Privacy Policy

This Privacy Policy explains how Woodapple Software Solutions Pvt. Ltd. ("ERPCA", "we", "us" or "our") collects, uses, shares and protects information when you use the ERPCA web application, mobile apps, client portal and integrations, and the website at www.erpca.com (together, the "Services"). It should be read with our Terms of Service.

1. Who is responsible

For information about visitors to our website and about the people who hold ERPCA accounts, we decide how the information is used. For the records a firm keeps in ERPCA about its own clients ("Customer Data"), the firm decides what is collected and why, and we process that data on the firm's behalf and on its instructions.

2. Information we collect

• Account information: name, email address, mobile number, firm name, role and login details of users who register or are invited to ERPCA.
• Customer Data: information firms enter into or upload to ERPCA, such as client names, PAN, GSTIN and contact details, documents, working papers, tasks, timesheets, invoices and messages.
• Information you send us: what you enter in contact, demo, careers and other forms, and in chat or email with our team, including any CV you upload.
• Usage and device information: IP address, browser and device type, pages viewed, referring page and the date and time of access. When you use our website chat, we use your IP address to show our team your approximate city, and we record the pages you visit during that conversation so we can help you.
• Payment information: invoices and payment status. Card and bank details are entered on our payment providers' pages (such as Razorpay or PayPal) and are not stored by us.
• Information from Google: if you connect a Google account, the information described in section 4.

3. How we use information

• To provide, operate, maintain and secure the Services, and to authenticate users.
• To run the features you ask for, such as reminders, client communication, document storage and integrations.
• To respond to enquiries, provide support and onboarding, and send service messages such as invoices, security alerts and changes to our terms.
• To send product news where you have agreed to receive it. You can unsubscribe at any time.
• To understand how the Services are used, fix problems and improve them, using aggregated or de-identified information where possible.
• To meet legal, tax and regulatory obligations and to protect our rights and users.

We do not sell personal information or Customer Data, and we do not use Customer Data for advertising.

4. Google user data

Some ERPCA features let you connect a Google account, for example to sign in with Google or to store and share client documents in Google Drive. ERPCA only requests the permissions needed for the features you choose to use, and Google shows you those permissions on its consent screen before you agree.

What we access

• Sign in with Google: your name, email address and profile picture, used to create and sign in to your ERPCA account.
• Google Drive: the files and folders that ERPCA creates in your Drive or that you choose to use with ERPCA, so that client documents uploaded in ERPCA are stored in, and can be opened from, your firm's Drive.
• Gmail: if you connect your mailbox to send email from ERPCA, permission to send the emails you create in ERPCA, such as document requests, reminders and invoices to your clients, from your own address.

How we use it

We use Google user data only to provide and improve the user-facing features you have enabled in ERPCA. We do not use it to serve advertisements, we do not sell it, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.

How we share it

We do not transfer Google user data to third parties except as necessary to provide or improve the features you use, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you. Our hosting provider stores it on our behalf under confidentiality and security obligations.

Who can see it

Our staff do not read Google user data unless you give us permission for a specific support request, it is necessary for security purposes such as investigating abuse, or it is required by law.

Storage, retention and deletion

Google user data is stored with the same protections as the rest of the Services and kept only while the related feature is connected. You can disconnect ERPCA at any time from your Google account at myaccount.google.com/permissions or from ERPCA's settings. To ask us to delete Google user data we hold, email support@erpca.com; we will delete it within 30 days unless the law requires us to keep it. Files stored in your own Google Drive remain in your Drive and under your control.

Google Limited Use disclosure

ERPCA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

We share information only as needed to run the Services, with:

• Service providers who process data on our behalf under contract, such as cloud hosting, email delivery, messaging, payment processing and IP geolocation providers.
• Integrations you enable, such as Google, Microsoft OneDrive, Dropbox, Tally, the GST and e-invoicing systems, WhatsApp messaging and payment gateways. Information you send through them is also governed by their providers' policies.
• Authorities, where the law requires it or to protect the rights, property or safety of our users, the public or us.
• A successor in a merger, acquisition or sale of assets, with notice to you.

6. Security

We use administrative, technical and physical safeguards appropriate to the information we hold, including encryption in transit (HTTPS), access controls by role, and restricted administrative access. No system is completely secure; if we become aware of a breach affecting your information, we will notify you and the authorities as the law requires.

7. Retention

We keep account information and Customer Data for as long as the account is active, and afterwards for the export period described in our Cancellation & Refund Policy, after which it is deleted, except where we must keep records for legal, tax or accounting reasons. Enquiries and job applications are kept for as long as needed to respond and for a reasonable period afterwards.

8. Cookies

Our website uses cookies that are needed for it to work, such as session and security cookies for signing in and for forms. Where we use analytics, we do so to understand how the website is used, and you can block or delete cookies in your browser settings.

9. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can ask to access, correct, update or erase your personal information, withdraw consent you have given, and nominate another person to exercise your rights. Users of a firm's ERPCA account should first contact that firm, which controls its Customer Data. To make a request or raise a grievance, write to us at support@erpca.com. We respond within the time the law requires.

10. Children

The Services are meant for professional firms and are not directed at children. We do not knowingly collect personal information from children.

11. International transfers

ERPCA is operated from India. If you use it from another country, your information may be processed in India or in other countries where our service providers operate, with safeguards required by applicable law.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for material changes, notify account administrators before they take effect.

13. Contact and grievances

Woodapple Software Solutions Pvt. Ltd. (ERPCA)
Near Bari Hotel, Vikas Naka, Kalyan / Dombivli, Maharashtra, India
Email: support@erpca.com · Phone: +91 845 105 1084