Privacy Policy
We take data privacy and confidentiality seriously. Cloud ERP 360 is committed to protecting your personal and business records with transparent practices, secure systems, and strict compliance controls.
1. Overview & Privacy Principles
At Cloud ERP 360 ("we", "our", or "us"), we are committed to upholding the highest standards of data protection, privacy, and confidentiality. This Privacy Policy explains how we collect, store, process, protect, and handle personal and commercial information when you interact with our website, create an account, or use our cloud-based software suite.
- check_circle We operate under strict privacy-by-design and data-minimization principles.
- check_circle We collect only the information necessary to fulfill our software-as-a-service (SaaS) obligations.
- check_circle We never sell, rent, monetize, or trade your personal or business data to third parties or marketing networks.
2. Information We Collect
We collect information in three ways: information you directly provide, data automatically captured through system logs, and transactional metadata generated during business operations.
- check_circle Account Information: Name, business email, telephone number, business address, company registration, and user credentials.
- check_circle Operational ERP Data: Master catalog items, inventory transactions, customer/vendor contact books, invoices, and accounting journals inputted into your tenant portal.
- check_circle Technical & Diagnostic Logs: IP addresses, browser agent, operating system, access timestamps, and error telemetry used for performance optimization.
- check_circle Payment Data: Payment card details and billing receipts are processed securely by Paddle, our Merchant of Record. We do not store raw card numbers or CVV codes on our servers.
3. How We Use Your Information
We utilize collected information solely for valid operational, contractual, and regulatory compliance purposes.
- check_circle Providing, running, and maintaining the Cloud ERP 360 platform and subscribed modules.
- check_circle Processing subscription billing, issuing receipts, and administering account licenses via Paddle.
- check_circle Integrating with statutory tax bodies (such as FBR digital invoicing and provincial tax departments) per your system configuration.
- check_circle Delivering customer support, onboarding guidance, and responding to service inquiries.
- check_circle Monitoring system health, detecting anomalous activities, and mitigating security threats or fraud.
4. Paddle Payment Gateway & Third-Party Processors
To ensure global security and compliance with payment standards, all payment processing and billing transactions are executed through authorized, PCI-DSS Level 1 compliant service partners.
- check_circle Payment Processing: Paddle (Paddle.com Market Ltd) acts as our Merchant of Record for payments, order fulfillment, tax calculations, and subscription handling.
- check_circle Paddle Privacy: When making a payment, your billing information is collected and processed under Paddle’s Privacy Policy (paddle.com/legal/privacy).
- check_circle Cloud Infrastructure: Tier-IV data centers and cloud hosting providers adhering to ISO 27001, SOC 2, and GDPR security standards.
- check_circle Communication Relays: Transactional email (SMTP) and SMS gateways used strictly to transmit account verifications, password resets, and critical alerts.
5. Data Security & Multi-Tenant Isolation
We implement defense-in-depth security measures to protect your commercial and personal data from unauthorized access, accidental alteration, disclosure, or destruction.
- check_circle Transit Encryption: All traffic between your browser and our servers is encrypted using modern TLS 1.3 / HTTPS encryption.
- check_circle Rest Encryption: Sensitive records, database backups, and access tokens are secured using industry-standard AES-256 encryption.
- check_circle Tenant Isolation: Enterprise multi-tenancy ensures strict separation of tenant databases with automated business ID scoping across all database queries.
- check_circle Access Governance: Role-based permissions (RBAC), multi-factor authentication (MFA), and audit log tracking for all administrative actions.
- check_circle Automated Backups: Redundant daily backups stored in geographically distributed, encrypted storage vaults.
6. Data Retention & Account Deletion
We retain personal and business records only for as long as necessary to provide the Service, comply with statutory tax and accounting obligations, and resolve legal disputes.
- check_circle Active Accounts: Data is maintained throughout the active tenure of your subscription.
- check_circle Cancelled Subscriptions: In the event of account cancellation, your data remains accessible for export in read-only mode for sixty (60) days.
- check_circle Right to Erasure: You may request complete, permanent deletion of your account and associated database records at any time by contacting privacy@clouderp360.com.
- check_circle Regulatory Records: Statutory fiscal invoices may be retained in anonymized formats where required by statutory tax audit regulations.
7. Your Privacy Rights & Controls
Regardless of your geographic location, we provide comprehensive rights over your personal and commercial data.
- check_circle Right of Access: You may request a complete copy of the personal information stored in relation to your profile.
- check_circle Right of Rectification: You can update and correct inaccurate account information directly from your user profile settings.
- check_circle Right to Data Portability: Export your inventory, customer records, and ledger balances at any time in CSV or Excel format.
- check_circle Right to Restrict Processing: You can adjust optional system settings or opt out of non-essential product notifications.
8. Cookies & Local Storage Technologies
We use cookies and similar browser storage technologies to maintain platform security, preserve user sessions, and deliver a seamless application experience.
- check_circle Essential Cookies: Necessary for user authentication, session security, and Cross-Site Request Forgery (CSRF) protection.
- check_circle Preference Cookies: Used to store user interface configurations such as active branch selection, language, and theme mode.
- check_circle Performance Analytics: Anonymized operational telemetry to measure page response times and identify system bottlenecks.
- check_circle Cookie Controls: You can manage or disable cookies via your browser settings, though disabling essential cookies may impact platform functionality.
9. International Transfers & Legal Compliance
Where data is transferred internationally across our global cloud network, we ensure robust contractual safeguards and standard data protection clauses are strictly in place.
- check_circle All cross-border transfers comply with internationally recognized data protection principles.
- check_circle We do not disclose tenant data to government bodies or law enforcement agencies except when legally mandated by a valid court order or statutory requirement.
10. Contacting Our Data Protection Team
If you have any questions, concerns, or requests regarding this Privacy Policy or our data management practices, our Data Protection Team is available to assist you.
- check_circle Privacy Desk Email: privacy@clouderp360.com / support@clouderp360.com.
- check_circle Billing & Legal Inquiries: legal@clouderp360.com.
- check_circle Headquarters: Office No.305, 3rd Floor, Makkah Tower, E-11/4 Islamabad, Pakistan.
- check_circle International Office: 85 Great Portland Street, First Floor, London, UK, W1W 7LT.
- check_circle Support Hotline: 051 6039360 / +92 319 6555863.