Privacy Policy

Account Registration Information
When you sign up for ERP Group, we collect:

• Full name of the account holder or business owner
• Business name and type
• Email address
• Mobile number
• Business address and city
• GSTIN (GST Identification Number)
• PAN (Permanent Account Number) — where applicable
• Username and encrypted password

Business & Financial Data
As part of using our accounting, GST, payroll, and ERP modules, we process:

• Invoice and billing records
• Customer and vendor details
• Employee salary and payroll data
• Bank account information for reconciliation
• Inventory and stock data
• Tax filings and GST return data
• Purchase and sales transaction records

Communication Data
When you contact our support team, we collect:

• Name and email address
• Content of your support request or complaint
• Chat transcripts and email correspondence
• Feedback and survey responses

Demo & Lead Information
When you book a demo or fill a contact form, we collect:

• Name and mobile number
• Business name and size
• City and state
• Nature of your business requirement

When you visit our website or use our platform, we automatically collect:

Device & Technical Information

• IP address and approximate location
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Internet service provider (ISP)

Usage & Behavioural Data

• Pages visited on our website and platform
• Features accessed and actions performed
• Time spent on each page or module
• Buttons clicked and forms submitted
• Error logs and crash reports

Cookies & Tracking Data

• Session cookies for login management
• Preference cookies for personalised experience
• Analytics cookies (Google Analytics)
• Marketing cookies for ad performance (where applicable)

We may receive information about you from:

• GSTN Portal — for GST verification and e-invoice integration
• Banking Partners — for bank feed and reconciliation features
• Payment Gateways — for subscription payment processing
• Google / Social Login — if you sign in using Google or social media
• Referral Partners — if a partner refers your account to us

• Create and manage your ERP Group account
• Process your GST invoices, returns, and filings
• Run payroll calculations and generate payslips
• Sync bank transactions and perform reconciliation
• Manage your inventory, warehouse, and POS operations
• Generate financial reports and business dashboards

• Analyse how users interact with our features
• Identify bugs, errors, and performance issues
• Develop new features based on usage patterns
• Conduct A/B testing to improve user experience
• Monitor platform uptime and system health

• Send account activation and verification emails
• Deliver product updates, feature announcements, and release notes
• Send GST filing deadline reminders and compliance alerts
• Respond to your support queries and complaints
• Send invoices, payment receipts, and subscription reminders

• Comply with India's Income Tax Act and GST regulations
• Respond to lawful requests from government authorities
• Maintain audit trails and transaction logs as required by law
• Prevent fraud, unauthorised access, and data breaches

• Send newsletters, product tips, and ERP insights (with your consent)
• Inform you about new modules, offers, and pricing updates
• Conduct customer satisfaction surveys
• Display relevant advertisements on third-party platforms (with your consent)

We process your data to fulfil our contractual obligations to you — including providing our ERP, GST, accounting, payroll, and other software services as described in our Terms of Service.

We process certain data to comply with applicable Indian laws — including the Information Technology Act 2000, GST Act 2017, Income Tax Act 1961, Companies Act 2013, and labour laws governing payroll and employee records.

We process data for our legitimate business interests — such as improving our platform, preventing fraud, ensuring security, and conducting business analytics — provided these interests do not override your fundamental rights.

For marketing communications, cookies, and certain data sharing activities, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We work with trusted third-party service providers who help us deliver our platform. These include:

All third-party service providers are contractually bound to process your data only for the specific purpose for which it was shared and to maintain appropriate security standards.

We may disclose your information to government bodies, tax authorities, or law enforcement agencies when:

• Required by a court order, legal process, or statutory obligation
• Requested by the Income Tax Department, GST authorities, or SEBI
• Necessary to protect the rights, safety, or property of ERP Group or its users
• Required to investigate fraud, security breaches, or illegal activities

In the event of a merger, acquisition, restructuring, or sale of ERP Group's business assets, your data may be transferred to the acquiring entity — subject to the same privacy protections described in this policy. We will notify you via email and a prominent website notice before any such transfer.

We may share your information with other parties when you have given us explicit consent to do so — such as when you authorise your CA firm or accountant to access your ERP Group account.

