Privacy Policy

This Privacy Policy explains what information Wolf ERP (“we”, “us”) collects when you use the app at wolf-erp.vercel.app, how we use it, who we share it with, and the choices you have. By using the app you agree to this policy.

We only collect what the app needs to function:

• Account details you provide: your name, email address, organization/company name, and chosen role.
• Your password — stored only as a salted bcrypt hash; we never store or can read your actual password.
• Content you create in the app: vendors, RFQs, quotations, purchase orders, invoices, approvals, and related notes.
• Technical data needed to run the session: a JWT authentication token (in your browser's storage), a small non-sensitive cookie used to route you to your dashboard, and basic server logs (e.g., request method/path) for debugging.

We do not use third-party advertising or analytics trackers, and we don't sell your data.

• To create and secure your account and keep you signed in.
• To store and display the procurement data you enter, scoped privately to your account.
• To send transactional email such as password-reset links.
• To power optional AI features you explicitly trigger.
• To operate, debug, and protect the service (e.g., rate-limiting sign-in attempts).

Optional AI features (drafting, comparison insights, summaries, vendor-risk and invoice-audit analysis, and the assistant chat) are powered by Google's Gemini API. When you trigger one of these, the relevant content (for example, an RFQ description or invoice details) is sent to Google to generate a response. Your use of these features is also subject to Google's privacy terms. If AI is not configured, these features are simply disabled and no data is sent. AI output can be inaccurate — always verify it.

We rely on a few reputable processors to host and run the app:

• Vercel — hosts the web frontend.
• Render — hosts the backend API.
• MongoDB Atlas — stores your account and procurement data.
• Google (Gemini API) — processes content only for AI features you trigger.
• An email/SMTP provider — delivers transactional emails such as password resets.

These providers process data on our behalf to deliver the service and may store it on infrastructure outside your country.

We use the minimum needed for authentication — no advertising cookies. Your sign-in token is kept in your browser's localStorage (if you choose “Keep me signed in”) or sessionStorage (cleared when you close the browser). We also set one small first-party cookie that stores only your dashboard path, so signed-in visitors are routed to the app without a flash of the landing page. Clearing your browser storage signs you out.

Because this is a demo, storage is kept lean: if an account is inactive (no sign-in) for 30 days, all of that workspace's data is automatically and permanently deleted. Your login record is preserved so you can sign back in and start fresh. You can also request deletion at any time (see “Your rights”).

• Passwords are hashed with bcrypt; reset tokens are hashed and expire after 1 hour.
• Access requires a signed JWT, and every account's data is isolated so you only see your own.
• Traffic is served over HTTPS, and the API sends standard security headers and rate-limits sign-in attempts.

No method of transmission or storage is 100% secure, and as a demo project we can't guarantee absolute security — another reason not to enter sensitive real-world data.

• Access & correct: view and edit your account details and content inside the app.
• Delete: remove individual records in the app, or email us to delete your entire account and data.
• Sign out / clear: log out, or clear browser storage, to remove the local session at any time.

To exercise any of these, contact us at support@wolferp.in.

Wolf ERP is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has provided information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above. Continued use of the app after an update means you accept the revised policy.

Questions about this policy or your data? Email support@wolferp.in. See also our Terms & Conditions.