This policy explains what personal data ERPY collects when you use this website, the ERPY console and the workspaces ("tenants") created with it, why we collect it and what rights you have.
1. Who we are
The data controller is [Legal entity name, legal form], [Registered address], [Company registration number] ("ERPY", "we"). You can reach us at erpyteam@gmail.com or through the contact page.
2. Data we collect
- Account data: name, email address, sign-in identifiers and session information, collected when you create an account.
- Tenant data: company name, tenant identifier, description and logo that you provide when creating or editing a tenant, and the link between your account and the tenants you own or use.
- Business data: the information you and your team enter in a workspace (for example products, stock, customers and suppliers).
- Contact and support requests: name, email address, subject and message sent through the contact form, and for support requests sent from the console, the selected category, the tenants concerned and, if you choose to include them, technical details (page, browser, language and time zone).
- Technical data: IP address, browser information and request logs generated when you use the service.
3. Why we use it
- To create and secure your account and control access to each workspace (performance of the contract).
- To provision, operate and support your tenants (performance of the contract).
- To answer your requests sent through the contact form or the console support page (legitimate interest, performance of the contract, or pre-contractual steps).
- To keep the service secure, prevent abuse and troubleshoot incidents (legitimate interest).
- To comply with our legal obligations.
We do not sell your personal data and we do not use it for advertising.
4. Business data in your workspace
For the business data your organization stores in a workspace, the organization that owns the tenant decides what is collected and why. ERPY processes that data on its behalf and only to provide the service.
5. Service providers
We rely on the following providers, which process data on our behalf:
- Clerk: authentication, user accounts and sessions.
- Cloudflare: hosting, databases, file storage (such as tenant logos) and network security.
- Resend: delivery of the emails sent through the contact form and the support page.
Some of these providers may process data outside the European Economic Area. In that case, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.
6. How long we keep data
- Account data: as long as your account exists, then deleted within a reasonable period, except where the law requires us to keep it.
- Tenant and business data: as long as the tenant exists. Deleting a tenant deletes its database and logo.
- Contact and support requests: up to three years after our last exchange.
- Technical logs: for a limited period, for security and troubleshooting.
7. Cookies
We only use cookies and similar technologies that are needed for the service to work, in particular to keep you signed in, and to remember display preferences such as the language and the light or dark theme. We do not use advertising cookies.
8. Your rights
You can request access to, correction or deletion of your personal data, restrict or object to its processing, and ask for data portability. To exercise these rights, write to erpyteam@gmail.com. You may also lodge a complaint with your data protection authority (in France, the CNIL).
9. Security
Each tenant has its own isolated database, access is checked on every request, and connections are encrypted. No system is perfectly secure, but we work to protect your data and to react quickly to incidents.
10. Changes
We may update this policy. The date at the top of the page shows the latest version. We will inform you of significant changes by email or in the console.