Privacy Policy
WAM ERP ("we", "us", "our") is operated by WAM ERP Pvt Ltd, Maharashtra, India. This policy explains what data we collect from you, how we use it, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What we collect
- Account data: name, email, phone, company name, GSTIN, address.
- Operational data: what you enter into WAM ERP — items, customers, vendors, invoices, etc. You own this data. We are a data processor.
- Usage data: IP, browser, pages viewed, actions taken. Used for security and product improvement.
- Payment data: processed by Razorpay / Stripe. We never see your full card number.
2. How we use your data
- To provide the WAM ERP service you signed up for.
- To send you transactional emails (invoices, alerts, password resets).
- To send you product news (you can opt out from any email).
- To investigate abuse or comply with lawful requests.
3. Where your data lives
All operational data is stored on AWS Mumbai (BOM3) region. We do not transfer your data outside India for processing unless you explicitly choose Stripe billing (in which case Stripe's privacy policy applies for payment data only).
4. How long we keep it
- Active accounts: as long as you keep your account.
- Cancelled accounts: 30 days, then permanently deleted (full export emailed before deletion).
- Backups: 30-day rolling.
- Statutory records: as required by Indian law (e.g., GST records — up to 8 years).
5. Your rights (DPDP Act)
- Right to access: download your data anytime from your dashboard.
- Right to correction: edit any data inside the app.
- Right to erasure: request deletion at legal@wamerp.com.
- Right to grievance redressal: contact our Data Protection Officer at dpo@wamerp.com. Response within 14 days.
6. Sharing with third parties
We don't sell or rent your data. We share strictly with:
- Razorpay / Stripe — payment processing
- AWS — hosting
- SMTP provider — transactional email
- Government / law enforcement — only when legally required
7. Cookies
We use a single session cookie (HttpOnly, Secure, SameSite=Lax) to keep you logged in. We do not use third-party advertising cookies.
8. Children
WAM ERP is a B2B product. We do not knowingly collect data from anyone under 18.
9. Changes to this policy
We'll email you 14 days before any material change.
10. Contact
Data Protection Officer · WAM ERP Pvt Ltd · Pune, Maharashtra · dpo@wamerp.com