Last updated October 21, 2026
This policy explains what information VectisERP ("VectisERP," "we," "us") collects when you visit our website or use our service, how we use it, and the choices and rights you have. VectisERP is inventory management software sold to businesses. It is not directed at, marketed to, or intended for use by children.
We act as a data controller for the information we collect to run our own business: your account and billing information, and the site and usage analytics described below.
We act as a data processor (or "service provider," under U.S. state law terminology) for the Content you or your team enter into your Workspace, such as supplier contact names or team member names captured in the activity log. For that data, your business is the controller, you decide what data to enter, and we process it only under your instructions and this policy to provide the service to you. If you require a formal data processing agreement covering this relationship, one is available on request.
We collect information in four categories.
Ahrefs Web Analytics measures visits and interactions on public marketing pages when you allow Analytics. We exclude workspace, sign-in, scanner and unsubscribe pages, and omit query strings and fragments from its page views. Ahrefs describes its service as cookie-free, with no raw IP addresses stored and no tracking of visitors across days. Its data collection explanation describes the information it receives, including referrals, device details and approximate location.
The free browser preview works differently from a registered account. Before you create an account, demo data you enter is stored only in your own browser's local storage. It is never transmitted to our servers, and clearing your browser data deletes it permanently. We may still collect basic site-analytics information (as described above) while you use the preview.
Please do not enter payment card numbers, government identification numbers, health information, or other sensitive personal data into free-text fields in your workspace (such as product descriptions or notes). The service is not designed to handle that category of data, and our Terms of Service address this directly.
We use the information above to:
We do not sell your personal information, and we do not use your inventory data or usage data to serve third-party advertising. We do not use automated decision-making or profiling that produces legal or similarly significant effects about you without human involvement.
Strictly necessary storage is always on. It keeps the site and the browser demo working and remembers your cookie and language choices. It uses your browser's local storage and session storage rather than cookies. Google Analytics, Ahrefs Web Analytics and advertising measurement are off until you allow them. Google uses analytics and advertising cookies; Ahrefs does not use cookies. Reject all and Accept all sit side by side in the cookie banner, nothing is pre-selected, and you can change your choice at any time from Cookie settings in the footer of any page. If your browser sends the Global Privacy Control signal, we keep advertising measurement off. We do not respond to the older "Do Not Track" signal, as there is no accepted standard for how to interpret it. See our Cookie Policy for the full list of cookies, what each one does, and how long it lasts. You can also block or delete cookies and local storage in your browser settings; doing so may sign you out of the demo and will remove demo data stored only in your browser.
We share information only with the service providers that help us run VectisERP, and only to the extent needed for them to perform their function:
These providers (our "subprocessors") are contractually restricted to using your information only to provide services to us. We do not sell your personal information, and we do not disclose it to third parties for cross-context behavioral advertising. If you would like a current list of our subprocessors, contact us.
We may also disclose information if required by law or legal process, or where we believe in good faith that disclosure is necessary to investigate or prevent fraud or abuse of the service, or to protect the rights, property, or safety of VectisERP, our users, or the public. If VectisERP is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
We may send you emails about product updates or features related to your account. If we ever send you promotional marketing emails, every message will include a working unsubscribe link, and you can opt out at any time; we will honor opt-out requests promptly. Opting out of marketing does not opt you out of transactional messages, such as billing receipts or security notices, which are necessary to operate your account.
We retain your account and workspace data for as long as your account is active. Data created during a free trial that does not convert to a paid subscription may be deleted after a limited period following the trial's end. If you close your account, we delete your workspace data within a commercially reasonable period, except where we are required to retain billing or transaction records for legal, tax, or accounting purposes, which we typically retain for up to seven years. Aggregated or de-identified analytics data, which can no longer be used to identify you, may be retained indefinitely.
We use industry-standard measures, including encryption in transit, access controls, and per-workspace data isolation, to protect your data. See our Security page for more detail, including how to report a vulnerability. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident that affects your personal information, we will notify affected users and, where required, regulators, in accordance with applicable law.
We may process and store information on servers located outside your country of residence, including in the United States. Where required by law, we rely on appropriate safeguards, such as standard contractual clauses, for transfers of personal information out of the European Economic Area, the United Kingdom, or Switzerland.
We do not currently offer a guarantee that data will be stored or processed only within a specific country or region, and we do not currently operate government-authorized, region-restricted, or U.S.-persons-only hosting environments (such as FedRAMP or GovCloud infrastructure). If your organization requires contractually guaranteed data residency in a specific jurisdiction, or is subject to regulatory regimes such as ITAR, EAR, or CMMC that impose such requirements, the Service does not currently meet that requirement, and you should not submit data subject to those requirements. See Section 16 of our Terms of Service for more detail.
Regardless of where you live, you can:
We may need to verify your identity before completing a request, and you may designate an authorized agent to make a request on your behalf if you provide us proof of that authorization. If we decline a request, we will explain why, and where applicable law provides an appeal right, we will tell you how to appeal.
If GDPR or UK GDPR applies to you, our legal bases for processing are: performance of a contract (to provide the service you signed up for), our legitimate interests (such as securing the service and understanding aggregate usage), consent (where we ask for it, such as for marketing emails), and compliance with legal obligations (such as tax recordkeeping). You have the right to access, correct, delete, restrict, or port your personal information, and to object to processing based on our legitimate interests or to withdraw consent at any time. You can exercise these rights by contacting us at the address below, and you have the right to lodge a complaint with your local data protection authority.
Under the CCPA/CPRA, California residents have the right to know what personal information we collect, request its deletion or correction, limit the use of sensitive personal information, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is currently nothing to opt out of. You will not receive discriminatory treatment for exercising any of these rights, and you may designate an authorized agent to submit a request on your behalf.
A number of other U.S. states have comprehensive privacy laws with rights similar to California's, including the right to access, correct, and delete your personal information, and the right to opt out of targeted advertising, the sale of personal information, and certain profiling. We do not sell personal information or use it for targeted advertising, so there is currently nothing to opt out of. If your state's law gives you the right to appeal a denied request, contact us and we will explain the process.
Washington's My Health My Data Act gives Washington residents rights over "consumer health data," a category defined more broadly than typical medical records. We do not collect consumer health data as part of operating VectisERP, and, as described in Section 2, we ask you not to enter health information into your workspace. If you believe we have inadvertently collected consumer health data, contact us and we will delete it. You have the right to withdraw any consent you gave us regarding such data and to have it deleted, consistent with the Act.
VectisERP is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.
We may update this policy as VectisERP changes. If we make material changes, we will update the date at the top of this page and, where appropriate, notify you directly.
Questions about this policy, or requests relating to your personal information, can be sent to privacy@vectiserp.com.