Privacy Policy

Welcome to StarTraack ERP, a business management platform accessible via web portal, Android, and iOS applications. We are dedicated to respecting and protecting the privacy rights of our users, employees, and client organizations.

This Privacy Policy documents the specific categories of data we collect, process, and safeguard, ensuring absolute transparency regarding how enterprise workspaces are operated.

In order to provide our comprehensive enterprise resource planning services, we collect and store various categories of data:

• Personal Identity Profiles: Full name, verified business email address, active telephone numbers, unique employee IDs, job titles, and assigned departments.
• Credential Details: Account usernames, permission tier allocations, role assignments, and authentication hashes.
• Operational logs: Attendance check-ins, timesheet entries, task descriptions, leaf requests, ticket responses, customer forms, and sales orders.
• Device Metadata: IP addresses, browser specifications, mobile device identifiers (UUID), operating system platforms, and transaction logging.

To enable real-time tracking, document uploading, and communication features, our Android and iOS mobile applications may request explicit authorization for the following hardware permissions:

• Camera Access: Utilized exclusively for capturing profile photos or uploading physical receipt photos for expense claims.
• Geographical Location: Utilized for verifying physical attendance check-ins or mapping verified routing logs for active field personnel.
• Storage Read/Write: Required to upload business documents, download timesheet exports, and store document attachments in the repository.
• Push Notifications: Required to immediately deliver approval alerts, task assignments, and internal announcements.
• Internet Connectivity: Necessary to maintain data sync and connection status with ERP cloud services.

We process collected data in strict accordance with the instructions of your employer, primarily for the following operations:

• Validating credentials and providing secure login access.
• Processing corporate attendance, logging work hours, tracking projects, and compiling payroll statistics.
• Facilitating task assignments, client support tickets, and welcome announcements.
• Generating operational reports, performance logs, and organizational map plots.
• Troubleshooting platform errors, monitoring system health, and enforcing network protection rules.

Geographical location is collected and used strictly when enabled by your organization's administrators to support specific business functions, such as location-based attendance check-ins or active field activity routing. We do not track your location in the background when the application is closed unless background tracking is explicitly configured and authorized for active shift routes.

We do not sell personal data under any circumstances. Access to your information is restricted to the following authorized parties:

• Your employer organization and their authorized administrators managing the ERP workspace.
• Trusted service partners (e.g., hosting servers, notifications providers, map service providers) to perform designated application operations.
• Regulatory agencies or judicial authorities when required to meet statutory legal obligations.

We deploy robust, industry-standard security safeguards to protect enterprise data assets, including:

• Mandatory HTTPS encryption for all API communication in transit.
• One-way cryptographically hashed password databases.
• Secure database isolation and role-based permissions access limits.
• Encrypted storage volumes and automated database backups.

We store your data only as long as your organization maintains an active subscription workspace with StarTraack ERP, or as long as required to resolve transactional disputes, perform system audits, and comply with state and local retention statutes.

To support specific integrations, our platform links with external service providers including Firebase SDK, Google Maps API, and Apple Push Notification Services (APNs).

You have the right to request access to, edit, or delete your personal data records stored in the ERP platform. These options are subject to regulatory restrictions and workspace rules enforced by your employer organization. Please contact your internal HR officer or IT administrator to initiate these requests.

For questions or assistance regarding this Privacy Policy statement, please get in touch with our team: