Privacy Policy

Umbrella Suite is a multi-tenant business CRM and ERP platform for enterprise (B2B) and retail (B2C) organizations, accessible via web browser and our iOS/Android mobile apps.

Contact: hello@umbrellasuite.com
Website: https://umbrellasuite.com

2.1 Account Information

When you or your organization sign up, we collect:

• Name, email address, phone number
• Employee code, designation, role/permissions within your organization
• Login credentials (passwords are hashed and never stored in plain text)

2.2 Business Data You Enter

As part of using the Service, your organization may enter and store:

• Customer, contact, lead, and opportunity records
• Orders, invoices, quotations, and related line items
• Retail customer, product, and transaction records
• Notes, activities, and other business records you create

This data belongs to your organization (“Tenant”) and is stored in a dedicated, isolated database for your organization. We do not access, use, or share this data except as necessary to provide, maintain, or support the Service, or as required by law.

2.3 Automatically Collected Information

• Device information (device type, operating system version) — used only for app compatibility and crash diagnostics
• App usage information (features used, error logs) — used to improve reliability
• We do not collect precise location data
• We do not use advertising identifiers or third-party advertising SDKs
• We do not track you across other companies' apps or websites

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and enforce access permissions
• Generate documents (quotations, invoices, receipts) you request
• Send in-app notifications related to your business records (approvals, assignments, workflow alerts)
• Diagnose and fix technical issues
• Communicate with you about your account or the Service

We do not sell your data or your organization's business data to third parties, and we do not use your business data to train any third-party AI/ML models.

• All data is stored using Supabase (PostgreSQL-based infrastructure) with encryption in transit (TLS) and at rest.
• Each tenant organization's business data is stored in a logically isolated database, separate from other tenants.
• Access to production data is restricted to authorized personnel for support and maintenance purposes only.
• Passwords are never stored in plain text.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

We may share information with:

• Sub-processors who help us operate the Service (e.g., Supabase for database hosting, Expo/EAS for mobile app delivery) — bound by their own confidentiality and data protection obligations
• Law enforcement or regulators, only if required by valid legal process
• A successor entity, in the event of a merger, acquisition, or sale of assets, with notice to affected users where required by law

We do not share your data with advertisers or data brokers.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated personal information
• Object to or restrict certain processing of your information

To exercise these rights, contact us at hello@umbrellasuite.com. Requests related to business data within a tenant organization (e.g., CRM records) should generally be directed to your organization's administrator, as they control that data.

We retain personal information for as long as your account is active or as needed to provide the Service. If your organization's subscription ends or your account is deleted, we will delete or anonymize personal information within a reasonable period, except where retention is required by law.

The Service is intended for business use by adults and is not directed at children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

Depending on your organization's hosting configuration, your data may be processed and stored in data centers located outside your country of residence. We take steps to ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: hello@umbrellasuite.com
Website: https://umbrellasuite.com