ERPPrivacy Policy
Last updated 13 October 2026
This policy explains what personal data [your registered business name] (“we”) handles when you use ERP, why, and your choices.
1. Two kinds of data
- Your account: your name, email address, password (stored only as a secure hash by our sign-in provider), the companies you belong to and your role. We are responsible for this data.
- Your company’s records: what you and your colleagues enter, such as customers, suppliers, products, invoices and staff check-in locations. Your company controls this data; we process it only on its instructions, to provide the service.
2. What we use it for
- To run the service: sign-in, keeping your records, printing documents, sending the emails and reports you set up.
- To keep it secure: an audit log of important changes, and technical logs to find faults and abuse.
- To bill your company, through Paddle.
- To tell you about changes to the service or these policies.
We don’t sell personal data and don’t use it for advertising.
3. Who else handles it
We use these providers to run the service, each only for its part:
- Supabase: database, sign-in and file storage.
- Vercel: hosting the application.
- Resend: sending sign-in and notification emails.
- Paddle: payments, invoices and tax, as our reseller and Merchant of Record. Card details go to Paddle, never to us.
- Meta (WhatsApp Business): only if your company turns on the daily WhatsApp report.
- Anthropic: only if your company turns on the AI assistant with its own API key; questions and the records needed to answer them are then sent under your company’s own account with Anthropic.
Some of these providers process data outside your country. We rely on their contractual safeguards for those transfers.
4. How long we keep it
We keep data while your company’s account is open. After an account is closed we delete its records within 30 days of the end of the export period in our terms, except where the law requires us to keep something longer (for example billing records).
5. Security
Each company’s data is walled off from every other company’s by the database itself. Connections are encrypted, access is limited by role, and important changes are logged.
6. Your rights
You can see and correct your account details in the app. To get a copy of your data, have it deleted, or object to how we use it, email [your support email]. If your data was entered by a company you work with, we may refer your request to that company. You can also complain to your local data protection authority.
7. Cookies
We use only the cookies needed to keep you signed in and the service working. We don’t use advertising or tracking cookies.
Contact
[your registered business name] · [your support email]