Privacy Policy

UMMIGO ERP collects enterprise operational data required to provide our cloud-hosted SaaS platform. This includes:

• Account Registration Data: Business name, registered email address, company NTN/STRN, designated administrator contact details.
• Transaction & Operational Records: POS invoice logs, inventory ledger entries, payroll salary processing records, general accounting journals.
• Employee HR Data: Employee names, CNIC numbers, biometric attendance logs, payroll information (processed under NDA under your written consent).
• Device & Technical Logs: POS terminal IDs, cashier session audit logs, browser device fingerprints, and API request timestamps.
• Customer Records: Sales customer profiles, loyalty account balances, and purchase transaction histories (owned by tenant enterprise).

All enterprise data collected by UMMIGO ERP is used strictly for the following operational purposes:

• Delivering core SaaS platform functionality: billing, inventory, payroll, and financial ledger services.
• Providing technical customer support, training, and software onboarding assistance.
• Generating automated email and SMS notifications for system events, low stock alerts, and payroll processing.
• Improving platform performance through anonymized behavioral analytics and error telemetry.
• Maintaining compliance with applicable Pakistani laws (FBR, SECP) as legally mandated.

We never sell, rent, or share your enterprise data with advertising networks or third-party data brokers.

Enterprise tenant data is stored in Tier-4 certified cloud data centers with the following safeguards:

• AES-256 encryption for all data at rest; TLS 1.3 for all in-transit communications.
• Isolated PostgreSQL database schemas per tenant ensuring zero cross-tenant data access.
• Automated daily incremental backups with 90-day point-in-time recovery (PITR) history.
• Active data retained for the full duration of your active enterprise subscription.
• Upon contract termination, export capability is provided for 60 days before permanent deletion.

UMMIGO ERP integrates with the following third-party service providers who may process your data under strict data processing agreements (DPA):

• Payment Processors: Stripe, PayPal, Raast — for enterprise subscription billing.
• Email Delivery: SendGrid / AWS SES — for system notification and payslip emails.
• SMS Gateway: Twilio / local gateway — for OTP authentication and alerts.
• Cloud Infrastructure: AWS / Railway — for database hosting and compute servers.

As an enterprise tenant, you hold the following rights over your business data hosted on UMMIGO ERP:

• Right to Export: Request a full CSV/JSON export of all transaction, HR, and accounting data at any time.
• Right to Correction: Request amendments to incorrect business registration details.
• Right to Deletion: Request permanent data deletion upon subscription cancellation (subject to legal retention obligations).
• Right to Portability: Receive your data in machine-readable structured formats for migration to other systems.