Terms of service

1. Who this agreement is between

The provider: Jaspal Singh, proprietor, trading as S.G. Works, GSTIN 03BFSPS2298A1ZA, registered address 839, Street No 5, Nirankari Mohalla, Miller Ganj, Ludhiana, Punjab 141003 (“we”, “us”).

The customer: the business named on the order or invoice (“you”).

The service: SG Works ERP, an invoicing, purchase, inventory, accounting and GST-filing-data application, provided over the internet at your own address under sgworks.in.

2. Your data is yours

Everything you enter belongs to you: your customers, suppliers, products, invoices, bills, payments, ledgers and GST working. We do not own it, we do not sell it, we do not share it with anyone else, and we do not use it to train anything.

Under India’s Digital Personal Data Protection Act, 2023, the personal data in your account (your customers’ and suppliers’ names, phone numbers, email addresses, GSTINs and addresses) is data for which you are the Data Fiduciary. We act as your Data Processor: we hold and process it only to run this service for you, and only on your instructions.

3. Where your data lives, and on what

Your account has its own separate database. It is not mixed with any other customer’s data.

• The application and your live database run on one server in India, rented from Vultr. Our domain name is registered through Hostinger.
• Backups are stored in Amazon S3 in the Mumbai region, inside India.

This is a single machine, and we are telling you that on purpose. There is no second server standing by and no automatic failover. If that machine fails, the service is unavailable until we restore it (see section 6). If that is not acceptable for your business, tell us before you sign up rather than after.

4. How your data is protected

• Traffic between your browser and the service is encrypted (HTTPS).
• Every person who uses your account has their own username, their own password and their own role (Staff, Accountant or Admin). Passwords are stored hashed with scrypt and are never stored or sent in a form we can read back.
• A password that someone else set for a user must be changed by that user the first time they sign in.
• Repeated failed sign-ins are rate-limited.
• An idle session is signed out automatically after a time your Admin sets.
• A backup of your database is taken every hour, encrypted with AES-256-GCM using a key unique to your account, and uploaded to S3. The unencrypted copy is deleted immediately.
• Once a week, automatically, your most recent backup is decrypted, restored into a fresh empty database and compared with your live one: every table’s row count, and the total debits and credits across your whole ledger. If they do not match, the check fails and we are alerted.

That weekly check reads only your newest hourly backup. It does not read back the older daily, monthly or yearly backups.

5. Who can see your data

• You and the people you give accounts to, according to the role you give each of them.
• Our operator. Running a database means having administrative access to it. One person on our side can technically read any customer’s data. We do not do so except to fix a fault you have reported, or where the law requires it.
• Nobody else.

Two limits on our ability to tell you who did what:

1. The service keeps an audit trail of a limited set of actions, not of everything. Financial documents and their cancellations are recorded; many routine changes are not.
2. We do not currently keep web-server access logs. If you ask us who was signed in at a given time, we cannot answer that from records.

Both are things we intend to improve. Neither is something we will pretend we already have.

6. Availability, failure, and recovery

There is no uptime guarantee and we are not offering one. We aim to keep the service running during Indian business hours and to respond quickly when it is not, but we do not promise a percentage and we do not pay penalties for downtime. What we commit to is best-effort restoration of service, and the automated checks below.

• Your site is checked every five minutes, around the clock, by an outside monitoring service that does not depend on our server. It alerts us if your site stops answering.
• That check makes the application query the database, so it fails if the database fails.
• Your database is backed up every hour. If an hourly backup does not complete, we are alerted automatically.
• Once a week a backup is restored and checked. If that check fails, we are alerted automatically.

If we lose the server:

• How much work could be lost: up to one hour. Backups are hourly, so in the worst case the last hour of entries would have to be entered again.
• How long recovery would take: we do not state a number. On 11 September 2026 we rehearsed a rebuild on a fresh server: two accounts were restored from the off-site backups and matched the live data on every table. That rehearsal did not rebuild every account at once, and one rehearsal is not a guarantee, so we do not put a recovery time in writing.

7. Getting your data out

You can export these yourself from inside the product, as CSV files that open in Excel. No permission is needed, there is no charge and no limit on how often, and you do not have to be leaving:

These do not have a self-service export yet: the stock ledger, the audit trail, purchase orders, delivery challans, purchase returns, categories, units, transports and your company profile.

