Privacy Policy

1. Who We Are

ERP Smart Cloud is a software-as-a-service (SaaS) product owned and operated by SaraCloud Inc, a corporation incorporated under the laws of the State of Colorado, United States (Entity ID: 20261029600), with its registered office at 1500 N Grant St, Suite R, Denver, CO 80203, USA.

This Privacy Policy describes how SaraCloud Inc ("we," "us," or "our") collects, uses, stores, shares, and protects personal information when you access or use the ERP Smart Cloud platform (the "Service"), including our website at erpsmartcloud.com and any associated applications or APIs.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, use our Service, or communicate with us, we may collect:

• Account information: Full name, email address, phone number, job title, company name, and password (stored in hashed form).
• Billing information: Payment card details (processed and stored by our third-party payment processor; we do not store raw card numbers), billing address, and transaction history.
• Business information: Marketplace seller IDs, store names, product data, order data, inventory records, supplier information, and logistics data that you import or sync into the platform.
• Communications: Messages, support tickets, feedback, and survey responses you send to us.

2.2 Information We Collect Automatically

When you access our Service, we automatically collect certain technical and usage information:

• Log data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Device information: Device type, unique device identifiers, and screen resolution.
• Usage data: Features used, clicks, navigation paths, session duration, and error reports.
• Cookies and similar technologies: See Section 5 for details.

2.3 Information from Third-Party Platforms

When you authorize ERP Smart Cloud to connect to your marketplace accounts (such as Temu, Shopee, Mercado Libre, or Ozon), we receive data from those platforms through their official APIs, including order data, product listings, inventory levels, buyer information (as permitted by each platform), and financial settlement data. We use this data solely to provide and improve the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Processing orders, syncing inventory, generating reports, and all core ERP platform functionality.
• Account management: Creating and maintaining your account, authenticating users, and processing billing.
• Customer support: Responding to inquiries, troubleshooting issues, and providing technical assistance.
• Service improvement: Analyzing usage patterns to improve performance, add features, and fix bugs.
• Communications: Sending product updates, security alerts, and transactional emails. Where required by law, we will obtain your consent before sending marketing communications.
• Legal compliance: Complying with applicable laws, regulations, legal processes, and government requests.
• Security: Detecting, preventing, and responding to fraud, abuse, or security threats.

We process your personal data based on the following legal bases: (a) performance of a contract with you; (b) our legitimate business interests; (c) your consent where explicitly requested; and (d) compliance with legal obligations.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: We engage trusted third-party vendors to help operate our Service, including cloud hosting (Amazon Web Services), payment processing (Stripe), email delivery, and analytics. These vendors are bound by contractual obligations to protect your data and may only use it to provide services to us.
• Marketplace integrations: Data is transmitted to and from your authorized marketplace accounts (Temu, Shopee, Mercado Libre, Ozon, etc.) solely to execute the operations you request within the platform.
• Business transfers: If SaraCloud Inc is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
• Legal requirements: We may disclose information if required to do so by law or in response to valid legal process (such as a court order or subpoena), or to protect the rights, property, or safety of SaraCloud Inc, our customers, or the public.
• With your consent: We may share information for any other purpose with your explicit consent.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. The types of cookies we use include:

• Essential cookies: Required for the Service to function (e.g., session authentication, security tokens). You cannot opt out of these.
• Analytics cookies: Help us understand how users interact with the Service so we can improve it (e.g., page visit counts, feature usage). We use anonymized or aggregated data for this purpose.
• Preference cookies: Remember your settings and preferences (e.g., language, dashboard layout).

You can control non-essential cookies through your browser settings or our cookie consent banner. Disabling certain cookies may affect Service functionality. We do not use advertising cookies or share cookie data with advertisers.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data is retained for the duration of your subscription and for up to 90 days after account termination to allow for data export.
• Business data (orders, inventory, reports) is retained for the duration of your subscription. Upon termination, you may export your data within 30 days.
• Log and security data may be retained for up to 12 months for security and compliance purposes.
• Financial and billing records are retained for 7 years as required by applicable accounting and tax laws.

You may request deletion of your personal data at any time by contacting us at privacy@erpsmartcloud.com. We will process deletion requests within 30 days, subject to legal retention requirements.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls limiting internal access to personal data
• Regular security audits and vulnerability assessments
• Two-factor authentication (2FA) support for all user accounts
• Hosting on Amazon Web Services (AWS) with SOC 2 compliance

While we take reasonable precautions to protect your information, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

8. International Data Transfers

SaraCloud Inc is based in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

When transferring personal data from the European Economic Area (EEA), United Kingdom, or other regions with data transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

By using the Service, you acknowledge and consent to the transfer of your information to the United States and other countries in accordance with this Privacy Policy.

9. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable export of your personal data.
• Objection: Object to processing of your personal data based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.
• Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time.

Residents of California (under CCPA), the European Union/EEA (under GDPR), and other applicable jurisdictions may have additional rights. To exercise any of these rights, please contact us at privacy@erpsmartcloud.com. We will respond within 30 days and will not discriminate against you for exercising your privacy rights.

You may also unsubscribe from marketing emails at any time using the unsubscribe link in any such email.

10. Children's Privacy

The ERP Smart Cloud Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at privacy@erpsmartcloud.com.

11. Third-Party Links

Our Service may contain links to third-party websites or services (such as marketplace platforms, logistics providers, or payment processors) that are not owned or controlled by SaraCloud Inc. This Privacy Policy applies only to our Service. We have no control over, and assume no responsibility for, the content or privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users by email or in-app notification at least 14 days before the changes take effect
• Where required by law, obtain your consent before implementing changes

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.