Privacy Policy

Last updated: 24/10/2026

This policy explains how Erpzo handles personal data, in line with Saudi Arabia's Personal Data Protection Law (PDPL).

1. What we collect

• Sign-up details: company name, CR and VAT numbers, the contact person's name, mobile and email.
• User details: name, mobile or email, and login history.
• The data your company enters in Erpzo (customers, operators and so on). For this data your company is the controller and Erpzo processes it on your behalf.

2. How we use it

Only to provide and support the service, invoice the subscription and contact you about your account. We never sell data or use it for advertising.

3. Where it is kept and who can see it

• The database and files are kept with established cloud hosting providers, with encrypted connections.
• Each company's data is kept separate; only its own users can see it, and the Erpzo team only when needed for support.

4. How long we keep it

For as long as the subscription runs, then 90 days, then it is deleted unless the law requires us to keep it (for example accounting records).

5. Your rights

You can see your data, correct it, ask for it to be deleted and download a copy. For privacy questions use "Send feedback" inside Erpzo or the contact details in the Terms of Service.