Privacy policy
What personal data we handle, why, for how long, and what you can ask of us. Written in plain words to follow India’s Digital Personal Data Protection Act, 2023.
Version 1.0, 12 November 2026
The short version
- This website sets no cookies and has no sign-up form.
- Nothing you type into the free GST tools, the login box or the demo form is sent to us.
- If you message or email us, we use your details only to answer you and to serve you.
- Inside the product, your business data is yours. We hold it only to run the service for you.
- We do not sell personal data, and we do not use it for advertising.
Who we are
SG Works ERP is provided by Jaspal Singh, proprietor, trading as S.G. Works, 839, Street No 5, Nirankari Mohalla, Miller Ganj, Ludhiana, Punjab 141003. In this policy “we” and “us” mean this business.
On this website
Counting visits
This site may use Cloudflare Web Analytics to count page views. It sets no cookies and does not follow you from site to site.
Delivering the pages
The website is delivered by Cloudflare. Like any web host, Cloudflare handles your IP address and browser details to send you the pages and to keep the service secure.
Settings kept on your own device
The site keeps up to three small settings in your browser: the theme you chose, the business address you last opened from the login box, and the state you chose in the due-date tool. They stay on your device and are not sent to us. You can clear them from your browser at any time, and the login box has its own Forget button.
The free GST tools
The calculator, the GSTIN validator and the due-date calendar run inside your browser. What you type into them is not sent to us or to anyone else.
WhatsApp and email
A WhatsApp button on this site opens WhatsApp with a message you can edit. Nothing reaches us until you send it. WhatsApp is run by Meta and has its own privacy policy.
When you message or email us, we receive your phone number or email address, your name if you give it, and what you write. We use these to answer you and to arrange a demo and, if you become a customer, to support your account. We keep them only as long as they are needed for that.
Inside SG Works ERP
There are two kinds of personal data in the product, and the law treats them differently.
Your account
The name of your business, and each user’s username, role and password. Passwords are stored hashed, so we cannot read them. For this data we are responsible to you as the Data Fiduciary.
The records you enter
Your customers’ and suppliers’ names, phone numbers, email addresses, GSTINs and addresses, with your bills and ledgers. For this data you are the Data Fiduciary and we are your Data Processor: we hold and process it only to run the service for you, and only on your instructions.
Where it is kept and who can see it
Your records are kept in India: on the server that runs the service, and in encrypted backups in Amazon S3 in Mumbai. You and the people you give logins to can see them. One operator on our side has the administrative access needed to run the database, and uses it only to fix a fault you have reported or where the law requires it. The Security page has the details.
How long it is kept
For as long as you use the service. After your service ends we keep your data for 90 days and then delete your live database and your account. Encrypted backups expire on their own schedule, the longest after about seven years, and cannot be deleted early by anyone. The Terms of service set this out in full.
Others who handle data for us
| Who | What for |
|---|---|
| Vultr | The server that runs the product, in India |
| Amazon Web Services | Encrypted backups, in Mumbai |
| Cloudflare | Delivering this website |
| An uptime monitoring service | Checking every five minutes that each customer’s site answers. It does not see your records. |
| Google (Gmail) and Meta (WhatsApp) | Our support mailbox and support chat |
Your records in the product stay in India. Website delivery, email and WhatsApp are run by global companies that may process data outside India.
Your rights
India’s Digital Personal Data Protection Act, 2023 gives a person rights over their personal data. You can ask us:
- what personal data of yours we hold and what we do with it;
- to correct it, complete it or bring it up to date;
- to erase it when it is no longer needed, unless a law requires us to keep it;
- to stop using it, where we use it only because you agreed;
- to answer a complaint about how we handled it;
- to record a person you name to act for you if you die or become unable to act.
If your details are in the books of a business that uses SG Works ERP, please ask that business first. It decides what is recorded about you, and we help it act on your request.
If you are not satisfied with our answer to a complaint, you may complain to the Data Protection Board of India.
Children
SG Works ERP is made for businesses. We do not knowingly collect personal data from children.
Changes to this policy
If we change this policy in a way that matters, we will say so on this page and change the version and date at the top.
Contact for data questions
- Email: erpsgworks@gmail.com
- WhatsApp (messages only): +91 95693 13131
- Post: Jaspal Singh, proprietor, trading as S.G. Works, 839, Street No 5, Nirankari Mohalla, Miller Ganj, Ludhiana, Punjab 141003
We reply within 24 hours on business days.