At O2S ERP (“Company”, “we”, “our”, or “us”), we are committed to protecting the privacy and security of our customers, users, guests, employees, and business partners.

This Privacy Policy explains how we collect, use, store, process, and protect personal and business information when you use our cloud-based ERP platform, website, mobile applications, and related services.

By accessing or using O2S ERP, you agree to the practices described in this Privacy Policy.

1. INFORMATION WE COLLECT

1.1 Information Provided by Customers

When you register for or use our services, we may collect:
• Company name
• Hotel name
• Contact information
• Billing address
• Email address
• Phone number
• Tax identification details
• Payment information

1.2 Guest Information

Depending on the modules used, hotels may store guest information within the Platform, including:
• Guest names
• Contact details
• Address information
• Identification documents
• Reservation details
• Check-in and check-out records
• Billing information
• Preferences and service history
Such information remains under the control of the Customer (Hotel).

1.3 Employee Information

When HR & Payroll modules are used, the Platform may process:
• Employee names
• Contact details
• Job titles
• Attendance records
• Payroll information
• Tax details
• Bank account information

1.4 Automatically Collected Information

When users access our services, we may collect:
• IP address
• Browser type
• Device information
• Operating system
• Login timestamps
• Usage statistics
• Error logs
• Session information

1.5 Cookies and Tracking Technologies

Our website may use:
• Cookies
• Session cookies
• Analytics tools
• Performance monitoring technologies
These technologies help improve user experience and system performance.

2. HOW WE USE INFORMATION

We use collected information to:
• Provide and maintain services
• Process reservations and transactions
• Manage hotel operations
• Generate reports and analytics
• Process payroll and accounting records
• Improve platform functionality
• Provide customer support
• Detect fraud and security threats
• Comply with legal obligations
• Communicate service updates

3. LEGAL BASIS FOR PROCESSING

Where applicable, we process information based on:
• Customer consent
• Contractual obligations
• Legal compliance requirements
• Legitimate business interests
• Protection of vital interests

4. DATA OWNERSHIP

Customer business data entered into O2S ERP remains the property of the Customer.
O2S ERP acts as a service provider and processor of such information solely for providing contracted services.
We do not sell customer data.

5. DATA SHARING AND DISCLOSURE

We may share information with:
• Service Providers
• Cloud hosting providers
• Payment processors
• Email delivery services
• SMS gateway providers
• Technical support providers

Legal Requirements
We may disclose information when required by:

• Applicable law
• Court orders
• Government authorities
• Regulatory agencies

Business Transfers
In connection with a merger, acquisition, or sale of assets, customer information may be transferred subject to applicable privacy obligations.

6. DATA SECURITY

We implement commercially reasonable safeguards including:
• SSL/TLS encryption
• Secure authentication systems
• Access controls
• Firewall protection
• Activity monitoring
• Database security measures
• Regular backups
Despite these measures, no method of transmission or storage is completely secure.

7. DATA RETENTION

We retain information:
• For the duration of the active subscription
• As required by applicable laws
• For legitimate business purposes
• To resolve disputes and enforce agreements
Upon account termination, data may be retained for a limited period before deletion, unless otherwise required by law.

8. INTERNATIONAL DATA TRANSFERS

Customer information may be processed and stored in data centers located in different jurisdictions.
By using our services, Customers consent to such transfers where permitted by applicable laws.

9. CUSTOMER RIGHTS

Subject to applicable laws, users may have rights to:
• Access personal information
• Correct inaccurate information
• Request deletion of information
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent where applicable

10. RESPONSIBILITIES OF CUSTOMERS

Hotels and organizations using O2S ERP are responsible for:
• Obtaining necessary consents from guests and employees
• Complying with applicable privacy laws
• Managing access permissions appropriately
• Maintaining the confidentiality of login credentials

11. CHILDREN’S PRIVACY

Our services are intended for business use and are not directed toward children under the age of 18.
We do not knowingly collect personal information directly from children.

12. THIRD-PARTY SERVICES

Our Platform may integrate with:
• Payment gateways
• Government portals
• Accounting software
• Email providers
• SMS services
• Third-party APIs
We are not responsible for the privacy practices of third-party services.

13. COOKIES POLICY

Cookies may be used to:
• Maintain user sessions
• Remember preferences
• Improve website performance
• Analyze website usage
Users may disable cookies through browser settings; however, certain features may not function properly.

14. DATA BREACH NOTIFICATION

In the event of a confirmed security incident affecting personal information, we will:
• Investigate the incident promptly
• Take corrective measures
• Notify affected customers where required by law
• Cooperate with regulatory authorities as necessary

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.
Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.

CONSENT

By accessing or using O2S ERP, you acknowledge that you have read, understood, and agree to the collection, use, storage, and processing of information as described in this Privacy Policy.

DISCLAIMER

Privacy Notice:

O2S ERP respects your privacy and is committed to protecting your business, guest, and employee information.

We do not sell customer data and implement industry-standard security measures to safeguard information processed through our platform.