Privacy Policy

1. Who We Are

Bizora Technologies (Pvt.) Ltd. ("Bizora", "we", "us") is a Pakistani software company that develops and sells Bizora ERP — a desktop enterprise resource planning application for businesses in Pakistan. Our registered office is in Pakistan.

Contact: privacy@bizoraerp.com

2. Data We Collect

We collect only the minimum data necessary to operate the license system:

• License key — to verify your purchase
• Device fingerprint (hashed) — a one-way hash of your CPU, hostname, and platform. Used to bind licenses to devices. Never identifies you personally.
• Device name — your computer's hostname (e.g. "Johns-MacBook"). Used for your own reference in the license portal.
• App version — to ensure compatibility and detect outdated builds.
• Activation timestamp — when activation occurred.
• Email address — collected at purchase time (via our payment provider, Paddle). Used only for license delivery and important product notifications.

We do not collect: your invoices, clients, employees, financial data, documents, or any business records. These never leave your device.

3. Your Business Data

All business data you enter into Bizora ERP is stored in a local SQLite database on your computer at:

• macOS: ~/Library/Application Support/BizoraTechnologies/BizoraTechnologiesERP/
• Windows: %APPDATA%\BizoraTechnologies\BizoraTechnologiesERP\

This data is yours. We have no access to it. It is never transmitted anywhere unless you explicitly use the email client feature (which uses your own SMTP credentials).

4. License Server Communication

The app contacts our license server (api.bizoraerp.com) only for:

• Activation (when you enter a license key)
• Periodic license verification (every 24 hours, when online)
• Deactivation (when you transfer your license to another device)

If the app cannot reach the server, a 30-day offline grace period applies. Your work is never interrupted by connectivity issues.

5. Payment Data

Payments are processed by Paddle.com, our payment provider. We do not collect or store credit card numbers, bank details, or payment credentials. Paddle's privacy policy governs payment data: paddle.com/legal/privacy

6. Cookies & Website

Our website (bizoraerp.com) uses minimal, functional cookies only — no advertising trackers, no Google Analytics. A cookie consent banner will appear if analytics are added in future.

7. Data Retention

License records are retained for the duration of your active license plus 3 years for accounting and legal compliance. You may request deletion of your personal data (email, device records) by emailing privacy@bizoraerp.com. Note: deletion will deactivate your license.

8. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing. We may share data with:

• Paddle — payment processing (see Section 5)
• Supabase — our license database infrastructure. Supabase is GDPR-compliant and stores data in EU servers.
• Law enforcement — if required by Pakistani law or valid legal process.

9. Security

License cache files are AES-256-CBC encrypted on disk, tied to your specific device fingerprint. Even if someone copies the cache file to another computer, it cannot be decrypted. Device fingerprints are one-way SHA-256 hashes and cannot be reversed to identify you.

10. Your Rights

You may at any time: request a copy of data we hold about you, request correction of inaccurate data, request deletion (subject to license implications), or object to processing. Contact privacy@bizoraerp.com with the subject line "Data Request".

11. Changes to This Policy

We will notify registered customers by email of any material changes. The "Last updated" date at the top of this page reflects the current version.

12. Contact

Bizora Technologies (Pvt.) Ltd.
Email: privacy@bizoraerp.com
Website: bizoraerp.com