Privacy Policy

Last updated: February 2026

Merutech Limited ("Merutech", "we", "us") operates erpUX (erpux.com). This policy describes what data we collect, how we use it, and your rights.

What We Collect

We collect minimal data necessary to provide our service:

• Company information — company name, Oracle instance URL
• Contact information — name and email address of your primary contact
• Configuration data — JWT certificates, user preferences (favorites, recent reports)
• Usage data — which features are accessed (anonymized, for product improvement)

What We Do Not Collect

• Financial data, transactions, or any Oracle ERP data
• Passwords or user credentials (authentication is certificate-based)
• Personal data beyond what is listed above
• Cookies for advertising or tracking (we use only essential session cookies)

How We Use Your Data

• Service delivery — connecting your ERPUX instance to your Oracle environment
• Communication — responding to support requests and sending service updates
• Product improvement — anonymized usage analytics to improve features

Data Retention

Configuration data is retained while your account is active. Upon termination, we delete all company configuration data, certificates, and credentials within 30 days. Contact information is retained for record-keeping purposes unless you request deletion.

Third Parties

We use the following third-party services:

• Vercel — application hosting and edge delivery
• Oracle Cloud Infrastructure (OCI) — credential storage (OCI Vault)
• Resend — transactional email delivery
• Neon — PostgreSQL database for configuration data

We do not sell, share, or provide your data to any other third parties.

Your Rights

You have the right to:

• Request a copy of data we hold about your company
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for communications

Contact

For privacy-related inquiries, contact us at hello@merutech.com.