Google Play Store Compliant
Enterprise Data Safety
Package: com.roxanlabs.erp

Privacy Policy for RoxanLabs ERP Mobile

Application: RoxanLabs ERP | Package Name: com.roxanlabs.erp | Operating Entity: Roxan Labs

Effective Date: September 26, 2026 | Last Updated: September 26, 2026

1. Overview & Purpose of the Application

This Privacy Policy (“Policy”) outlines how Roxan Labs (“we”, “us”, or “our”) collects, processes, stores, and protects personal, operational, and commercial data when you install, access, or use the RoxanLabs ERP Mobile Application (the “App”, package name com.roxanlabs.erp) distributed via the Google Play Store, alongside our associated cloud ERP backend systems and APIs (https://erp.roxanlabs.com/api/).

RoxanLabs ERP Mobile is an enterprise business resource planning application engineered specifically for retail store owners, wholesale merchants, warehouse supervisors, accountants, and sales representatives. The App enables merchants to manage store accounts, track accounts receivable and payable, monitor real-time Point of Sale (POS) transactions, record purchases, control multi-warehouse stock inventory, manage supplier/customer ledgers, and analyze business financial KPIs on mobile devices.

2. Information We Collect & Process

To provide comprehensive store account and ERP management services, we process information submitted directly by store operators as well as technical device telemetry:

Store & User Account Profiles

Store business name, administrator username, authorized staff emails, contact phone numbers, physical store address, default currency, warehouse labels, and encrypted login credentials.

Store Accounting & Transactions

Sales invoices, Point of Sale (POS) receipts, purchase orders, customer debit/credit dues, supplier balances, payment records (cash, bank, card, check), expense vouchers, and sales return records.

Customer & Supplier Ledgers

Customer and vendor directories maintained by the merchant, including client names, contact numbers, email addresses, billing/shipping locations, tax IDs, and transaction histories.

Device Diagnostics & Telemetry

Device model, Android OS version, IP address, network connectivity state, application crash logs, and session authentication tokens required for secure API communication and offline syncing.

3. Android Device Permissions & Transparency

The App strictly requests only the minimal technical permissions essential to perform core business and accounting operations on Android:

android.permission.INTERNET (Full Internet Access)

Why it is needed: Enables the App to communicate securely with your RoxanLabs ERP cloud backend (https://erp.roxanlabs.com/api/ or your business’s custom ERP server). This allows real-time synchronization of sales, purchases, warehouse inventory, and customer account ledgers.

android.permission.ACCESS_NETWORK_STATE (Network State Detection)

Why it is needed: Detects whether your device has an active Wi-Fi or cellular data connection. This allows the App to toggle between live cloud synchronization and offline preview mode, preventing unexpected network timeouts and data loss.

Secure File Sharing & Export (androidx.core.content.FileProvider)

Why it is needed: Used exclusively when you choose to export or share financial statements, sales invoices, or inventory count reports as PDF or spreadsheet files. Files are temporarily saved in the App’s private sandbox directory and shared only with apps you explicitly select (such as WhatsApp, Email, or Print Services).

4. How We Use Collected Information

All collected information is processed strictly to perform legitimate business operations and fulfill our contractual obligations with store owners:

• Store Accounting Operations: Calculating daily sales, gross margins, purchase returns, payment balances, and stock valuation.
• Real-Time Analytics & Reporting: Generating business performance charts (sales vs. purchases, top selling products, cash flow trends).
• Role-Based Access Control (RBAC): Authenticating store employees (Cashiers, Managers, Admins) and restricting access strictly according to permissions designated by the store owner.
• Data Synchronization: Keeping inventory quantities, warehouse transfers, and customer balances updated across multiple store devices in real time.
• Customer Support & Technical Stability: Diagnosing sync anomalies, resolving login errors, and providing customer support.

We will NEVER sell, lease, monetize, or disclose your store’s financial, transaction, or customer records to any third-party marketing or advertising networks.

