Privacy Policy
Maha ERP — operated by Maha ERP
Last updated: July 2, 2026
1. Overview
This Privacy Policy explains how Maha ERP(“we”, “us”, or “our”) collects, uses, stores, and protects information when you use the Maha ERPmobile application and web platform (together, the “Service”).
The Service is an internal enterprise operations tool provided to employees, field engineers, and authorized personnel of Maha ERP and its partners for managing equipment servicing, attendance, service tickets, leave, payroll, and related business operations. The Service is not intended for use by the general public.
2. Information We Collect
We collect the following categories of information:
- Account & profile information — your name, email address, employee identifier, role, contact number, and profile photo, as provisioned by your employer or entered by you.
- Authentication data — credentials used to sign in (username/email and password), and, if you choose Google Sign-In, your Google account email and basic profile as returned by Google. We store session tokens to keep you signed in.
- Location information— when you record attendance (check-in / check-out) or log work on a service ticket, we capture your device’s geographic location (latitude, longitude, and a derived address) at that moment. Location is captured only at the time of these actions and is used to record where work was performed. We do not track your location continuously in the background.
- Camera & photos — photos you capture or upload for service tickets (work evidence) and your profile picture.
3. How We Use Information
- Authenticate you and secure access to the Service.
- Record and manage attendance, service tickets, field work, leave, permissions, payroll, and performance.
- Associate attendance and work events with the location where they occurred, for operational and record-keeping purposes.
- Send operational notifications relevant to your work.
- Maintain audit trails, ensure the integrity of business records, and support, troubleshoot, and improve the Service.
4. Device Permissions
The mobile app may request the following permissions:
- Location — to record where attendance punches and ticket work events take place. Captured only during those actions.
- Camera & storage/photos — to capture or attach work photos and your profile picture.
- Notifications — to deliver push notifications about your tasks and tickets.
You may decline or later revoke these permissions in your device settings; some features that rely on them may then be unavailable.
5. Data Retention
We retain information for as long as needed to provide the Service and to meet Maha ERP’s legal, accounting, and operational record-keeping requirements. Business records such as attendance, service tickets, and payroll may be retained per applicable record-retention obligations.
6. Data Security
We use industry-standard measures to protect information, including encrypted transport (HTTPS/TLS), token-based authentication, and access controls that limit data access to authorized users. No method of transmission or storage is completely secure, but we work to protect your information.
7. Your Rights
Because the Service is provided by your employer, much of your data is managed under Maha ERP’s policies. You may request access to, correction of, or deletion of your personal information, subject to legal and legitimate business retention requirements, by contacting us using the details below.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, through the Service.
9. Contact Us
If you have questions about this Privacy Policy or how your information is handled, contact us at:
Maha ERP
Email: corpfieldtechnology@gmail.com