Privacy Policy
How BestERP.in collects, uses, stores, and protects your information across the platform, APIs, and mobile applications.
BestERP Platform and Applications
BestERP is a unified business management platform consisting of web-based services, APIs and mobile applications.
This Privacy Policy applies to BestERP and its associated applications and services, including current and future Android, iOS, web and other applications operated, developed or provided as part of the BestERP platform.
These may include applications for CRM, ERP, sales, field service, inventory, attendance, HRM, dealer management, solar business management, POS, project management and other business workflows.
The list of applications and features may change as we introduce, update, replace or discontinue products and services. Unless a separate privacy notice is specifically provided for a particular service, this Privacy Policy applies to all BestERP applications and services.
Different BestERP applications may request access to different information depending on the functionality being used. For example, a field-service application may require access to location, camera, notifications or device-related information, while an attendance application may require information necessary for attendance and workforce management.
We collect and process such information only to provide the relevant functionality, security, administration and services associated with the BestERP platform and in accordance with this Privacy Policy.
BestERP ("BestERP", "we", "us", or "our") is a business management platform operated by Ascent24 Technologies LLP (LLPIN: AAP-8255).
We respect your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, store, protect, and process personal data when you visit our website, create or use a BestERP account, use our applications and services, communicate with us, or otherwise interact with BestERP.
This Privacy Policy should be read together with our Terms and Conditions and any product-specific or customer-specific agreements that apply to your use of BestERP.
Contents
- Who We Are
- Scope
- Personal Data We Collect
- How We Use Personal Data
- Customer-Provided Personal Data
- WhatsApp, SMS and Email Communications
- Consent and Withdrawal
- Sharing and Disclosure
- International Processing
- Data Retention
- Data Security
- Personal Data Breaches
- Your Privacy Rights
- Children's Privacy
- Cookies and Similar Technologies
- Third-Party Websites and Services
- Customer Responsibilities
- Changes to this Privacy Policy
- Privacy and Grievance Contact
- Related Documents
1. Who We Are
BestERP is operated by:
For privacy matters relating to BestERP, Ascent24 Technologies LLP is responsible for personal data that it processes for its own purposes.
When BestERP processes personal data submitted by a business customer through the platform, that customer may determine the purposes for which the data is processed. In such circumstances, the customer may be the Data Fiduciary/Controller and BestERP may act as a Data Processor/service provider, depending on the applicable law and contractual arrangement.
2. Scope
This Privacy Policy applies to:
- Visitors to besterp.in and related BestERP webpages
- Individuals who contact BestERP
- Trial users and prospective customers
- Registered BestERP account holders
- Workspace administrators and authorised users
- Employees and other individuals whose information is entered into BestERP by a customer
- Customers and contacts managed through the CRM
- Individuals whose information is processed through HRM, attendance, payroll, POS, accounting, inventory, project, service, or other BestERP modules
Where a BestERP customer uses the platform to process personal data relating to its own customers, employees, vendors, contacts or other individuals, additional terms agreed with that customer may apply.
3. Personal Data We Collect
Depending on how you use BestERP, we may collect the following categories of personal data.
3.1 Account and Contact Information
This may include:
- Name
- Email address
- Mobile or telephone number
- Company or organisation name
- Job title or role
- Username and account information
- Business address
- GSTIN and other business or tax information where applicable
3.2 Business Data Entered into BestERP
Customers may enter information required to operate their business, including:
- Customer and contact information
- Supplier and vendor information
- Employee information
- Attendance and leave information
- Payroll-related information
- Sales and CRM records
- Invoices and billing records
- Inventory and product information
- Purchase and procurement information
- Project and service records
- Documents and attachments
- Appointment or service information
- Other information entered by an authorised customer or user
The type of personal data contained in this information depends on how the customer configures and uses BestERP.
3.3 Communication Information
We may collect information contained in:
- Emails
- Support requests
- Chat or other customer-service communications
- Feedback
- Survey responses
- Communications with our sales or support teams
3.4 Payment and Subscription Information
We may collect subscription, billing and transaction information required to manage your BestERP account.
Payment card, banking or other payment credentials may be processed directly by authorised payment service providers. We do not intentionally store complete payment-card information on our own systems where the payment provider handles such information.