ERP Group uses the WhatsApp Business Platform provided by Meta Platforms, Inc. to send transactional and business messages to customers who have explicitly opted in to receive WhatsApp communications.

Data shared with Meta:

Opt-in: Contacts only receive WhatsApp messages after providing explicit consent. Consent is recorded with a timestamp in our system.

Opt-out: Recipients can reply STOP to any message, or contact us at [email protected] to be removed from WhatsApp communications immediately.

Meta's role: Meta acts as a data processor for message delivery only. Meta's own privacy policy applies to data processed on their infrastructure: Meta Privacy Policy – How Meta collects and uses user data

ERP Group stores all customer data on secure cloud servers located in India. We use reputable cloud infrastructure providers that comply with international security standards including ISO 27001 and SOC 2.

Your data does not leave Indian territory unless explicitly required for a specific integration you have authorised (such as international payment gateways for multi-currency transactions).

We retain your data for the following periods:

After the applicable retention period, your data is securely deleted or anonymised in accordance with our data disposal procedures.

Encryption

• All data in transit is protected using 256-bit SSL/TLS encryption
• All data at rest is encrypted using AES-256 encryption
• Database-level encryption for all sensitive financial records

Access Controls

• Role-based access control (RBAC) for all platform users
• Multi-factor authentication (MFA) available for all accounts
• Automatic session timeout after periods of inactivity
• IP-based access restrictions for enterprise accounts

Infrastructure Security

• Regular penetration testing and vulnerability assessments
• Automated threat detection and intrusion prevention systems
• 24/7 security monitoring of all platform infrastructure
• DDoS protection and firewall security

Data Backup

• Automated daily backups of all customer data
• Backup data stored in geographically separate secure locations
• Regular backup restoration tests to ensure data integrity

• Strict data access policies — employees access only what they need
• Regular security training for all ERP Group team members
• Non-disclosure agreements with all employees and contractors
• Formal incident response plan for security breaches

In the unlikely event of a data breach that affects your personal or business information, ERP Group will:

• Notify you via email within 72 hours of becoming aware of the breach
• Inform the relevant authorities as required under Indian law
• Provide details of the breach, data affected, and steps taken
• Offer guidance on protective measures you should take

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, keep you logged in, and understand how you use our platform.

Essential Cookies
These cookies are necessary for our website and platform to function. They cannot be disabled.

• Login session management
• Security token validation
• Load balancing

Preference Cookies
These cookies remember your settings and personalise your experience.

• Language and region preferences
• Dashboard layout preferences
• Recently accessed modules

Analytics Cookies
These cookies help us understand how visitors use our website.

• Google Analytics (anonymised)
• Page view and session tracking
• Feature usage analytics

Marketing Cookies

These cookies are used to show relevant advertisements and measure campaign effectiveness. These are only active with your explicit consent.

You can control cookies through:

• Our Cookie Consent Banner when you first visit our website
• Your browser settings — most browsers allow you to block or delete cookies
• Google Analytics Opt-Out at tools.google.com/dlpage/gaoptout

Please note that disabling essential cookies may affect the functionality of our platform.

You have the right to request a copy of all personal data we hold about you. We will provide this within 30 days of your request.

If any of your personal or business information held by us is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings.

You may request deletion of your personal data, subject to legal retention requirements. We will delete your data within 30 days of account closure, except where retention is required by law (such as GST and tax records).

You have the right to receive your data in a structured, commonly used, machine-readable format (such as CSV or Excel) and to transfer it to another service provider.

Where we process your data based on consent (such as for marketing communications), you may withdraw consent at any time — without affecting the lawfulness of processing before withdrawal.

You have the right to object to processing of your data for direct marketing purposes at any time. You can do this by:

• Clicking "Unsubscribe" in any marketing email
• Updating your notification preferences in account settings
• Emailing us at [email protected]

To exercise any of the above rights, please contact our Privacy Team:

Email: [email protected]
Subject Line: Data Rights Request — ERP Group
Response Time: Within 30 days of receiving your request

We may ask you to verify your identity before processing your request to protect your data security.