Privacy Policy

We collect the following types of information:

a) Personal Information

• Name, email address, phone number, and company details provided during registration
• Billing information for subscription payments (processed securely by Razorpay)
• Login credentials (passwords are hashed using bcrypt and never stored in plain text)

b) Business Data

• Pharmaceutical manufacturing, quality control, inventory, and sales data entered into the ERP system
• All business data remains your property and is isolated per company in our multi-tenant architecture

c) Usage Data

• Browser type, IP address, pages visited, and feature usage for analytics and improvement
• Error logs and performance metrics for system reliability

• To provide and maintain PharmaSoft ERP services
• To process payments and manage subscriptions
• To send service updates, security alerts, and support notifications
• To improve our platform based on usage patterns (anonymized analytics only)
• To comply with legal obligations and regulatory requirements
• To provide customer support and resolve technical issues

We never sell your personal or business data to third parties.

We implement industry-leading security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Control: Role-based access control (RBAC) with multi-level permissions
• Audit Trail: Complete audit logging of all data access and modifications
• Backups: Automated daily backups with 90-day retention and geographic redundancy
• Infrastructure: Hosted on enterprise-grade servers with DDoS protection and firewall
• Compliance: ALCOA+ data integrity principles for pharmaceutical data

• Your ERP business data is retained for as long as your subscription is active
• After subscription cancellation, data is retained for 90 days before permanent deletion
• You can request a complete data export at any time in standard formats (CSV, JSON, SQL)
• Audit trail records are retained for a minimum of 5 years as per pharmaceutical regulations
• Payment records are retained as per Indian tax law requirements (8 years)

We use the following trusted third-party services:

• Razorpay — Payment processing (PCI DSS compliant)
• SendGrid — Transactional emails (notifications, invoices)
• Hostinger / AWS — Cloud infrastructure hosting
• Let's Encrypt — SSL certificate management

Each third-party service has their own privacy policy and we only share the minimum data required for service operation.

You have the following rights regarding your data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your account and associated data
• Export: Download your complete ERP data in machine-readable format
• Restriction: Restrict processing of your personal data
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@pharmasoftsolution.com

• Essential cookies: Session management and authentication (required)
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Understanding site usage (anonymized, can be opted out)

We do not use advertising or tracking cookies.

For privacy-related inquiries:

• Email: privacy@pharmasoftsolution.com
• Phone: +91 98765 43210
• Address: PharmaSoft Solutions Pvt. Ltd., Mumbai, Maharashtra, India

We respond to all privacy requests within 30 days.