Privacy Policy

We collect information in two ways: information you provide directly, and technical data gathered automatically when you interact with our website and platforms.

• Information you provide: name, work email, company, phone number, product interest, and message content submitted through contact forms, demo requests, and account provisioning requests.
• Automated technical data: IP address, browser and device information, operating system, referring URLs, pages viewed, session duration, and cookie telemetry.
• Support records: correspondence with our implementation and support teams, including tickets, call notes, and issue history.

Information is processed only for legitimate, clearly defined business purposes:

• Service delivery: provisioning, configuring, and operating Oncloud Infotech products including Enterprise ERP, the Community Platform, and custom business applications.
• Platform improvement: analysing aggregate usage patterns to improve reliability, performance, and product design.
• Customer support: responding to enquiries, resolving incidents, and providing onboarding and training assistance.
• Essential communications: service notices, security advisories, maintenance windows, contractual and billing correspondence.

We do not sell personal information, and we do not use client business data to train third-party models.

Client business data processed within our ERP and Community Platform deployments remains the property of the client. We do not disclose, license, or commercialise it.

• Sub-processors: we engage a limited set of infrastructure, hosting, and communication providers bound by written confidentiality and data protection terms.
• Enterprise deployments: for on-premise or private-cloud installations, data remains inside the client-controlled environment and is accessed only with documented authorisation.
• Legal requirements: we may disclose information where required by applicable law, court order, or a valid request from a competent authority, and will notify the affected client where legally permitted.

• Encryption: data is encrypted in transit using TLS 1.2 or higher and at rest using industry-standard AES-256 encryption.
• Access control: role-based access, least-privilege provisioning, multi-factor authentication for administrative accounts, and audited access logs.
• Storage standards: production data is hosted in access-controlled data centres with regular backups and tested restoration procedures.
• Retention: enquiry and marketing records are retained for up to 24 months; contractual and financial records are retained for the period required by applicable law; client platform data is retained for the term of the agreement and deleted or returned within 90 days of termination unless otherwise instructed.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information where no legal basis for retention applies.
• Object to or restrict certain processing, including direct marketing.
• Withdraw cookie consent at any time via the Cookie Preferences link in our footer.

To exercise these rights, write to privacy@oncloudinfotech.com. We respond to verified requests within 30 days.