They are your records and you can have them at any time. Ask and we will send them as CSV, or as a PostgreSQL database dump for your next vendor, within 24 hours on a business day. A request that arrives outside business hours is answered on the next business day. There is no charge, and you do not have to be leaving to ask.

8. How long we keep your data after you leave

When you stop using the service, we delete your live database and your account from our server (section 11 says when).

Your encrypted backups in S3 cannot be deleted early. They remain in our custody for up to seven years. The backup storage is set to a mode (AWS Object Lock, COMPLIANCE) in which no one can delete those backups or shorten their retention: not us, not our administrators, not even the root account.

• Your data is safe from being deleted by accident. That is why the setting was chosen.
• If you ask us to erase everything, we can erase your live database and we cannot erase those backups. We will tell you the date the last one expires.
• The backups are encrypted with a key unique to your account and are useless to anyone without it.

If you need a provider who can guarantee complete erasure on demand, this is not that product, and we would rather you knew now.

9. What we do if we lose your data

If we lose your data through our fault, we will restore it from the most recent good backup and tell you exactly what was lost and when. We will not hide an incident from you.

Our financial liability is limited to the fees you paid us in the twelve months before the incident. We are a small provider and we are not in a position to underwrite your business losses.

10. What you pay, and refunds

Your plan (1 year or 3 years), its price and its start date are recorded on your order and your invoice.

• GST is added to the price.
• The whole term is payable in advance, by bank transfer or UPI. We issue your invoice on receipt of payment.
• A duplicate or mistaken payment is refunded in full.
• If you stop early, nothing is refunded for the unused part, on any plan. You keep the service to the end of the period you paid for (section 11).
• If we end the service, or it ends without your fault, we refund the unused full years of the plan you paid for (section 11).

If payment stops, you do not lose access to your own books. Before anything changes, we give you 30 days’ notice in writing. If the account is still unsettled at the end of those 30 days, we may place it into read-only mode: you and your staff can still sign in, view everything, run every report and export all of your data, but you cannot create or change records until the account is settled. The screen will say why and who to contact.

You are never locked out of your own data for not paying. Read-only is the strongest step we will take, and it is enforced in the software, not just promised here.

11. Ending the agreement

If you are ending it: you do not have to give us notice, and there is no minimum term beyond the period you have paid for. You may stop at any time by writing to the contact in section 13. Your service runs to the end of the period you have paid for. We do not refund the unused part of it, on any plan.

If we are ending it: we give you 30 days’ notice in writing, and your 90-day window below starts from the end of those 30 days. If the reason is not your fault, we refund every full year of your plan that has not been used. For example, if you paid for three years and the service ends 14 months after it started, one full year is refunded.

“Your fault” means a serious breach of these terms by you, such as using the service for something unlawful. Non-payment is not handled by ending your service: it is handled by the 30 days’ notice and read-only mode in section 10.

After your service ends we keep your data for 90 days, counted from the end of your paid period if you left, or from the end of our 30 days’ notice if we ended it. During those 90 days nothing is deleted and you can still ask us for it.

In those 90 days you can export, yourself, every kind of record the product can export (section 7). For anything else, ask us and we will send it; on request we also send a full database dump for your next vendor.

At the end of the 90 days we permanently delete your live database and your account from our server. There is no charge for deletion. Section 8 governs the encrypted backups, which are on their own retention clock and which we cannot delete early.

12. Changes to these terms

If we change these terms materially, we will tell you in writing at least 30 days before the change takes effect.

If you do not accept a change, you may end the agreement under section 11 with no penalty, and with the same 90-day window. Leaving for this reason counts as the service ending without your fault, so the unused full years of your plan are refunded.

13. Contact

• Email: erpsgworks@gmail.com
• WhatsApp only: +91 95693 13131. Please do not call this number; it is not a voice line.

We answer within 24 hours on business days. A message that arrives outside business hours is answered on the next business day. For anything about your data (a copy, a correction, a question about who can see it), use the same contacts and say so.

See also the Privacy policy and the Refund policy.