Privacy Policy

Last Updated: April 16, 2026

Tanelly ERP provides comprehensive business management solutions. This Privacy Policy describes how erp.tanelly.com collects, uses, and protects the enterprise data processed within our environment. We operate under the principle that your business data belongs to you.

1. Information We Collect

In the context of an ERP system, we process data in three categories:

  • Administrative Data: Information provided by your organization to set up the ERP instance (e.g., administrator names, billing addresses, and corporate contact details).

  • Operational Data: Information your organization inputs into the system, which may include financial records, employee payroll data, inventory details, and proprietary business processes.

  • System Metadata: Log files, IP addresses, and browser types used to ensure system performance, audit trails, and security monitoring.

2. Roles and Responsibilities

In accordance with global data protection standards:

  • You (The Customer): Act as the Data Controller. You have full control over what data is entered and how it is managed.

  • Tanelly: Acts as the Data Processor. We process data only according to your instructions and to maintain the functionality of the ERP service.

3. How We Use Enterprise Data

We use information specifically to facilitate business operations:

Feature Data Usage
Financial Reporting Processing ledger entries and tax calculations as defined by your setup.
Human Capital Managing employee profiles, attendance, and payroll processing.
Audit Trails Recording who changed what data and when, to ensure internal accountability.
System Optimization Analyzing anonymized metadata to improve server response times and UI efficiency.

4. Data Retention and Deletion

  • Retention: We retain Operational Data for as long as your subscription is active or as required by applicable financial and tax laws.

  • Deletion: Upon contract termination, Tanelly provides a grace period (typically 30–90 days) for you to export your data. After this period, data is purged from our active databases and eventually from backups.

5. Security and Integrity

Because ERP data is mission-critical, we employ high-level safeguards:

  • Database Isolation: Logical separation of customer databases to prevent cross-tenant data leaks.

  • Multi-Factor Authentication (MFA): We provide and recommend MFA for all user logins to prevent unauthorized access.

  • Regular Backups: Automated, encrypted backups to ensure business continuity in the event of a failure.

6. International Data Transfers

If your organization operates globally, please note that your data may be stored in secure data centers located in specific regions (e.g., Singapore, USA, or EU). We ensure all transfers comply with standard contractual clauses and local data sovereignty laws.

7. Contact & Support

For inquiries regarding data processing agreements (DPA) or specific privacy concerns, please contact our Data Protection Officer:

Legal Tip: Unlike a CRM, an ERP often falls under strict financial auditing requirements (like SOX or local equivalents). Ensure your internal IT policy matches these settings, and consider attaching a formal Data Processing Agreement (DPA) as an addendum to this policy.

Back to top button