Privacy Policy

1. Introduction

S.T.A.R. ERP ("we", "our", or "us") is operated by S.T.A.R. Labs Technology, an Australian company based in Melbourne. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at starlerp.com and related services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and optional profile details (phone number, job title, profile photo). If you sign up via Google OAuth, we receive basic profile information from Google.

2.2 Organization Data

Data you and your team enter into the platform — including companies, contacts, deals, invoices, employees, projects, tasks, documents, and other business records — is stored within your organization's isolated environment.

2.3 Usage Data

We automatically collect technical information such as browser type, operating system, IP address, pages visited, and interaction patterns to improve performance and user experience.

2.4 Cookies & Tracking

We use essential cookies for authentication and session management. See our Cookie Policy for more details.

3. How We Use Your Information

• Provide, maintain, and improve the S.T.A.R. ERP platform
• Authenticate users and manage sessions
• Process payments and manage subscriptions
• Send transactional emails (invoices, proposals, notifications)
• Provide AI-powered features (proposal generation, analytics insights)
• Respond to support requests and inquiries
• Detect, prevent, and address security issues
• Comply with legal obligations

4. AI Features & Data Processing

When you use AI features (proposal generation, smart analytics, chat assistant), relevant content is sent to third-party AI providers (OpenAI, Google) for processing. We do not use your data to train AI models. AI responses are generated on-demand and not stored by the AI providers beyond the processing session.

5. Data Sharing & Third Parties

We do not sell your personal information. We share data only with:

• Supabase — database hosting and authentication (data stored in secure, SOC2-compliant infrastructure)
• Vercel — application hosting and edge delivery
• Stripe — payment processing (when applicable)
• OpenAI / Google AI — AI feature processing
• Google Workspace — when you connect calendar, drive, or email integrations

6. Data Security

We implement industry-standard security measures including:

• Row-Level Security (RLS) policies ensuring data isolation between organizations
• Encrypted connections (TLS/SSL) for all data in transit
• Encrypted data at rest via Supabase's infrastructure
• JWT-based authentication with secure session management
• Role-based access control (RBAC) within organizations

7. Data Retention

We retain your data for as long as your account is active. When you delete your account or organization, all associated data is permanently removed within 30 days. Backups containing your data are purged within 90 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (export your data)

To exercise any of these rights, contact us at [email protected].

9. Australian Privacy Act

As an Australian company, we comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you believe we have breached the APPs, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

10. Children's Privacy

S.T.A.R. ERP is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or requests:

• Email: [email protected]
• Phone: +61 455 663 316
• Location: Melbourne, Australia
• Company: S.T.A.R. Labs Technology