Privacy Policy for ERP Mobile

ERP Mobile is made by WizardSofts. This policy covers the Android app for petrol pump and small-business bookkeeping. We do not sell your data.

• Business records: sales, shifts, meter readings, stock, dues, staff and settings are stored in a database on the phone.
• PINs: each person's PIN is kept on their own phone and is never sent to us.
• Backup files (.erpbackup): a backup is locked with your password or recovery code before it leaves the app. You choose the folder. We never see the file, the password or the recovery code.

When you sign in as the owner, the app keeps a cloud copy of your business records so that more than one phone can work on the same book and so you can recover it. Cloud sign-in is part of version 1.0.0; if you never sign in, nothing is stored in the cloud.

• Mobile numbers: you sign in with your mobile number and a one-time SMS code. A messaging provider sends the sign-in code by SMS; we will name the provider here before cloud sign-in is switched on. We store your number and the numbers of the managers and staff you add, encrypted, plus a one-way hash so we can find a number without reading it. Customer mobile numbers inside your records are encrypted at rest.
• Enrolled phone details: a label, the platform and the app version of each enrolled phone, so you can see and revoke it. Only the owner can add or remove a phone or a member.
• The rest of the cloud copy can be read by our servers. Data travels over TLS (encrypted in transit). This is different from the backup file, which only your password or recovery code can open.
• Our one-time-code records hold a hash of the mobile number and of the IP address, used to prevent abuse.

The app shows banner ads from Google AdMob. Ads appear only on the owner and manager Home and Reports screens, only while the phone is online, never for staff, and never on the Sell, PIN, shift close, setup, restore or sharing screens. We aim to block categories such as gambling, dating and alcohol, and we ask for ads rated PG at most.

Through the AdMob SDK, Google receives data such as your approximate location (from the IP address), how you interact with ads, diagnostic information, and the Android advertising ID or app set ID. Where the law requires it (for example in the EEA and UK), Google's consent tool asks you first. Elsewhere ads are shown without a prompt. You can reset or delete your advertising ID in your phone settings. Google's own privacy policy describes what Google does with this data.

Usage statistics through Google Firebase Analytics are off until you turn them on, at setup or in More. If you turn them on, the app sends only which screen pattern was opened (for example “history”) and a count. Google also adds basic information such as phone model, operating system and country, and an app instance ID. Advertising ID collection by Firebase is switched off. You can turn statistics off at any time.

Amounts, names, mobile numbers, business codes, vehicle plates and user IDs are never sent to ads or analytics. Server logs keep phone numbers only partly masked (for example 017****5678) and never the sign-in code in production.

• Notifications: reminders and alerts. You can turn them off in phone settings.
• A storage folder that you choose, for backup files. The app can only use the folder you pick.
• Internet access: for the cloud copy, sign-in and ads. Books and reports work offline.

• On the phone: your book stays until you remove the app or delete its data. Your backup files are yours.
• Cloud copy: the owner can ask us to delete the business; see how to delete your account. There is a 7-day period in which you can cancel and the cloud copy is read-only; then your business records, devices and members are deleted; an empty deactivated business record and anonymised sign-in counters remain. We aim to finish within 30 days of your request. Server backups are removed on a rolling schedule.
• These periods are our current plan; this policy will be updated if they change.

You can ask us what we hold about you, ask us to correct or delete it, withdraw analytics consent in the app, and request deletion of the business's cloud copy at any time. Write to info@wizardsofts.com.

The on-phone database is encrypted, backups are locked with your password or recovery code, and cloud traffic uses TLS. No system is perfectly secure, so we do not promise that data can never be lost or exposed.

The app is for businesses and is not directed at children under 18.

When we change this policy we will update the date at the top and, for important changes, tell you in the app.

WizardSofts • info@wizardsofts.com

আপনার হিসাবের রেকর্ড আপনার ফোনেই থাকে। পিন কখনও আমাদের কাছে পাঠানো হয় না। ব্যাকআপ ফাইল আপনার পাসওয়ার্ড দিয়ে তালা দেওয়া। অ্যাপে গুগল অ্যাডমব বিজ্ঞাপন আছে; যেখানে আইনে দরকার (যেমন ইইউ ও যুক্তরাজ্যে) সেখানে গুগলের সম্মতি টুল আগে জিজ্ঞাসা করে, অন্যত্র জিজ্ঞাসা ছাড়াই বিজ্ঞাপন দেখানো হয়। ব্যবহারের পরিসংখ্যান বন্ধ থাকে, আপনি চালু করলে চলে। মালিক চাইলে ক্লাউড কপি মুছে ফেলার অনুরোধ করতে পারেন (৭ দিন অপেক্ষার পর মোছা হয়)। (খসড়া অনুবাদ; পূর্ণ ইংরেজি নীতিই প্রযোজ্য।)