1. Introduction
CoreZap ERP ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Enterprise Resource Planning system.
2. Information We Collect
We collect information necessary to provide and improve our ERP services:
- Account Information: Username, email address, phone number, and password credentials.
- Company Information: Business name, address, tax information, and company settings.
- Business Data: Sales transactions, purchase orders, inventory records, product information, customer and supplier details, financial records, and employee data.
- Technical Data: IP address, device information, browser type, operating system, and usage patterns.
- Device Fingerprints: Canvas fingerprint data and other device identifiers for security purposes.
- Session Information: Login timestamps, session activity, and CSRF tokens for security.
- Payment Information: Payment method details, transaction records, and subscription status (processed securely through third-party payment providers).
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide, maintain, and improve the CoreZap ERP system.
- To process transactions and manage subscriptions.
- To authenticate users and secure accounts.
- To generate reports and analytics for your business.
- To send important notifications, alerts, and system updates via SMS or email.
- To prevent fraud, unauthorized access, and security incidents.
- To comply with legal obligations and enforce our terms of service.
4. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your data:
- Data encryption using industry-standard protocols.
- PDO prepared statements to prevent SQL injection attacks.
- CSRF tokens for form submission protection.
- Session-based authentication with secure session handling.
- Input sanitization and output escaping to prevent XSS attacks.
- File upload validation and safe file handling.
- Company-based data isolation (multi-tenant architecture).
- Regular security assessments and monitoring.
5. Third-Party Services
We integrate with the following third-party services, which have their own privacy policies:
- Paystack: For secure online payment processing. See Paystack Privacy Policy.
- Twilio / SMS Portal: For SMS notifications. See Twilio Privacy Policy.
- PHPMailer: For email communications.
- M-Pesa / Tuma: For mobile payment processing.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:
- With your explicit consent.
- With service providers who assist in operating our platform (under strict confidentiality agreements).
- When required by law or to respond to legal requests.
- To protect our rights, property, or safety, or that of our users or the public.
7. Cookies and Session Management
We use session cookies to manage user authentication and maintain secure sessions. These cookies are essential for the operation of the system and are not used for tracking purposes across other websites.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to access your personal data.
- Right to correct inaccurate or incomplete data.
- Right to request deletion of your data (subject to legal obligations).
- Right to restrict or object to certain processing activities.
- Right to data portability.
To exercise these rights, please contact us at dougmortechnologies@gmail.com.
9. Data Retention
We retain your data for as long as your account is active or as necessary to provide services. When you terminate your account, we will delete or anonymize your data unless we are required to retain it for legal or regulatory purposes.
10. Children's Privacy
Our system is designed for business use and is not intended for children under the age of 18. We do not knowingly collect personal information from children.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
- Email: dougmortechnologies@gmail.com
- Phone: +254 714 168 029
- Address: Nairobi, Kenya
This privacy policy applies to all users of the CoreZap ERP system, including company administrators, employees, and any other users with access to the platform.