Welcome to SmartERP, a mobile application developed and maintained by SmartChoice IQ. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

SmartERP collects the following categories of data to deliver a complete and secure enterprise experience:

We use the data we collect solely for the following business purposes:

• To operate and improve core ERP features including Sales, Inventory, HR, and Accounting modules.
• To authenticate users and secure access to company data based on role permissions.
• To record attendance and departure via geo-validated QR check-in system.
• To track and display sales representative routes on the sales map dashboard.
• To document financial and commercial transactions linked to your company account.
• To send push notifications for work requests, approvals, and system alerts.
• To diagnose technical issues and improve overall application performance.

We do not sell, rent, or trade your personal data to any third party. Data may only be shared in the following limited circumstances:

• With your employer (the company registered in the system) strictly within the scope of your assigned role permissions.
• With technical service providers (e.g., DigitalOcean hosting, Google Maps API) under strict confidentiality agreements.
• When legally required by court orders, government requests, or applicable law.
• In emergency situations to protect the safety and security of users.

• All data is stored on dedicated ERPNext/Frappe servers provisioned per client company.
• All communication between the app and the server is encrypted via HTTPS/TLS.
• Passwords are hashed using bcrypt and are never stored or transmitted in plain text.
• QR attendance tokens are HMAC-signed and expire within a short time window to prevent replay attacks.
• Data is retained for the duration of the service contract and deleted within 90 days of subscription termination.

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data, subject to legal retention requirements.
• Right to Restriction: Request that we limit processing of your data in certain circumstances.
• Right to Withdraw Consent: Revoke permission for location or camera access at any time via your device settings.

SmartERP sends push notifications related to leave requests, purchase and sales order updates, and system alerts. You may manage or disable notifications at any time through your device settings. We do not send marketing or promotional messages without your prior explicit consent.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: