Privacy Policy

COMX ERP ("we," "our," or "us") operates the cloud ERP platform accessible at comxerp.pk and related services. We are committed to protecting the privacy and security of the personal and business information entrusted to us by our users.

This Privacy Policy explains what data we collect, how we use it, how we store and protect it, and what rights you have regarding your information. By accessing or using COMX ERP, you agree to the practices described in this policy.

COMX ERP is headquartered in Islamabad, Pakistan, and this policy is designed to comply with applicable Pakistani data protection regulations.

We collect information necessary to provide, maintain, and improve our ERP platform. The types of information we collect include:

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the COMX ERP platform and its features, including POS, inventory, accounting, HR, and analytics modules.
• Account Management: To create and manage your account, process payments, and communicate with you about your subscription.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, and develop new features and improvements.
• Customer Support: To respond to your inquiries, provide technical assistance, and resolve issues.
• Communication: To send service-related notifications, updates, security alerts, and, with your consent, marketing communications.
• Security & Compliance: To detect and prevent fraud, enforce our terms of service, and comply with legal obligations.

We do not sell your personal information or business data to third parties. We will never use your business data for purposes other than providing and improving our services.

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Sensitive fields such as passwords are hashed using modern, salted hashing algorithms.
• Data Hosting: Your business data is hosted on secure servers located in Pakistan to ensure compliance with local data residency preferences and minimize latency for Pakistani businesses. We use enterprise-grade cloud infrastructure with redundancy and failover capabilities.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access sensitive systems and data. All access is logged and audited.
• Regular Backups: We perform automated daily backups with secure offsite storage to protect against data loss.
• Monitoring: Continuous security monitoring and intrusion detection systems are in place to identify and respond to threats in real time.

While we employ robust security measures, no method of electronic storage or transmission is completely secure. We continuously review and enhance our security practices to protect your data.

We do not sell, rent, or trade your personal information or business data. We may share limited information with third parties only in the following circumstances:

• Service Providers: We work with trusted third-party providers for hosting, payment processing, email delivery, and analytics. These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change and ensure the receiving party honors this privacy policy.
• With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

You have the following rights regarding your personal information and business data:

• Right to Access: You may request a copy of the personal information we hold about you at any time. Business data entered into COMX ERP is accessible to you through the platform and can be exported at any time.
• Right to Correction: If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
• Right to Deletion: You may request the deletion of your personal information and account. Upon account termination, we will delete or anonymize your data within 30 days, except where retention is required by law.
• Right to Data Portability: You can export your business data from COMX ERP in standard formats at any time through the platform's export features.
• Right to Object: You may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

To exercise any of these rights, please contact us at comx.ech@gmail.com. We will respond to your request within 15 business days.

COMX ERP uses cookies and similar technologies to enhance your experience. The types of cookies we use include:

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent the platform from functioning correctly.

We retain your information for as long as your account is active or as needed to provide you with our services. Specific retention periods are as follows:

• Account Information: Retained for the duration of your active account and for up to 30 days following account deletion.
• Business Data: Retained for the duration of your subscription. Upon termination, you will have 30 days to export your data before it is permanently deleted.
• Usage & Analytics Data: Retained in anonymized form for up to 24 months for product improvement purposes.
• Financial Records: Billing and transaction records may be retained for up to 7 years as required by Pakistani tax and accounting regulations.

When data is no longer needed, it is securely deleted or anonymized in accordance with our data destruction procedures.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email or through a prominent notice on our platform at least 15 days before the changes take effect.
• Where required, obtain your consent before applying changes that materially affect how your data is processed.

We encourage you to review this policy periodically. Your continued use of COMX ERP after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.