and Maintain the Service
- Create and manage user and company accounts
- Deliver core ERP features (e.g., invoicing, inventory, accounting)
- Ensure system availability, security, and performance
-
2. To Improve Our Services
- Analyze usage patterns to enhance functionality and user experience
- Fix bugs and perform diagnostics
- Develop new features and modules based on user needs
-
3. To Communicate with You
- Send account notifications, updates, and support messages
- Respond to inquiries and provide customer support
- Send promotional or informational emails (only if you opt in)
-
4. For Billing and Administrative Purposes
- Process payments and manage subscriptions
- Send invoices, receipts, and transaction confirmations
-
5. To Ensure Security and Compliance
- Monitor and prevent unauthorized access or misuse of the system
- Enforce our Terms of Service and other policies
- Comply with legal obligations and respond to lawful requests
3. Sharing of Information
-
1. With Service Providers
We may share information with trusted third-party service providers who help us operate, maintain, and improve our services (e.g., cloud hosting, payment processors, customer support tools). These providers are bound by strict confidentiality agreements and may only use your data to provide services on our behalf.
-
2. Within Your Organization
Users within the same company account may access shared data as permitted by their roles and permissions.
-
3. For Legal Reasons
We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or regulatory requirements.
-
4. To Protect Rights and Safety
We may share information when necessary to:
- Enforce our Terms of Service
- Protect the rights, property, or safety of our users, the public, or our company
- Detect and prevent fraud or security issues
-
5. In Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as part of that transaction. We will notify you of any such change and your options regarding your information.
4. Data Security
-
1. Encryption
- All data transmitted between your browser and our servers is protected using SSL/TLS encryption.
- Sensitive data, such as passwords and payment details, is stored using industry-standard encryption and hashing algorithms.
-
2. Access Controls
- Role-based access controls (RBAC) ensure that users can only access the data relevant to their permissions.
- Administrative access to systems and data is restricted and regularly reviewed.
-
3. Infrastructure Security
- Our infrastructure is hosted in secure, certified data centers with strong physical and network-level protections.
- Regular backups are performed and stored securely to ensure data availability and disaster recovery.
-
4. Monitoring and Incident Response
- We monitor our systems for unusual activity, potential vulnerabilities, and attacks.
- In the event of a data breach or security incident, we have an established response plan and will notify affected users as required by law.
-
5. User Responsibility
- We encourage users to use strong passwords, enable two-factor authentication (if available), and follow best practices to keep their accounts secure.
5. Data Retention
-
1. Active Subscription
While your company maintains an active subscription to our ERP system, we will retain all relevant business and user data to ensure full functionality of the platform.
-
2. After Cancellation
When your subscription is canceled or terminated:
- We will retain your data for a limited grace period (e.g., 30 to 90 days) to allow for account recovery or data export, unless otherwise agreed.
- After the grace period, your data will be permanently deleted or anonymized, unless legal obligations require us to retain it longer (e.g., tax or accounting records).
-
3. User-Initiated Deletion
You may request deletion of specific data or your entire account. We will honor such requests in accordance with applicable laws, and will inform you of any data we are legally required to retain.
-
4. Backup Copies
Data may remain in encrypted backups for a limited period as part of our disaster recovery processes. These backups are automatically purged according to our internal retention schedule.
6. User Rights
-
1. Right to Access
You have the right to request a copy of the personal data we hold about you, along with information on how we use it.
-
2. Right to Rectification
You can request that we correct inaccurate or incomplete personal information.
-
3. Right to Deletion ("Right to be Forgotten")
You may request the deletion of your personal data, subject to any legal or contractual obligations that require us to retain it.
-
4. Right to Restrict Processing
In certain circumstances, you can ask us to limit the way we use your data.
-
5. Right to Data Portability
You can request a copy of your data in a commonly used, machine-readable format to transfer it to another provider.
-
6. Right to Object
You have the right to object to the processing of your data for certain purposes, such as direct marketing.
-
7. Right to Withdraw Consent
If you have provided consent for the use of your data, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
-
8. Right to File a Complaint
If you believe your rights have been violated, you may file a complaint with a relevant data protection authority.
7. Use of Cookies
-
1. What Are Cookies?
Cookies are small text files stored on your device by your web browser when you visit a website. They help websites recognize your device and store information about your preferences or past actions.
-
2. Types of Cookies We Use
- Essential Cookies
- Performance and Analytics Cookies
- Functional Cookies
- Third-Party Cookies
-
3. Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling essential cookies may impact your ability to use certain features of our platform.
-
4. Consent
By using our ERP system, you consent to the use of cookies in accordance with this policy. Where required by law, we will request your explicit consent before placing non-essential cookies.
8. Changes to This Policy
-
1. Notification of Changes
When we make material changes to this policy, we will notify you by:
- Posting the updated version on our website or within the platform, and/or
- Sending a direct notification via email or through your user dashboard
-
2. Reviewing Updates
We encourage you to review this policy periodically to stay informed about how we protect your information.
-
3. Effective Date
Changes will take effect as of the date they are posted, unless otherwise stated. Your continued use of the service after the update means you accept the revised policy.