Privacy Policy — ERP Stock Hub
Effective date: September 29, 2026 | Operator: Smart Suit Dev LLC | Contact: info@erpstockhub.com | Address: 151 Harrison St, Nutley, NJ 07110, USA
ERP Stock Hub (erpstockhub.com) is an all-in-one supply-chain and inventory management platform for sellers. This policy explains what information we collect — including through integrations with third-party sales channels such as TikTok Shop and Amazon — how we use it, and your choices.
1. Information we collect: (a) Account info — name, business name, email, phone, business address, login credentials. (b) Business/catalog data — product listings, SKUs, barcodes, prices, images, inventory, warehouses, POs, invoices, order records. (c) Third-party channel data — ONLY data authorized via official OAuth when you connect a channel (shop profile, listings, inventory, orders incl. buyer contact/shipping for fulfillment, tracking). Used solely for the integration features you request; never accessed without your explicit connection; revocable anytime. (d) Usage/device data — logs, device/browser type, IP, feature analytics. (e) Payment data — processed by Stripe; we store only last4, brand, expiry.
2. How we use it: operate the platform and integrations; sync products/inventory/orders/fulfillment; support; billing; fraud/security; aggregated de-identified analytics; legal compliance. We do NOT sell personal information. No advertising use of channel data.
3. Sharing: only with service providers under confidentiality (hosting, analytics, Stripe); with channels you connect (only data needed for the integration); legal compliance; business transfer with notice. Buyer personal data from channels is shared only as needed for fulfillment (e.g., carriers) or as required by law.
4. Retention: while account active. Disconnecting a channel stops new collection and deletes stored credentials. Deletion requests to info@erpstockhub.com honored within 30 days, except legal retention (tax/accounting).
5. Your rights: access, correct, delete, export, object/restrict — contact info@erpstockhub.com, 30-day response. Disconnect channels anytime; opt out of marketing via unsubscribe link.
6. Children's privacy: business tool, not directed at under-13s.
7. International transfers: servers in the USA.
8. Changes: posted here with updated date; material changes notified 15 days ahead.
9. Contact: Smart Suit Dev LLC, 151 Harrison St, Nutley, NJ 07110, USA, info@erpstockhub.com.
Data Security Policy — ERP Stock Hub
Effective date: September 29, 2026 | Smart Suit Dev LLC | info@erpstockhub.com
1. Scope: all customer, seller, product, order, and channel-integration data.
2. Encryption: TLS 1.2+ in transit; AES-256 at rest; API keys/OAuth tokens in a dedicated secrets manager, never in code or logs; channel tokens encrypted, minimum scopes.
3. Access control: email/password + 4-digit PIN gate on seller portal; MFA for admin; role-based access — sellers see only their own company's data; cross-seller access prohibited by design, client-supplied company overrides rejected server-side; least privilege; expiring/revocable sessions.
4. Infrastructure: SOC 2-compliant cloud data centers; firewalls and segmentation; webhook endpoints verify signatures and fail closed; dependencies patched promptly.
5. Application security: input validation, parameterized queries; ownership checks on all data paths; regular security scans; no stack traces to end users.
6. Logging: logins, failed attempts, permission denials, exports, integration connect/disconnect logged with timestamps; 12-month retention; PIN brute-force triggers lockout.
7. Minimization/retention: collect only what's needed; channel disconnect deletes credentials; encrypted rolling backups; deletion requests honored in 30 days.
8. Incident response: detect → contain (isolate/rotate) → assess → notify affected sellers within 72 hours and regulators where required → remediate and update policy. Report issues to info@erpstockhub.com.
9. Subprocessors: limited vetted set (hosting, Stripe, analytics) under contract; integrations use official channel APIs/OAuth only, minimum permissions.
10. Employees: confidentiality obligations; prompt access revocation on departure; security awareness in onboarding.
11. Compliance: supports TikTok Shop Partner Center data-security requirements and Amazon SP-API acceptable use.
12. Review: at least annually and after incidents.