Legal

Privacy Policy

Last updated: March 21, 2026

Your privacy is important to us. This policy explains exactly what data we collect, how we use it, and how we protect it.

🔒 SSL Encrypted🚫 No Data Selling🔑 HTTPOnly Cookies🏢 Multi-Tenant Isolation

1. Overview

Prozync Innovations ("we," "us," or "our") operates SmartERP (the "Service"). This Privacy Policy explains how we collect, use, protect, and share your information when you use our platform. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information you provide directly: name, email address, phone number, company name, job title, and payment information. We also collect usage data such as IP addresses, browser type, pages visited, and time spent on features. For our mobile application, we may collect device identifiers and push notification tokens (FCM tokens) solely for the purpose of delivering in-app notifications to you.

3. How We Use Your Information

We use your information to: (a) provide, operate, and maintain the Service; (b) process transactions and manage subscriptions; (c) send transactional emails such as OTP verification codes and payroll notifications; (d) send push notifications for job assignments, attendance reminders, and important alerts; (e) analyze usage patterns to improve the Service; (f) respond to customer support inquiries; (g) comply with legal obligations. We do NOT use your data for advertising or sell it to third parties.

4. Data Storage & Security

Your data is stored on Neon PostgreSQL (a secure managed cloud database). Your company's data is isolated from all other tenants using Row-Level Security (RLS) policies — meaning your employees can never see another company's data. All data in transit is encrypted via HTTPS/TLS. Authentication uses JWT tokens with short expiry times and rotating refresh tokens. We use Sentry for error monitoring, which may capture anonymized diagnostic information.

5. Data Sharing

We do not sell or rent your personal information. We may share your information with trusted third-party service providers who assist us in operating the Service: Neon (database hosting), Resend (email delivery), Razorpay (payment processing), Firebase (push notifications), Cloudinary (file/image storage), and Sentry (error tracking). Each provider is bound by strict data processing agreements and GDPR-compliant policies.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or tax compliance purposes. You may request a full export of your data at any time by emailing prozyncinnovations@gmail.com.

7. Your Rights

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time. To exercise any of these rights, contact us at prozyncinnovations@gmail.com. We will respond within 30 days.

8. Cookies & Tracking

We use two categories of cookies and browser storage: ESSENTIAL (always active, no consent required): HTTPOnly session cookies — user_access_token, user_refresh_token, superadmin_access_token, superadmin_refresh_token — are used exclusively for authentication. These are set by our backend, cannot be read by JavaScript, and are never shared with third parties. FUNCTIONAL (first-party, no consent required): A sidebar_state cookie stores your UI layout preference (expanded/collapsed). It contains no personal data. NON-ESSENTIAL (requires your consent): With your explicit consent, we load Vercel Analytics to understand aggregate page performance (no personal profiles are built), and Sentry Session Replay to record anonymised screen recordings for debugging (inputs are always masked). Your consent choice is stored in your browser's localStorage under the key "cookie_consent" and is never sent to our servers. You may change or withdraw your consent at any time by clicking the "Cookie Preferences" button in the footer of any page.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at prozyncinnovations@gmail.com and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice in the Service. The date at the top of this page indicates when the policy was last updated. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

For any privacy-related questions, data requests, or concerns, please contact our privacy team at: prozyncinnovations@gmail.com. We are committed to resolving any complaints about our collection or use of your personal information.

Privacy concerns or data requests?

Email us and we'll respond within 30 days. We take all privacy requests seriously.

prozyncinnovations@gmail.com

© 2026 Prozync Innovations. All rights reserved.

TermsPrivacyHome