← Back to Scan ERP

Privacy Policy

Last updated: 26 September 2026

Scan ERP is a garment manufacturing ERP system, operated by Trishakti Apparel, Gaindakot, Nawalpur, Nepal. This policy explains what data we collect, why, and what you can ask us to do about it.

1. Analytics and cookies

This website uses three analytics services:

• Google Analytics 4 — page views and traffic sources. IP addresses are anonymised.
• Ahrefs Analytics — aggregate traffic and referrer data.
• Microsoft Clarity — heatmaps and anonymised session replays: a recording of mouse movement, scrolling and clicks on the page. Clarity masks form input, so what you type into a field is not recorded.

We also record on-page behaviour through Google Analytics — scroll depth, which sections held attention, clicks and FAQ opens. This runs only when analytics are active.

If you are visiting from the EU, the EEA or the UK, none of these load until you press Accept on the cookie banner. If you press Decline, no analytics script loads and no analytics cookie is set. Outside those regions the scripts load on page view.

You can change your mind at any time: reset your cookie choice.

This website sets no advertising cookies, and we do not sell or share personal data with advertisers.

2. Demo request form

When you request a demo we collect your name, WhatsApp or phone number, factory name and machine count, plus your email address if you choose to give one. We use these only to contact you about Scan ERP and to prepare the demo.

Legal basis: your consent, given by submitting the form, and our legitimate interest in answering a business enquiry.

Retention: enquiry records are kept for 24 months from your last contact with us, then deleted.

3. ERP application data

If your factory runs Scan ERP in production, the system stores the operational data you enter: operators, bundles, scans, piece-rate earnings, attendance punches and inventory records.

This data belongs to your factory. We act as a processor on your instructions. We do not sell it, mine it, or use it to train models. Access is limited to the people your factory authorises, plus our engineers when you ask us for support.

Legal basis: performance of our contract with your factory.

Retention: for as long as your factory holds an account, plus 90 days after termination so the data can be exported, then deleted.

4. What we do not collect

• No payment card details are collected on this website.
• No advertising or cross-site tracking cookies.
• We do not buy contact lists or enrich your record from data brokers.
• Session replays mask form input — we do not capture what you type.

5. Where your data goes

This website is served by Firebase Hosting (Google). Application data is held in Google Cloud Firestore, primarily in the asia-south1 region. Analytics data is processed by Google, Ahrefs and Microsoft on their own infrastructure.

Personal data may therefore be transferred outside the EEA and the UK. Those transfers rely on the EU Standard Contractual Clauses and, for transfers to the United States, on the EU–US Data Privacy Framework where the recipient is certified. Each provider publishes its own terms: Google, Microsoft, Ahrefs.

Embedded demo videos are served by YouTube and load only when you press play. YouTube’s privacy policy applies from that point.

6. Security

• All traffic is served over HTTPS.
• Application sessions use HttpOnly cookies, which page scripts cannot read.
• Access to production data is role-based and limited to authorised accounts.

No system is perfect. If we discover a breach affecting your personal data we will notify the relevant supervisory authority within 72 hours, and tell affected people without undue delay, as GDPR Article 33 requires.

7. Your rights

If you are in the EU, the EEA or the UK, the GDPR gives you the right to:

• Access the personal data we hold about you.
• Rectify it if it is wrong.
• Erase it — the “right to be forgotten”.
• Restrict or object to how we process it, including direct marketing.
• Port it — receive it in a machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to your national data protection authority.

To exercise any of these, message the WhatsApp number below or email design.cad.tsa@gmail.com. We respond within 30 days, at no charge.

If your factory uses Scan ERP and the request concerns operational data, we will pass it to your factory, which is the controller of that data.

8. Children

This website and the Scan ERP application are business tools, not directed at anyone under 16. We do not knowingly collect data from children.

9. Changes to this policy

If we change this policy we update the date at the top. Material changes to how we use personal data will be announced here before they take effect.

10. Contact