Privacy Policy
Last updated: 07 November 2026
CollectERP (“we”, “our”, or “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use and safeguard information when you use our platform.
1. Information We Collect
1.1 Information you provide
- Account details: name, email address, mobile number, business name
- Payment data: invoice amounts, payment references, UTR numbers
- Support form submissions, profile updates and settings
1.2 Automatically collected
- IP address and browser/device information
- Session identifiers and login timestamps
- Pages visited and actions taken within the platform
- Strictly necessary cookies for authentication and CSRF protection
2. How We Use Your Information
- To operate, maintain and provide platform features
- To process payment collections and generate receipts
- To send transactional email notifications
- To verify identity and prevent fraud
- To maintain audit logs for financial compliance
- To respond to support queries
- To comply with applicable Indian laws and regulations
3. How We Share Your Information
We do not sell your personal data. We may share with:
- Payment gateways (Razorpay, Paytm, PayU, etc.) solely to process payments you initiate
- Email service providers to deliver notifications
- Hosting/infrastructure providers under confidentiality obligations
- Law enforcement when required by applicable Indian law
- Your distributor and Super Admin for legitimate business purposes within the same tenant
4. Data Retention
Data is retained while your account is active. Financial records are kept for a minimum of 7 years to comply with Indian accounting and tax regulations. You may request deletion of non-financial personal data by contacting us.
5. Data Security
- All data transmitted over HTTPS (TLS)
- Passwords stored with bcrypt hashing - never plain text
- Role-based access control (RBAC) on all data
- All actions logged with IP address and timestamp
- Payment webhooks verified via HMAC-SHA256
- Uploaded files stored in a restricted directory (PHP execution disabled)
6. Cookies
We use only strictly necessary cookies for session management and CSRF protection. No advertising or tracking cookies are used.
7. Your Rights (DPDP Act 2023)
- Right to access: Request a copy of your personal data
- Right to correction: Request correction of inaccurate data
- Right to erasure: Request deletion (subject to legal retention requirements)
- Right to grievance redressal: File a complaint with our Data Protection Officer
To exercise your rights, email [email protected] from your registered email address.
8. Children’s Privacy
Our platform is for business use by adults (18+). We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this policy from time to time. Registered users will be notified of material changes by email. Continued use after changes constitutes acceptance.
10. Contact & Grievance Officer