5. Data Security, Encryption & Multi-Tenant Isolation

Roxan Labs implements enterprise-grade technical, physical, and administrative safeguards to protect your business records:

• Encryption in Transit: All communications between the mobile application and our servers are encrypted using modern Transport Layer Security (TLS 1.2 / TLS 1.3) with 256-bit encryption.
• Encrypted Device Storage: Authentication tokens and server configurations on the device are isolated within the Android application’s secure private sandbox.
• Multi-Tenant Data Segregation: Store databases are logically isolated. No store or business can access or view another merchant’s sales, inventory, or customer ledger.
• Automated Server Backups: Cloud servers maintain encrypted off-site backups to protect business continuity against hardware failures.

6. Third-Party Sub-Processors & Service Providers

To host the ERP application backend and deliver reliable services, we rely on trusted infrastructure providers:

• Cloud Infrastructure Providers: Secure enterprise cloud servers (equipped with DDoS mitigation, firewalls, and ISO 27001 certified data center hosting) where the RoxanLabs ERP databases are hosted.
• No Ad Networks: The App contains zero third-party advertisement SDKs (such as Google AdMob, Unity Ads, or Facebook Audience Network). Your business workflow is free from trackers and advertisements.

7. Account & Data Deletion Policy (Google Play Data Safety)

In strict accordance with Google Play Developer Policies and data protection standards, users and merchants have the complete right to request the deletion of their user accounts, store data, and associated records.

How to Request Account & Data Deletion:

Method 1 (Self-Service In-App/Dashboard): Store administrators can remove individual customers, products, transactions, and staff accounts directly from the ERP management portal.
Method 2 (Complete Organization Deletion via Email/Support): To permanently delete an entire organization account, all store branches, user credentials, and historical accounting data, send a deletion request to:

Email: info@roxanlabs.com (Subject: “ERP Account Deletion Request”)
WhatsApp Support: +92 318 1169320

Deletion Timeline: Upon receiving and verifying your request, your account data, credentials, and associated operational records will be permanently removed from our active production systems within thirty (30) business days, subject to legitimate tax and financial audit retention requirements stipulated by local commercial law.

8. Data Retention Policy

We retain your business accounts, sales entries, inventory logs, and customer ledgers for as long as your merchant organization maintains an active subscription or operational account with RoxanLabs ERP. Because accounting systems require continuous audit trails for tax filing and balance reconciliation, data is stored securely until the account owner initiates an account closure or data deletion procedure.

9. Children’s Privacy Protection

RoxanLabs ERP Mobile is exclusively intended for commercial business operations by adult store managers, owners, and employed personnel. The App is not directed toward or designed for children under the age of 18 (or under 13). We do not knowingly collect, solicit, or store personal information from children. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such data from our databases.

10. Your Rights & Data Portability

Depending on your jurisdiction (including GDPR, CCPA/CPRA, and relevant commercial data protection frameworks), you hold specific rights regarding your personal and store data:

• Right of Access: You can view all active accounts, sales, and inventory data at any time via the App.
• Right to Rectification: You can update inaccurate client details, product pricing, or accounting entries.
• Right to Data Portability: You can export receipts, invoices, and financial reports in standard formats (PDF, Excel, CSV).
• Right to Erasure: You can request full deletion of your profile and business records as described in Section 7.

11. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect app enhancements, new ERP capabilities, or changes in regulatory obligations. Any revisions will be published directly on this page with an updated “Last Updated” date. For significant modifications, we will provide in-app notices or email notifications to registered store administrators. Continued use of the App following any changes indicates your agreement to the revised Policy.

12. Contact & Data Protection Officer

If you have questions, feedback, or data privacy requests concerning the RoxanLabs ERP Mobile App, please contact our dedicated Data Protection and Compliance Team:

Roxan Labs Data Protection & Compliance Office

KN Gohar Green City, Malir City Survey # 01,02 & 245/3 Shah Faisal Colony, Karachi, Pakistan

Official Email: info@roxanlabs.com

Support WhatsApp / Phone: +92 318 1169320

Chat on WhatsApp