ERPesque Privacy Policy
ERPesque is business software for inventory, sales, purchasing, point of sale and accounting, available as an Android app and on the web. It is operated by Attatva Systems, a registered business in Nepal (“we”, “us”). This policy explains what data we collect, why, who we share it with, how long we keep it, and how to delete it.
Questions or requests: attatvasystems@gmail.com. To delete your account, see Delete your ERPesque account. Guides for a small shop: Guides.
1. Who controls the data
We control your account data (your login and settings) and the technical data the app sends us. The business records an organization keeps in ERPesque (its items, customers, vendors, invoices and so on) belong to that organization. For those records we act on the organization's behalf, and the organization decides what it enters and who can see it. If you are a customer or supplier of a business that uses ERPesque, contact that business about your data.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, password (stored only as a one-way hash), organization code, role, and the name and phone number you enter when signing up | Signing you in, keeping each organization's data separate, controlling who can do what |
| Business records you enter | Items, stock, prices, customers and vendors (names, phone numbers, addresses, tax numbers), invoices, payments, bank statement imports, attachments and item photos | Providing the service; syncing between your devices and team members |
| Notification settings | Push notification token; your Telegram chat ID if you choose to link Telegram | Sending the alerts you turned on |
| App usage and diagnostics | Screens used and in-app events, crash reports, performance timings, device model, operating system version, app version and app instance ID | Finding and fixing bugs, understanding which features are used |
| Approximate location | Google Analytics derives coarse geography from your IP address; the app does not request device location access | Aggregated analytics reports |
We do not collect your contacts, precise location, biometric data, or advertising ID.
3. Device permissions
- Camera: only for scanning barcodes at the point of sale. Barcodes are read on your device; camera images are not uploaded or stored.
- Fingerprint or face unlock: handled entirely by your phone's operating system. We only learn whether the check succeeded.
- Notifications: to show the alerts you enable.
- Files and photos: only the files you pick (for example an item photo or an import spreadsheet) are read, and uploaded when you save them.
4. Who we share data with
We do not sell personal data and do not show advertising. We share data only with service providers that run parts of ERPesque for us:
- Google Firebase (analytics, crash reporting, performance monitoring, push notifications). Google's privacy policy.
- Cloudflare (network delivery, web hosting and file storage). Cloudflare's privacy policy.
- Resend (sending sign-in and password-reset emails). Resend's privacy policy.
- Telegram, only if you link it, to deliver your alerts.
Members of your organization can see the business records their role allows. We may also disclose data if the law requires it. These providers may process data outside Nepal.
5. How long we keep data
- Your account data is kept while your account exists.
- When you delete your account, your email, password, sessions, push tokens, Telegram link, preferences and notifications are removed immediately.
- Business records you created stay with your organization, because other members rely on them. If you were the organization's only member, the organization is closed and its business records are deleted within 90 days.
- Analytics and crash data are kept by Google Firebase under its own retention settings.
6. Security
Data is encrypted in transit (HTTPS). Passwords are stored only as salted hashes. Each organization's records are isolated at the database level. On your device, sign-in tokens are kept in the operating system's secure storage.
7. Your choices and rights
- Delete your account in the app under Settings → Account settings → Delete account, or see how to request deletion.
- Access or correct your data by emailing us.
- Turn off notifications in the app or in your phone's settings.
8. Children
ERPesque is a tool for businesses and is not meant for children under 16. We do not knowingly collect data from children.
9. Changes
If we change this policy we will update the effective date above, and tell you in the app if the change is significant.
10. Contact
Attatva Systems, Nepal — attatvasystems@gmail.com