Privacy Policy

Who this policy covers

eERP is an enterprise resource planning app published by EDS India Pvt. Ltd of 1119-1120, Tower 5, RPS 12 Avenue, Mathura Road, Near Sarai Toll Plaza, 12/6 Milestone, Faridabad, Harayana-121004. It is not a consumer app: you can only use it with an organisation code and an account that your employer, or the organisation that subscribes to eERP, has issued to you.

That distinction matters for your data. Your employing organisation decides what personnel, attendance, payroll and customer records are held in eERP, and is the data controller (the data fiduciary under India's Digital Personal Data Protection Act, 2023) for them. EDS supplies and operates the software and acts as a processor on that organisation's instructions. If you want a record corrected or removed, your employer's HR or administration team is the fastest route; we act on their instructions.

This policy covers the eERP mobile app for Android and iOS. Your employer may have its own employee privacy notice covering the same records, and that notice applies alongside this one.

Data the app collects

The app collects only what it needs to do the job it is installed for. Nothing below is gathered for advertising or profiling.

Permissions the app requests

Your device will ask you to approve the sensitive permissions below the first time a feature needs one. You can withdraw any of them later in your device settings.

Why we process the data

• To let you in. Verifying your organisation code, username and password, keeping you signed in for the life of your session token, and showing you only the modules your role allows.
• To run the features you use. Recording attendance punches, processing leave, short-leave, flexible-hour and expense submissions, issuing salary slips, and maintaining the task, appointment and customer records your work requires.
• To give your organisation a reliable attendance record. Storing the time and the place of each punch so that payroll and attendance reporting can be checked.
• To keep the service secure. Expiring session tokens, refusing requests from unsupported or altered app versions, and investigating misuse of an account.
• To support and improve the app. Diagnosing a problem you report, and keeping compatibility with the app versions in active use.
• To meet legal and statutory obligations. Payroll, tax and employment records that your organisation is required to keep.

We do not use your data for automated decisions that affect you without a person involved, and we do not profile you.

Our lawful basis

Where the Digital Personal Data Protection Act, 2023 applies, your organisation processes your data for the specified purpose of operating your employment, and the app asks for your consent before reading your location. Where the EU or UK GDPR applies, the bases are the performance of your employment contract, your organisation's legal obligations as an employer, and its legitimate interest in an accurate attendance and expense record; location is additionally supported by the permission you grant on your device, which you can withdraw at any time.

Who the data is shared with

We do not sell your personal data, and we do not share it with advertisers or data brokers. Data is disclosed only as follows.

• Your employing organisation. The records you submit are visible to the colleagues your organisation authorises — typically your reporting manager, and the HR, payroll, accounts or administration staff who handle the module in question.
• Our hosting and infrastructure providers. eERP runs on servers operated for us at Window server, India. They hold the data on our behalf under contract and may not use it for their own purposes.
• Your device platform. Converting punch coordinates into a street address uses the geocoding service built into your operating system, which is provided by Google on Android and by Apple on iOS. That request is handled under their own privacy terms.
• Professional advisers and authorities. We disclose data where we are legally required to, for example in response to a lawful order from a court or a regulator, and where it is necessary to establish or defend a legal claim.
• A successor. If our business or the eERP product is reorganised, merged or acquired, data may pass to the successor entity, which remains bound by this policy until it provides notice of a replacement.

What is stored on your device

To keep you signed in and save you retyping, the app stores a small amount of data locally in the platform's protected credential store — the Android Keystore or the iOS Keychain — rather than in ordinary app files:

• your session token, employee code, organisation code and name, subscription reference and module permissions;
• and, only if you tick “Remember” on the sign-in screen, the organisation code, username and password for that sign-in type.

Saved sign-in details are written only after a sign-in succeeds, never leave your device, and are deleted as soon as you clear the “Remember” tick. Leave the box unticked and nothing of your credentials is kept. Files you download from the app, such as a salary slip PDF, stay in your device's own storage until you delete them.

Signing out or uninstalling the app removes the locally stored items. It does not delete the records already submitted to your organisation.

How the data is protected

• All traffic between the app and our servers uses HTTPS with TLS encryption. The app makes no unencrypted connection.
• Access is token-based, and the token carries an expiry. Once it expires the app signs you out and clears the stored session, so a lapsed session cannot be reused.
• Credentials and session data held on the device use the operating system's hardware-backed keystore, protected by your device lock.
• Within eERP you see only the modules your organisation has granted your role.
• The server checks the app identifier and version on every request and rejects builds it does not recognise.

No system is perfectly secure. Please keep your device locked and your password private, and tell us and your employer promptly if you believe your account has been used by someone else. Report a security concern to erp@eds-india.in.

How long it is kept

Attendance, leave, expense, payroll and customer records are kept for as long as your organisation's subscription and its own retention schedule require, which is usually the length of your employment plus the period that employment, tax and company law oblige it to keep them. Your organisation sets that schedule; we hold the records for it and delete them on its instruction or when the subscription ends, subject to any period we are required to retain them by law. Server logs that include IP addresses are kept for a short operational period and then deleted. Data stored on your device lasts until you sign out, clear “Remember”, clear the app's data or uninstall it.

Your rights and choices

Subject to the law that applies to you, you may ask to access the personal data held about you, to have it corrected, to have it erased, to restrict or object to its processing, to receive a copy in a portable form, and to withdraw a consent you have given. You may also nominate another person to exercise these rights on your behalf where the Digital Personal Data Protection Act, 2023 provides for it.

Because your employer controls these records, please send such a request to its HR or administration team first; they can act on most of them directly. If you contact us instead, we will pass your request to your organisation and support it in responding. We answer within the period the applicable law allows, normally 30 days.

Choices you control yourself

• Location. Grant or revoke it in Settings at any time. Revoking it stops location-stamped punching and nothing else.
• Attachments. Nothing is uploaded unless you pick a file and submit it.
• Saved sign-in. Clear the “Remember” tick to erase the stored credentials immediately.
• Local data. Sign out, or clear the app's storage, to remove what the app keeps on the device.

If you are not satisfied with our response, you may complain to your data protection authority — the Data Protection Board of India, or your national supervisory authority in the EU or UK.

Account and data deletion

eERP accounts are issued and withdrawn by your employing organisation, so the app has no self-service delete button: removing your own account would destroy attendance and payroll records your employer is required to keep.

To have an account closed or data deleted:

1. Ask your organisation's HR or eERP administrator. They can disable the account immediately, which revokes access on every device.
2. Or write to us at erp@eds-india.in with your name, organisation code and employee code, and the request you are making. We will verify the request with your organisation's administrator and then act on it.

When an account is closed, its sign-in credentials and session tokens are deleted. Records that your organisation or the law requires it to retain — attendance, payroll, tax and statutory employment records — are kept for the remainder of that retention period and then deleted. To remove everything the app holds on your own device, sign out and uninstall it.

Data safety summary

This table restates the sections above in the form used by app store data-safety labels.

Data is encrypted in transit. You can request deletion of your data as described in section 11.

Children

eERP is a workplace tool for employees and authorised staff of subscribing organisations. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child's data has reached the app, contact us and we will remove it.

Changes to this policy

We update this policy when the app's data practices change. The effective date at the top of the page always shows the current version. For a change that materially affects you — a new category of data, or a new recipient — we will notify your organisation before it takes effect, and where the law requires it we will ask for your consent again. Continuing to use the app after a change takes effect means the updated policy applies to you.

Contact us

For any question about this policy, or to make a request about your data, contact our privacy team. If your question is about a record in the app, your organisation's HR or eERP administrator can usually resolve it faster.