3.5 Technical and Usage Information
We may automatically collect information such as:
- IP address
- Browser type
- Device type
- Operating system
- Login information
- Date and time of access
- Pages and features accessed
- Application activity
- Error and diagnostic information
- Security and audit logs
- Approximate location derived from IP address where necessary for security, localisation or compliance
3.6 Information from Integrations
If you connect BestERP with third-party services, we may receive information from those services according to the permissions and configuration you provide.
Examples may include payment, communication, accounting, authentication, cloud storage or other business integrations.
4. How We Use Personal Data
We may process personal data for purposes including:
- Creating and managing BestERP accounts
- Providing and operating BestERP services
- Providing CRM, ERP, HRM, POS, accounting, inventory, project and other requested functionality
- Authenticating users and managing access
- Processing subscriptions and billing
- Providing customer and technical support
- Sending account, security, billing and service notifications
- Sending appointment, payment, task, workflow and other operational reminders where enabled by the customer
- Sending communications through email, SMS, WhatsApp or other supported channels where such functionality is enabled
- Improving reliability, security and performance
- Diagnosing errors and resolving technical problems
- Developing and improving BestERP features
- Detecting and preventing fraud, abuse and unauthorised activity
- Maintaining backups and business continuity
- Complying with applicable legal and regulatory requirements
- Responding to lawful requests from government authorities
- Establishing, exercising or defending legal rights
- Sending promotional or marketing communications where permitted and where the required consent or other lawful basis exists
Where we use information for analytics, reporting or product improvement, we may use aggregated or de-identified information where appropriate.
5. Customer-Provided Personal Data
BestERP allows businesses to store and process personal data relating to their own customers, employees, vendors, contacts and other individuals.
For example, a BestERP customer may enter:
- Customer names and contact details
- Employee information
- Attendance information
- HR records
- CRM records
- Sales and service information
- Invoice and transaction information
- Appointment information
- Other business records containing personal data
For such information, the BestERP customer generally determines why the information is collected and how it should be used.
Accordingly, the customer is responsible for ensuring that it has the appropriate authority, notice, consent or other lawful basis required to collect and process such personal data.
BestERP processes such customer-provided information primarily to provide the services requested by the customer and according to the customer's configuration and instructions.
6. WhatsApp, SMS and Email Communications
BestERP includes communication and automation features that may allow customers to send messages through email, SMS, WhatsApp and other supported communication channels.
Depending on the customer's configuration and use of BestERP, these communications may include:
- Appointment confirmations
- Appointment reminders
- Payment reminders
- Service reminders
- Follow-up messages
- Customer notifications
- Transactional communications
- Account notifications
- Support communications
- Marketing and promotional communications
Where a BestERP customer uses these features to communicate with its customers or contacts, that customer is responsible for ensuring that the messages are sent in accordance with applicable privacy, communication, marketing and messaging laws and the applicable policies of the communication provider.
BestERP may process recipient information, message content, delivery status and related communication information as necessary to provide these services.
Where BestERP itself sends promotional communications, we provide appropriate mechanisms to withdraw consent or opt out.
Opting out of promotional communications does not prevent essential service, transactional, security or legally required communications.
7. Consent and Withdrawal
Where processing is based on consent, we provide an appropriate mechanism for giving and, where applicable, withdrawing that consent.
A request to withdraw consent may be made through the relevant mechanism provided by BestERP or by contacting us using the details provided in this Privacy Policy.
Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal.
Withdrawal may also not stop processing where the processing is otherwise permitted or required under applicable law.
8. Sharing and Disclosure
We may share personal data where reasonably necessary to provide BestERP and related services.
This may include sharing with:
- Cloud hosting and infrastructure providers
- Email service providers
- SMS and WhatsApp communication providers
- Payment processors
- Authentication providers
- Security and monitoring providers
- Customer-support providers
- Analytics and technical service providers
- Professional advisers
- Government authorities or law-enforcement agencies where required by law
- Successor entities in connection with a merger, acquisition, restructuring or transfer of business assets
We require appropriate confidentiality and security obligations from relevant service providers where applicable.
When you enable a third-party integration, the relevant third party may process information according to its own terms and privacy policy.
9. International Processing
BestERP may use technology and service providers located in India or other countries.
Accordingly, personal data may be stored or processed outside India where necessary to provide the service, maintain infrastructure, provide redundancy, support integrations, or use third-party service providers.
