Privacy Policy

1. Introduction

Opsmatiq ("we", "us", "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your information when you use our cloud-based ERP platform ("Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information. When you register, we collect:

• Organization name and tenant identifier
• Administrator name and email address
• Billing and payment information (processed securely by our payment provider)

2.2 User Information. For each user within your organization, we collect:

• Name, email address, and role assignments
• Authentication credentials (passwords are hashed and never stored in plain text)

2.3 Business Data. Data you enter into the Service during normal use, including but not limited to:

• Financial records (invoices, bills, journal entries, payments)
• Customer and vendor information
• Inventory and product data
• Sales orders, purchase orders, and quotations
• Point-of-sale transaction records

2.4 Usage Data. We automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Feature usage patterns (aggregated, not individual-level)

3. How We Use Your Information

We use collected information to:

• Provide the Service — Process, store, and display your business data within your tenant environment
• Manage your account — Authentication, authorization, billing, and subscription management
• Improve the Service — Analyze aggregated usage patterns to improve features and performance
• Communicate — Send service announcements, security alerts, and support responses
• Ensure security — Detect and prevent fraud, abuse, and unauthorized access
• Comply with law — Meet legal obligations, respond to lawful requests, and enforce our Terms

We do not sell your personal information or business data to third parties. We do not use your business data for advertising purposes.

4. Multi-Tenant Data Isolation

Opsmatiq operates as a multi-tenant platform. Your data is logically isolated from other organizations' data through the following measures:

• Every data record is associated with your unique tenant identifier
• Database queries are automatically filtered to your tenant scope
• API authentication enforces tenant boundaries on every request
• Enterprise plan customers may opt for physically separate database instances for additional isolation

Our platform administrators cannot access your business data without explicit authorization and a documented business reason.

5. Data Storage and Security

5.1 Storage. Your data is stored on secure cloud infrastructure. Database backups are performed regularly and stored in encrypted form.

5.2 Encryption. Data is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted using industry-standard encryption (AES-256).

5.3 Access Controls. Access to production systems is restricted to authorized personnel using multi-factor authentication. All access is logged and audited.

5.4 Security Practices. We implement:

• Regular security assessments and vulnerability scanning
• Secure software development practices
• Incident response procedures
• Employee security training

6. Data Sharing

We may share your information only in the following circumstances:

• Service providers — With trusted third-party providers who assist in operating the Service (hosting, payment processing, email delivery), bound by confidentiality obligations
• Legal requirements — When required by law, regulation, or legal process
• Business transfers — In connection with a merger, acquisition, or sale of assets, with prior notice to affected customers
• With your consent — When you explicitly authorize sharing with a specific third party

7. Data Retention

7.1 Active Subscription. We retain Your Data for the duration of your active subscription.

7.2 After Cancellation. Upon subscription cancellation, we retain Your Data for 30 days to allow for export. After this period, Your Data is permanently deleted from our primary systems.

7.3 Backups. Deleted data may persist in encrypted backups for up to 90 days, after which backup rotation will remove it.

7.4 Legal Obligations. We may retain certain information as required by law (e.g., billing records, audit logs).

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your personal data (subject to legal retention requirements)
• Export — Export your business data in standard formats at any time
• Restriction — Request restriction of processing of your personal data
• Objection — Object to processing of your personal data for specific purposes

To exercise any of these rights, contact us at privacy@opsmatiq.com. We will respond within 30 days.

9. Cookies and Tracking

The Service uses cookies strictly for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies within the application.

• Authentication cookie — Maintains your login session (essential, cannot be disabled)
• Preference cookies — Store your UI preferences such as theme and language settings

10. International Data Transfers

Your data may be processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms as required by applicable data protection laws.

11. Children's Privacy

The Service is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@opsmatiq.com
• Website: opsmatiq.com