Privacy Policy

1. Data we collect

We collect information you provide directly, information generated while using ERP features, and technical information needed to operate, secure, and improve the service.

• Account information such as name, email address, authentication provider metadata, profile details, workspace membership, and role/permission assignments.
• Business profile information such as company name, tax and billing details, addresses, subscription status, and ERP setup preferences.
• Customer, supplier, proposal, invoice, retainer, service, inventory, reconciliation, expense, receipt, tax, and reporting records that users enter or import.
• Documents and uploaded files, including receipts, logos, product images, signatures, invoice attachments, imported spreadsheets, and files opened through secure document routes.
• Payroll and workforce information such as contractor/employee names, payout records, role assignments, attendance/workforce records, and related compliance notes where enabled by the workspace.
• Payment metadata such as plan, invoice ID, gateway, payment status, transaction references, billing cycle, tax treatment, and settlement/refund status. We do not intentionally store full card numbers.
• Device and browser information, IP address, cookies/session identifiers, locale/theme preferences, push subscription endpoints, diagnostics, security logs, audit trails, and abuse-prevention signals.

2. How we use data

• Provide ERP functionality including onboarding, dashboards, invoicing, proposals, expenses, documents, payroll/workforce workflows, reporting, and exports.
• Authenticate users, enforce permissions, maintain sessions, secure accounts, detect abuse, investigate incidents, and prevent fraud or unauthorized access.
• Process subscriptions, taxes, invoices, payment confirmations, refunds/cancellations, customer support, and account administration.
• Send operational notifications, security notices, billing reminders, support updates, and push notifications when users opt in or configure them.
• Maintain backups, logs, service reliability, analytics/monitoring, compliance evidence, accounting records, and business continuity processes.

We do not sell personal information.

3. Third-party processors and sharing

We share information only as needed to operate the service, comply with law, protect users, complete transactions, or support the customer relationship. Depending on which features are enabled, recipients may include:

• Hosting, database, storage, backup, deployment, monitoring, logging, and security infrastructure providers used to run erp.bababuilds.com.
• Authentication providers such as Google OAuth when enabled by a workspace or user.
• SMTP/email delivery providers used for account, support, billing, and notification emails.
• Payment processors and billing providers such as Stripe and Razorpay when a workspace uses paid plans or gateway-powered collections.
• Cloudflare Turnstile or comparable anti-abuse providers when bot protection is enabled.
• Google Play services, Play App Signing, and Google Play Billing if the Android/TWA distribution adds Play-managed purchase or verification flows.
• Analytics, crash reporting, and application monitoring providers if configured for product reliability and security telemetry.
• Professional advisers, auditors, regulators, law enforcement, or successor entities when disclosure is required by law, compliance, dispute resolution, or a business transaction.

4. Data retention

We retain account, workspace, billing, invoice, tax, audit, and security records for as long as needed to provide the service, meet legal/accounting obligations, resolve disputes, enforce agreements, maintain backups, and protect the platform. Deleted data may remain in backups or logs for a limited operational period before deletion or anonymization.

5. User controls, export, and deletion

Workspace administrators can update many business records from the app. To request access, correction, export, workspace deletion, account deletion, or consent withdrawal where applicable, email [email protected] with your account email, workspace name, and request details. Some records may be retained where required for tax, accounting, fraud prevention, legal compliance, security, or dispute-resolution purposes.

6. Security practices

We use administrative, technical, and organizational safeguards designed to protect data, including authenticated access, role-based permissions, tenant isolation, secure session handling, audit/security logging, backup controls, and file-upload protections where configured. No internet service is perfectly secure, so users should keep credentials confidential and promptly report suspected unauthorized access.

7. Cookies, device data, and notifications

We use cookies, local storage, and similar technologies for login, session continuity, preferences, security, fraud prevention, and product reliability. Browser or device settings may limit some technologies, but disabling required session storage may prevent login. Push subscriptions are used only to deliver requested or operational notifications and can be disabled through browser or device settings.

8. Children and minors

BabaBuilds ERP is intended for businesses and professional users. It is not directed to children, and we do not knowingly collect personal information from children under applicable minimum ages. Contact us if you believe a minor provided data without appropriate authorization.

9. Contact

For privacy questions, data-safety requests, or Play Store listing inquiries, contact [email protected].