Where required by applicable law, we take appropriate contractual, organisational and technical measures for such processing and transfers.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- Providing BestERP services
- Maintaining active accounts
- Fulfilling contractual obligations
- Maintaining business and transaction records
- Meeting tax, accounting and legal requirements
- Resolving disputes
- Preventing fraud and security incidents
- Maintaining backups and business continuity
- Establishing or defending legal claims
When personal data is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal, contractual and legitimate retention requirements.
For customer-provided business data, retention and deletion may also depend on the customer's subscription, instructions and contractual arrangement with BestERP.
11. Data Security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, destruction or misuse.
Depending on the service and data involved, these measures may include:
- Secure HTTPS/TLS communications
- Access controls
- Role-based permissions
- Authentication safeguards
- Password hashing
- Security monitoring and logging
- Backup and disaster-recovery procedures
- Infrastructure security controls
- Employee and contractor confidentiality obligations
- Incident and breach-response procedures
- Regular maintenance and security updates
No internet-based system can guarantee absolute security. We continuously review and improve our security practices based on the nature and risks associated with the services we provide.
12. Personal Data Breaches
We maintain procedures for identifying, responding to and managing personal-data security incidents.
If a personal-data breach occurs, we will take reasonable steps to:
- Contain and investigate the incident
- Assess the nature and impact of the incident
- Take appropriate remedial measures
- Notify affected customers or individuals where required
- Notify relevant authorities where required by applicable law
13. Your Privacy Rights
Subject to applicable law, you may have rights relating to your personal data, including:
- Accessing information about your personal data and its processing
- Requesting correction of inaccurate or incomplete personal data
- Requesting deletion of personal data where applicable
- Withdrawing consent where processing is based on consent
- Raising a grievance regarding the processing of your personal data
- Exercising other rights available under applicable law
- Nominating another individual to exercise applicable rights on your behalf where permitted by law
Requests may be submitted using the contact details provided below.
We may need to verify your identity before processing certain requests.
If your personal data is contained within a BestERP workspace belonging to a business customer, that customer may be responsible for responding to requests concerning its business records. In such cases, we may assist the customer as required under our contractual arrangement and applicable law.
14. Children's Privacy
BestERP is primarily designed for business use and is not directed toward children.
We do not knowingly collect personal data from children in circumstances where collection is prohibited by applicable law.
If you believe that personal data relating to a child has been provided to BestERP inappropriately, please contact us so that we can review the matter and take appropriate action.
15. Cookies and Similar Technologies
BestERP websites and applications may use cookies, local storage and similar technologies for purposes including:
- Authentication and session management
- Security
- Remembering preferences
- Website functionality
- Analytics and performance measurement
- Improving user experience
- Optional marketing or advertising functionality where applicable
Where required by applicable law, we provide appropriate controls for non-essential cookies and similar technologies.
16. Third-Party Websites and Services
BestERP may contain links to third-party websites or integrate with third-party services.
We are not responsible for the privacy practices, security or content of third-party websites or services.
You should review the privacy policies and terms of relevant third parties before providing personal data or enabling an integration.
17. Customer Responsibilities
Customers using BestERP to process personal data are responsible for:
- Providing appropriate privacy notices to individuals
- Obtaining required consent or establishing another lawful basis for processing
- Using personal data only for appropriate business purposes
- Configuring user permissions appropriately
- Managing their customer and employee records responsibly
- Complying with applicable privacy, employment, tax, marketing and communication laws
- Ensuring that WhatsApp, SMS and email communications are sent lawfully
- Responding to applicable privacy requests relating to data under their control
BestERP provides technical functionality to support responsible data processing, but customers remain responsible for their own legal and regulatory obligations.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or applicable laws.
When we make material changes, we may provide an appropriate notice through the website, application, email or other reasonable communication method where required.
The latest version will always be published on this page with the applicable "Last Updated" date.
19. Privacy and Grievance Contact
For privacy questions, personal-data requests or grievances, please contact:
Please include sufficient information for us to understand and verify your request.
We will handle privacy requests and grievances in accordance with applicable law and the timelines prescribed by applicable law.
20. Related Documents
For information about your use of BestERP, please also refer to:
- BestERP Terms and Conditions
- Any applicable subscription or service agreement
- Any customer-specific Data Processing Agreement
- Any applicable product-specific privacy notice