Privacy Policy

This Privacy Policy describes how ELR Industries Pvt Ltd ("ELR Industries", "we", "us", "our") collects, uses, and protects information when employees, contractors, vendors, site staff, and other authorised users ("User", "you") access the ELR Industries ERP application — available as a web app at https://erp.elrindia.com and as an Android app on the Google Play Store.

By using the App, you acknowledge and accept this Policy. Access is granted under your employment, contractor, or vendor relationship with ELR Industries and may be revoked at any time.

The App collects only the data needed to deliver business workflows:

• Account & profile data — name, work email, phone, employee ID, department, designation, reporting manager, and role.
• Operational data — production entries, dispatch challans, lab tests, daily progress reports, procurement records, invoices, attendance, HSE incidents, tasks, and approvals you create or interact with.
• Device & location data — GPS coordinates and timestamp when you punch in/out or capture a site visit; device model, OS version, and IP address for security auditing.
• Camera & media — photos and videos you explicitly capture for DPR, HSE incidents, or face-verified attendance. Face descriptors used for verification are stored as encoded vectors, not raw images.
• Files you upload — drawings, documents, invoices, and other attachments stored in our project storage.
• Authentication tokens — JWT session tokens kept securely on your device for the duration of your active session; logging out invalidates the token server-side.
• Diagnostic & audit logs — anonymised request logs (endpoint, status, latency) for security monitoring; audit trails of data creation and modification.

The App does not collect contacts, SMS, call logs, browsing history outside the App, advertising identifiers, or biometric data from your device's hardware sensors.

All data is used strictly for legitimate business operations:

• Running ERP workflows: project execution, procurement, billing, HR, attendance, quality, and HSE.
• Calculating cost performance, metrics, and management reports.
• Enforcing access control, audit trails, and statutory compliance.
• Sending in-app notifications, email digests, and approval prompts.
• Investigating security incidents and preventing misuse.

We do not sell, rent, monetise, or share your data with advertisers or unaffiliated third parties.

• Data is stored on infrastructure managed by ELR Industries and its hosting providers, with encryption in transit (HTTPS / TLS) and at rest.
• Passwords are stored as bcrypt hashes — never in plain text.
• Session tokens are JWT-based with server-side revocation on logout.
• Role-based access control ensures users only see data relevant to their role.
• Security findings from periodic audits are tracked and remediated.

Operational records are retained for the duration of your engagement with ELR Industries and for periods mandated by Indian statutory requirements (Companies Act, Income Tax Act, GST, EPF, labour laws). Project and financial records are typically retained for at least 8 years post-completion.

Upon termination of engagement, your account is deactivated. Personal data may be anonymised or deleted upon written request to elrinfra@gmail.com, subject to legal-retention obligations.

The App requests permissions only when necessary and only when you initiate the corresponding action:

• Camera — to capture DPR/HSE photos and for face-verified attendance.
• Location (fine) — to geo-stamp punch-in/out and site visit reports.
• Storage / Photos — to upload attachments you choose.
• Internet & Network state — to reach the ERP backend.
• Notifications (Android 13+) — for in-app pings on tasks, approvals, and alerts.

All permissions can be revoked from Android Settings → Apps → ELR Industries ERP → Permissions at any time.

The App is intended for adult employees and authorised personnel only (18+). We do not knowingly collect personal data from minors.

We may update this Policy from time to time. Material changes will be notified inside the App. Continued use after the effective date constitutes acceptance.

For privacy questions, data-access or deletion requests, or any app-related communication: