Privacy Policy

1. Information We Collect

To provide, operate, and maintain our multi-tenant cloud ERP platform, we collect the following categories of information:

• Account & Registration Details: Full name of business owner/administrator, company legal trade name, registered business email, telephone number, unique workspace subdomain, and salted cryptographic password hashes.
• Tenant Business Records (Customer Data): Information entered by you into your dedicated workspace to run your business operations. This includes product catalogs, SKUs, inventory counts, customer and supplier contact directories, GSTINs, sales invoices, purchase bills, and payment records.
• Staff & Employee Management Data: Employee names, branch assignments, attendance timestamps, user roles, and granular feature permissions configured by the tenant administrator.
• Technical & Session Data: IP addresses, browser user-agent strings, device identifiers, session tokens, and access logs required for account security, audit trails, and anti-fraud rate-limiting.

2. Purpose & Lawful Bases of Processing

We process information exclusively under the following lawful grounds:

• Performance of Contract: To provision your enterprise workspace database, authenticate users, facilitate billing and inventory calculations, and fulfill our service obligations under our Terms of Service.
• Legal Compliance: To generate legally compliant GST invoices (tax breakdowns, E-way bill records) in accordance with Indian tax regulations.
• Legitimate Interests: To monitor system uptime, prevent unauthorized intrusion or brute-force login attempts, and diagnose software performance issues.

3. Data Ownership & Customer Rights

You retain sole ownership of all customer data and transaction records uploaded to your workspace. Shrelix ERP acts strictly as a data processor regarding the business records you manage.

You have the right to:

• Export Your Data: Export complete transaction ledgers, inventory counts, customer lists, and financial reports at any time in standard Excel/CSV formats directly from the ERP interface.
• Access & Rectify: Update or correct your company branding, profile, or staff data through your administrative dashboard.
• Account Deletion: Request permanent deletion of your workspace and tenant database by contacting privacy@shrelix.com or submitting a cancellation request from the Central Portal.

4. Data Retention & Backup Policies

We maintain clear retention schedules designed for operational continuity and data minimization:

Data Category	Retention Period	Deletion / Purge Procedure
Active Workspace Data	Duration of active subscription or trial	Retained in live database while account is active
Terminated Account Data	30 days export grace period following account closure	Permanently dropped from active production servers after 30 days
Automated Backup Snapshots	Up to 30 days	Automatically rotated and overwritten daily on a 30-day rolling cycle
System & Authentication Logs	90 days	Purged automatically after security audit requirements lapse

5. Subprocessors & Third-Party Service Providers

We do not share, sell, or rent your business data to advertisers. We engage a limited number of verified technical infrastructure providers solely to host and deliver the service:

Provider / Subprocessor	Service Provided	Data Handled
Cloud Infrastructure & Tier-3/4 Hosting	Encrypted cloud server hosting & database instances	Encrypted workspace data and backups stored in certified data centers
Meta WhatsApp Cloud API (Optional)	Automated WhatsApp invoice dispatch (Optional add-on configured by tenant)	Invoice PDF link and recipient mobile number, only when triggered by tenant
Payment Processing Partners	Subscription checkout & billing gateway	Billing contact details and payment confirmation tokens (we do not store raw card/banking numbers)

6. Cookies & Tracking Technologies

We use only strictly essential first-party cookies necessary for core application functionality. We do not use third-party advertising cookies or cross-site behavioral tracking.

• SHRELIXSESS_*: Encrypted session cookie to authenticate your logged-in state and isolate tenant sessions.
• SHRELIX_ACTIVE_TENANT: Remembers your active workspace subdomain for seamless portal navigation.
• theme / shrelix_docs_theme: Remembers your light/dark display preference in your browser's local storage.

7. Security Measures & Encryption

We implement enterprise-grade security standards to safeguard your data:

• In-Transit Encryption: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3).
• Tenant Isolation: Each enterprise tenant operates with distinct database credentials or isolated tenant schemas, preventing cross-tenant data leakage.
• Password Security: Passwords are protected using salted one-way cryptographic hashing algorithms (Bcrypt/Argon2). We cannot read raw passwords.
• Automated Redundancy: Daily automated backups ensure business continuity in the event of disaster recovery.

8. Applicable Law & Compliance

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

9. Privacy Office & Grievance Contact

If you have any questions, wish to exercise your data subject rights, or have security concerns, please contact our designated privacy team: