← Back to Home

Privacy Policy

Last updated: September 2026

1. Overview

This policy explains how Astech Services collects, uses, and protects information when you use ERP by Astech Services on the web (erp.astechservices.in) and the Astech ERP mobile app (package in.astechservices.erp). By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

Account & organization data — name, email, phone, role, and the organization you sign in under, collected at registration and login.

Business data — inventory, products, customers, suppliers, invoices, payments, accounting entries, and other records you or your team enter into the Service. This data belongs to your organization and is isolated per tenant.

Camera — the mobile app can access your camera to capture a selfie for staff attendance/check-in. Photos are uploaded to your organization's account and are not accessed for any other purpose.

Location — the mobile app can access precise or approximate location to record where a field visit or attendance check-in happened. Location is only captured when you actively use a location-based feature, not tracked in the background.

Push notification data — we use Firebase Cloud Messaging to deliver alerts (new orders, payments, low stock). This requires a device token, which Firebase (Google) processes on our behalf under their own privacy terms.

Usage & device data — basic technical data such as device type, app version, and IP address, used for security and troubleshooting.

Aira, our AI sales assistant — if you chat with Aira on our website or start a video call with her, we collect your name, phone number, email, business name, and a summary or transcript of the conversation, so we can follow up about the Service. Video calls also request microphone and camera access to power the live avatar conversation; audio is processed to generate a transcript and is not stored as a raw recording. This applies to visitors who haven't yet signed up for an account, not just registered users.

3. How We Use Information

  • To operate and provide the core ERP features you and your organization use
  • To authenticate accounts and enforce tenant-level data isolation
  • To send transactional and operational push/email notifications
  • To process subscription payments (via Razorpay)
  • To maintain security, prevent abuse, and debug issues
  • To comply with applicable Indian law, including GST record-keeping requirements

We do not sell your data or your organization's business data to third parties.

4. Third-Party Services

We share limited data with the following processors, only as needed to run the Service:

  • Razorpay — payment processing for subscriptions
  • Firebase (Google) — push notification delivery for the mobile app
  • Gupshup — WhatsApp Business messaging for sales and support conversations
  • Hosting infrastructure — our application and database servers, used solely to run the Service

5. Data Storage & Security

Your data is stored on our servers with row-level tenant isolation, so one organization can never access another's data. Access to production systems is restricted to authorized personnel. While we take reasonable technical and organizational measures to protect your data, no method of transmission or storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, data is retained for 30 days (to allow recovery) before permanent deletion, unless we're legally required to keep records for longer (e.g. financial/GST records).

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and other applicable law, you can request access to, correction of, or deletion of your personal data, and withdraw any consent you've given, at any time. Submit a request via our data request form or by emailing the Grievance Officer below. We aim to resolve requests within 30 days. Organization admins can also manage or export their organization's business data directly within the app.

8. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer for Astech Services is:

Sandip More
Email: [email protected]

Complaints or grievances relating to the processing of your personal data will be acknowledged and resolved within 30 days of receipt.

9. Permissions on the Mobile App

The Astech ERP Android app requests the following permissions, each tied to a specific feature:

  • Camera — attendance/check-in selfie capture
  • Location (fine & coarse) — field visit and attendance check-in
  • Notifications — order, payment, and stock alerts

You can revoke any of these permissions at any time from your device settings; the related feature will simply be unavailable until re-granted.

10. Children's Privacy

The Service is a business tool intended for use by adults managing an organization. It is not directed at children, and we do not knowingly collect data from anyone under 18.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

Astech Services
Email: [email protected]
Website: erp.astechservices.in