Privacy Policy
Last updated: April 29, 2026
Effective Date: April 29, 2026
We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Bank ERP service.
1. Information We Collect
We collect the following types of information:
- Google Account Information: Email address and basic account details
- Email Content: Only when explicitly authorized by you via Google OAuth (payment notifications, transaction confirmations)
- Usage Data: Access logs, interaction data, and system performance metrics
2. How We Use Your Information
We use the collected data exclusively to:
- Provide and maintain our banking management services
- Detect and process payment notifications and transaction events from your emails
- Monitor financial activities and provide real-time alerts
- Improve system performance and user experience
- Comply with legal and regulatory requirements
3. How We Process Your Data
Email data is processed on secure servers using encryption. We do not store raw email content permanently. Instead, we:
- Extract specific information (payment notifications, transaction confirmations)
- Store only the processed results and metadata
- Delete raw email content after processing
- Use the processed data only for service functionality
4. Data Storage and Encryption
All data is encrypted both in transit (TLS/SSL) and at rest using industry-standard encryption methods. We comply with GDPR and other international data protection regulations.
5. Data Sharing
We do not sell, trade, rent, or share users' personal data with any third parties.
We may share data only with:
- Service providers necessary to operate the system (under strict data processing agreements)
- Legal authorities if required by law or court order
6. Third-Party Services
Our service uses the following third-party services:
- Google APIs: For email access and OAuth authentication
These providers have their own privacy policies and data processing practices. We are not responsible for their privacy practices.
7. Data Retention
We retain data only for as long as necessary to fulfill the purposes described in this policy. Users can request data deletion at any time.
8. Data Deletion
You can request deletion of your data and revoke Google OAuth access at any time by contacting us at:
[email protected]
Upon request, we will:
- Delete all associated personal data within 30 days
- Revoke access to your email data
- Provide confirmation of deletion
9. Your Rights (GDPR and Data Protection Laws)
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (right to be forgotten)
- Right to Data Portability: Request your data in a portable format
- Right to Withdraw Consent: Revoke Google OAuth permissions at any time
- Right to Restrict Processing: Request restriction of data processing
- Right to Object: Object to certain data processing activities
To exercise these rights, contact us at: [email protected]
10. Data Security
We implement appropriate technical and organizational measures to protect user data from unauthorized access, disclosure, or destruction, including:
- End-to-end encryption
- Secure authentication mechanisms
- Regular security audits
- Access controls and monitoring
11. Google API Services Compliance
Our application's use of information received from Google APIs strictly adheres to Google API Services User Data Policy, including the Limited Use requirements:
- We only access the specific scopes explicitly authorized by users
- We use email data only to provide the specified service functionality
- We do NOT use this data for advertising, marketing, or analytics
- We do NOT share this data with third parties without explicit user consent
- We do NOT combine data from multiple users for any purpose
12. Children's Privacy
Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete such information and terminate the child's account.
13. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be posted on this page and you will be notified via email or prominent notice on our homepage.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:
Email: [email protected]
Service: Bank ERP
© 2026 Bank ERP. All rights reserved.