Legal & Compliance

Privacy Policy & Data Protection

Effective Date: January 1, 2026 • Compliant with Indian DPDP Act 2023 and EU GDPR Regulation 2016/679.

1. Information We Collect

We process data exclusively to provide, secure, and deliver manufacturing ERP services:

  • Account & Administrative Data: User names, corporate email addresses, phone numbers, and plant roles required for role-based authentication.
  • Operational Plant Data: Master production schedules, purchase orders, inventory counts, BOM structures, and machine logs uploaded by your authorized users.
  • Statutory Billing Data: GSTIN, HSN codes, and e-invoicing tokens used strictly to transmit compliant payloads to the official National Informatics Centre (NIC) GST portal.

2. Data Sovereignty & Storage Residency

Clients are granted explicit jurisdiction over their data residency:

  • Indian Deployment: Stored within Tier-IV ISO 27001 certified AWS infrastructure located in Mumbai, India (ap-south-1), strictly complying with the Digital Personal Data Protection Act 2023.
  • European / Global Deployment: Hosted in Frankfurt, Germany (eu-central-1) under strict GDPR data protection guidelines.
  • On-Premise Option: Available for defence, aerospace, and high-security installations with zero external cloud dependencies.

3. Data Security & Encryption Standards

All information is protected by industry-standard cryptographic defenses:

  • In Transit: Enforced TLS 1.3 with 256-bit encryption for all browser and machine IoT connections.
  • At Rest: AES-256 block-level encryption on all database volumes and automated point-in-time snapshots.
  • Role-Based Access Control (RBAC): Granular permissions ensuring shop-floor operators cannot access financial ledgers or confidential customer margins.

4. Your Rights & Immediate Data Portability

You maintain unassailable ownership over your factory database. At any point during your subscription or upon termination, you may request or perform a 1-click export of your complete relational data in open SQL and CSV formats. We do not hold client data hostage under proprietary locks.

5. Data Protection Officer (DPO) Contact

For inquiries, audit requests, or NDA execution, contact our compliance office directly:

Data Protection Office • ERPrath
Email: privacy@erprath.com • Direct Phone: +91 91850 09187
India Support: Prestige Tech Park, Outer Ring Road, Bangalore 560103, India
European Hub: Königstraße 27, 70173 Stuttgart, Germany