Privacy Policy

1. Introduction

Welcome to BOOM ERP. We fully understand that the privacy of your data is a top priority, especially since our platform stores on your behalf sensitive information about your business, your customers and your employees — including CRM and sales records, calls and WhatsApp conversations, email and SMS marketing lists, projects, invoices and accounting, HR and payroll files, inventory, bookings, signed documents and e-signatures, surveys, and the credentials you store in the password vault. This Privacy Policy aims to clearly explain how we handle your data with full transparency.

By using our services, whether during a free trial or as a paid subscriber, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

To create your account, bill you, and keep the platform running, we collect only the following — and nothing more:

• Account Data: Name, email address, phone number, and company name upon registration, together with the billing details needed for a paid subscription (billing name and address, tax number, and invoice history). Payments are processed by our payment provider.
• Usage Data: Information on how you interact with the system (e.g., features used, pages visited, login times, and IP address), strictly to improve user experience and fix bugs.
• Cookies & Analytics: On our public website boom-erp.com we use essential cookies to keep the site and your session working, and Google Analytics (through Google Site Kit) to measure traffic in aggregate — visits, referring sources, and pages viewed. You can block or delete cookies at any time from your browser settings, or install Google's Analytics opt-out add-on. We do not use advertising cookies and we do not sell any of this data.

3. Absolute Confidentiality & Sharing

We are strictly committed to the confidentiality of your business data. We never access, sell, rent, or share your customer lists or business data with any third party for marketing purposes.

We may share information only in the following restricted cases:

• Service Providers: Vetted third-party providers that help us operate the service, each receiving only what it needs: cloud hosting and infrastructure, email delivery, SMS gateways, WhatsApp messaging through the WhatsApp Cloud API operated by Meta, payment processing for subscriptions. Every provider is bound by confidentiality obligations and may use your data only to deliver the service to us. Some of these providers may store or process data outside Jordan.
• Legal Compliance: If required by law or in response to valid requests by public authorities.

4. Data Retention & Deletion

We understand that you might need time to evaluate our system or manage your subscription, so we have designed a fair data retention policy:

• During the 7-day free trial: You can safely enter real business data — no credit card is required, and your trial data is treated with exactly the same confidentiality and security as a paid subscription.
• Unpaid Subscription or Cancellation: If your free trial ends and the subscription fee falls due but is not paid, or if you cancel your subscription, your account is suspended. However, we securely retain your data for 3 months from that date, so you can complete the payment or reactivate and continue exactly where you stopped.
• Permanent Deletion: If the 3-month period passes without payment or reactivation, all your data, client lists, and files are permanently deleted from our live systems, and any copies remaining in our backup media are overwritten in the ordinary backup rotation, after which no copy remains. We keep only the minimum records we are legally required to keep — for example invoices and payment records required under Jordanian tax and accounting law.

5. Data Protection & Security

Your data security is critical to us. We apply recognized security practices to protect your information, including restricted staff access on a need-to-know basis and the separation of each customer's workspace from all others:

We also perform regular automated backups to reduce the risk of data loss caused by technical failures. No system can guarantee that data will never be lost, so we recommend that you also export your own copy of important data from time to time.

6. Your Rights

As a user of the system, you maintain full control over your data:

• Right to Export: You can export your customer lists and data from the system at any time.
• Right to Rectification: You can correct or update any company information via your settings.
• Right of Access: You can ask us what personal data we hold about you and receive a copy of it.
• Right to Object & Withdraw Consent: You can unsubscribe from our marketing emails and SMS at any time, and object to any processing that is not required to run your subscription.
• Right to Complain: If you believe we have mishandled your data, write to info@boom-erp.com. We respond to every privacy request within 30 days.
• Right to Immediate Deletion: You can request the permanent deletion of your account and all associated data before the 3-month period ends by contacting our support team.

7. Who We Are & How to Reach Us

BOOM ERP is a product of Boom Media, based in Al-Abdali, Amman, Jordan, serving customers in Jordan and across the wider MENA region. This policy is governed by the laws of the Hashemite Kingdom of Jordan. For any privacy question, data request, or complaint, our only official contact address is info@boom-erp.com.

For the data you enter about your own customers and employees, you remain the data controller and we act as your processor: we handle that data only to run the service for you and on your instructions, never for our own purposes.

8. Security Incidents

If a security incident affects your personal data, we will notify you without undue delay by email at the address registered on your account, explain what happened and what we are doing about it, and tell you what steps you should take.

9. Changes to This Policy

We may update this policy as the platform develops. The date at the top of this page always shows the current version, and we will announce material changes inside the application or by email before they take effect. Continuing to use the service after a change takes effect means you accept the updated policy.