Privacy Policy

Effective Date: April 6, 2026
Applies to: erp.bababuilds.com

This Privacy Policy explains how BabaBuilds ERP ("we", "us", "our") collects, uses, discloses, and protects information when you use our platform at erp.bababuilds.com.

1) Information We Collect

We collect information you provide directly, and limited technical data required to operate and secure the platform.

A. Account & Identity Data

• Name
• Email address
• Profile image (if provided by your auth provider)
• Authentication provider metadata (for secure login)

B. Workspace & Business Data

• Company and billing profile information
• Client and invoice records
• Expense records and uploaded receipts
• Uploaded logos and other business assets
• Payment and subscription metadata

C. Technical & Security Data

• Device/browser metadata
• IP address and request logs
• Session data and security telemetry
• Fraud/abuse prevention signals (including bot verification where enabled)

2) How We Use Information

We use your data to:

• Provide and maintain ERP functionality
• Authenticate users and secure accounts
• Generate invoices, reports, and exports
• Process subscriptions and billing operations
• Provide support and respond to incidents
• Detect abuse, malware, and unauthorized activity
• Improve reliability, security, and user experience

We do not sell personal information.

3) Legal Bases (Where Applicable)

Depending on your jurisdiction, we process data based on:

• Performance of a contract (to deliver the service)
• Legitimate interests (security, abuse prevention, product reliability)
• Legal obligations (tax/compliance requests)
• Consent (where specifically requested)

4) Data Sharing

We share data only with:

• Infrastructure/service providers needed to run the platform (hosting, auth, email, payment)
• Professional advisers and auditors under confidentiality
• Law enforcement/regulators where legally required
• Successors in a merger/acquisition, subject to equivalent privacy protections

We require vendors to handle data securely and only for approved purposes.

5) International Data Transfers

Your data may be processed in regions where our infrastructure or service providers operate. We apply reasonable contractual and technical protections for cross-border data handling.

6) Data Retention

We retain data for as long as necessary to:

• Provide the service
• Meet legal/accounting obligations
• Resolve disputes
• Enforce agreements

When no longer required, data is deleted or anonymized within reasonable operational timelines.

7) Security Practices

We implement administrative, technical, and organizational safeguards, including:

• Access controls and tenant isolation
• Encryption of sensitive secrets at rest (where supported)
• Secure authentication and session handling
• Malware scanning on file upload paths where configured
• Monitoring and audit controls for critical admin operations

No internet service is 100% secure, but we continuously improve protections.

8) Your Rights

Depending on local law, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete eligible data
• Restrict or object to processing
• Request export/portability
• Withdraw consent where processing is consent-based

To exercise rights, contact us at [email protected].

9) Cookies & Similar Technologies

We use cookies/session storage for:

• Authentication and session continuity
• Security and abuse prevention
• Preferences (e.g., locale/theme)

You may adjust browser settings, but disabling core cookies may break login or application behavior.

10) Children’s Privacy

BabaBuilds ERP is a business platform and is not directed to children under applicable age thresholds. We do not knowingly collect children’s data.

11) Policy Updates

We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.

12) Contact

For privacy or data protection questions:

• Email: [email protected]
• Platform: erp.bababuilds.com