Introduction

LaabamOne Business Solutions Pvt Ltd ("we", "us", or "our") operates the LaabamOne ERP platform, including our website (laabam.one), web application (laabam.app), and mobile applications available on the Google Play Store and Apple App Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services across all platforms.

1. Information We Collect

1.1 Personal Information

When you register for LaabamOne, we collect:

Full name and email address
Phone number
Company name and business details
Billing and payment information
Tax identification numbers (GST, PAN)

1.2 Business Data

During your use of our platform, we store:

Customer and vendor information
Financial records and transactions
Employee and payroll data
Inventory and product information
Invoices, receipts, and documents

1.3 Usage Data

We automatically collect:

IP address and device information
Browser type and version
Pages visited and features used
Time spent on the platform
Log data and error reports

2. How We Use Your Information

✓

Service Delivery

To provide, maintain, and improve our ERP platform and features

✓

Account Management

To create and manage your account, process payments, and handle subscriptions

✓

Customer Support

To respond to inquiries, provide technical assistance, and resolve issues

✓

Communications

To send service updates, security alerts, and promotional materials (with your consent)

✓

Compliance

To comply with legal obligations, tax regulations, and GST filing requirements

✓

Analytics

To analyze usage patterns and improve our services

3. How We Share Your Information

Important Note

We DO NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We may share data with:

Service Providers: Payment processors, cloud hosting providers, and email services that help us operate
Government Authorities: When required by law, for GST filing, tax compliance, or legal proceedings
Business Transfers: In case of merger, acquisition, or sale of assets (with prior notice)
With Your Consent: When you explicitly authorize us to share information

3.1 Artificial Intelligence (AI) Features

These features are off until you allow them. Nothing is sent to an AI service unless you tap "Allow" on the notice that names exactly what will be sent.

Some optional features use AI to read a document or message you choose and fill in a form for you. When you use one, the file or text you picked is uploaded to our server and passed to OpenAI, L.L.C. (United States) — our AI processing provider — which reads it and returns the extracted values to the app.

Which features use AI, and what each one sends:

AI Scan on a sales invoice or quote: the image/PDF you pick, including the customer name, address, GSTIN, item lines and amounts printed on it.
AI Scan on a purchase bill: the image/PDF you pick, including the vendor name, GSTIN, bill number, item lines and amounts.
AI receipt scan on an expense: the receipt image/PDF you pick, including vendor, date, amount, tax and GSTIN.
AI bank-statement analysis: the statement file you pick, including every transaction line and the account number, bank, branch and IFSC printed on it.
AI replies in Live Chat: the messages you type and any file you attach, plus your company name and the screen you asked from.

We ask permission separately for each of these features, before anything is sent, and the request names the data that feature will send. You can withdraw permission at any time in Settings → AI features & data; the feature then stops sending anything and asks again the next time you use it. If you never use these features, no data is sent to any AI service, and every one of them has a manual alternative.

We do not keep the file or message you picked after the values have been extracted from it. It is held only for as long as that single request takes and is not saved to our servers afterwards; only the extracted values are returned to the app, and they are stored only if you choose to save the form.

OpenAI processes this data as our service provider in order to return the extracted values. Under the OpenAI API terms that govern this use, OpenAI may process the data only to return that result, is required to protect it, and does not use data submitted through the API to train its models. We do not use it for advertising and we do not share it with any other AI service.

4. Your Privacy Rights

Access

Request a copy of all personal data we hold about you

Correction

Update or correct inaccurate information

Deletion

Request deletion of your personal data (subject to legal requirements)

Restriction

Limit how we use your data in certain situations

To exercise your rights, please contact us at privacy@laabam.one or call +91 73056 41462

5. Data Security

We implement industry-standard security measures to protect your information:

🔒

SSL Encryption

256-bit SSL encryption for data in transit

🛡️

Database Encryption

AES-256 encryption at rest

🔐

Access Control

Role-based access with 2FA

💾

Daily Backups

Automated backups with 30-day retention

🚨

Intrusion Detection

24/7 monitoring and alerts

✅

ISO/IEC 27001:2022 (ISMS/24M04105)

Certified security management

6. Data Retention

We retain your personal and business data for as long as your account is active or as needed to provide services. After account deletion:

Personal data is deleted within 30 days
Financial records are retained for 7 years (as per GST laws)
Backup copies are purged within 90 days
Anonymous analytics data may be retained indefinitely

7. Cookies & Tracking

We use cookies and similar technologies to:

Keep you signed in
Remember your preferences
Analyze site traffic and usage
Provide personalized features

You can control cookies through your browser settings. Note that disabling cookies may limit platform functionality.

8. Children's Privacy

LaabamOne is designed for business use and is not intended for children under 18. We do not knowingly collect information from minors. If you believe we have inadvertently collected such data, please contact us immediately.

9. Mobile Application Data

Our mobile applications (available on Google Play Store for Android and Apple App Store for iOS) collect additional data specific to mobile usage. This section details the data we collect, the permissions we request, and the third-party services integrated into our apps.

9.1 Mobile-Specific Data Collection

In addition to the data described above, our mobile apps may collect:

Device identifiers (Android Advertising ID, iOS Identifier for Vendors)
Device model, operating system version, and app version
Push notification tokens for sending alerts and updates
App crash reports and diagnostic data for improving stability
Local storage data for offline functionality
Network connection type and status

9.2 App Permissions

Our mobile apps request the following permissions, each for a specific purpose:

📷

Camera

To scan documents, capture receipts, and upload profile photos

📁

Storage / Files

To download invoices, reports, and attachments for offline access

🔔

Push Notifications

To send payment reminders, invoice alerts, and approval notifications

🌐

Internet Access

Required for syncing data with our cloud servers and real-time updates

9.3 Third-Party SDKs & Services

Our mobile apps integrate the following third-party services, each with their own privacy policies:

Firebase (Google) — Push notifications, crash reporting, and analytics
Sentry — Error tracking and performance monitoring
DigitalOcean Spaces — Secure file storage for documents and attachments
Razorpay / Stripe — Payment processing (payment data is handled directly by these providers and never stored on our servers)

9.4 Advertising & Tracking

We do NOT use advertising identifiers to track you across other apps or websites. We do NOT serve targeted advertisements. We do NOT sell your data to advertisers. Our apps do NOT participate in cross-app tracking. On iOS, we comply with Apple's App Tracking Transparency (ATT) framework. We will request your permission before any tracking, which you can decline without affecting core app functionality.

10. Account & Data Deletion

You have the right to delete your account and all associated data at any time. We provide clear and accessible methods for account deletion as required by Google Play Store and Apple App Store policies.

How to Request Account Deletion

1
Send an email to privacy@laabam.one with the subject "Account Deletion Request"
2
Include your registered email address and company name for verification
3
Our team will verify your identity and process the request within 30 days
4
You will receive a confirmation email once all data has been permanently deleted

Data That Will Be Deleted

Your profile information (name, email, phone number, profile photo)
Authentication tokens, session data, and push notification tokens
Business data including invoices, customers, vendors, and transactions
All files and documents uploaded to our platform
App preferences and settings

Legal Retention Notice

Certain financial records may be retained for up to 7 years as required by GST laws and regulations (Income Tax Act, GST Act). Anonymized and aggregated analytics data that cannot identify you may be retained. All other personal data will be permanently deleted within 30 days of your request.

11. International Data Transfers

Your data is primarily stored in secure data centers located in India. If we transfer data internationally, we ensure adequate safeguards are in place, including:

Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Compliance with GDPR and applicable data protection laws

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Continued use of our services after changes indicates acceptance of the updated policy.

Your Privacy is Our Priority