Greyield Labs ERP ("the Service") is a business management platform operated by Greyield Labs ("we", "us"). This policy explains what information the Service handles, why, and the choices you have. It applies to the Greyield Labs ERP mobile and web applications and the services behind them.
The information we handle
- Account information. Your name, email address and sign-in credentials. Passwords and staff PINs are stored only in cryptographically hashed form — we cannot read them.
- Organisation data. The business records your organisation creates in the Service: customers, products, inventory, locations, receipts and related records, including receipt signatures captured on screen. This data belongs to your organisation; we process it solely to provide the Service.
- Security and usage records. Sign-in events, administrative actions and the network address they came from, kept in audit logs so organisations can see who changed what, and to protect accounts against abuse (for example, rate-limiting repeated sign-in attempts).
- On your device. The app stores your session tokens and, on shared point-of-sale devices, a remembered organisation identifier, in your device's secure storage. We do not collect device contacts, location, or advertising identifiers.
What we do not do
- We do not sell or rent personal information — to anyone, ever.
- We do not show advertising and do not share data with advertisers.
- We do not use your organisation's business records for any purpose other than operating the Service for you.
Where data lives and who processes it
The Service is hosted on Amazon Web Services; data is encrypted in transit (TLS) and at rest. Application updates are delivered through Expo Application Services. These providers process data on our behalf under their own security and privacy commitments and have no independent right to use it.
Retention
We keep organisation data for as long as the organisation's subscription is active, and for a reasonable period afterwards to allow reactivation, after which it is deleted. Audit and security records are retained as required for the integrity of the Service. Database backups are retained on a rolling window and age out automatically.
Your rights and choices
You may access and correct your account information in the app. Organisation owners control their organisation's records, including its users, and may request export or deletion of their organisation's data by contacting us. If you are a staff member of an organisation using the Service, your use is also governed by that organisation's own policies.
Account deletion
You may request deletion of your account at any time by emailing info@greyieldlabs.com from the email address on the account (or, for PIN-only staff accounts, via your organisation's owner). We will verify the request, delete the account and its personal information, and confirm completion. Records that your organisation is required to keep — for example, issued receipts that name you as the issuing user — are retained by the organisation as part of its business records; organisation owners may additionally request deletion of the organisation and all of its data through the same address.
Children
The Service is a business tool and is not directed at children under 13. We do not knowingly collect information from children.
Changes to this policy
If we make material changes, we will update this page and its effective date, and where appropriate notify organisation owners.
Contact
Questions about this policy or your data: info@greyieldlabs.com.