Privacy Policy
Effective Date: October 2026
1. Tenant Data Ownership & Isolation
Customer financial records, Chart of Accounts, sales invoices, purchase orders, warehouse stock balances, and employee payroll information entered into Walletmix BizERP remain the exclusive property of the subscribing organization (Tenant). All application queries scope records strictly by verified session membership.
2. Information Collected
We collect organization registration details (company name, BIN, branch addresses), administrator contact credentials (name, work email, PBKDF2-SHA512 salted password hashes), subscription billing metadata, and operational audit logs required to provide and secure the ERP service.
3. Authentication & Session Security
Web sessions use HTTP-only signed tokens (`bizerp_session`) paired with Cross-Site Request Forgery (`bizerp_csrf`) verification on state-changing requests. Sensitive API responses include `Cache-Control: no-store` headers to prevent browser or intermediary caching of business records.
4. Data Export & Account Closure
Tenant owners may export their ledger, invoice, and operational records in CSV format at any time from their authenticated workspace or request account termination by contacting support@walletmix.com.