Privacy Policy

Geofinity Solutions Pvt. Ltd., Kathmandu, Nepal.

• Email: info@geofinity.com.np
• Phone: +977 9802372660
• Website: https://geofinity.com.np

Information you provide. Name, business email, phone, company, job title, product interest, and message when you submit a demo or contact request; account credentials, profile fields and workspace configuration when an OptERP tenant is provisioned; content, records and files you upload while using OptERP modules (e.g. patients, inventory, orders, students, employees, invoices).

Information collected automatically. Device and browser details, IP address, approximate location derived from IP, pages visited, referring URL, actions performed, and diagnostic logs. Collected via cookies, local/session storage and server logs (see our Cookies Policy).

Information from third parties. Authentication and integration data from services you choose to connect — email, calendar, payment, identity or accounting providers — and enrichment data from publicly available business sources.

Sensitive data. Certain OptERP editions (Hospital, Fertility) allow customers to process health data. Where we act as processor on such data, we do so only on customer instructions and under an executed data processing agreement.

• Provide, operate, secure, monitor and improve OptERP and this website.
• Provision tenants, authenticate users and enforce role-based access.
• Respond to demo requests, sales enquiries and customer support tickets.
• Send transactional notifications (billing, security, service status).
• With your consent, send product updates, newsletters and event invitations.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal, tax and accounting obligations and enforce our Terms.
• Produce aggregated, de-identified analytics that do not identify individuals.

• Contract — to deliver the services you or your organisation requested.
• Legitimate interests — to secure, operate and improve OptERP, balanced against your rights.
• Consent — for optional cookies, marketing communications and certain integrations.
• Legal obligation — where processing is required by applicable law.

We do not sell personal data. We share information only with:

• Vetted service providers who help us run the platform (cloud hosting, database, email delivery, analytics, error monitoring, customer support).
• Payment processors when you subscribe to paid plans.
• Authorities, regulators or law enforcement where legally required or to protect rights, safety or property.
• Professional advisers under confidentiality.
• A successor entity in the context of a merger, acquisition or asset transfer, with continued protection of your data.

All processors are bound by written contracts including confidentiality, security and data protection obligations.

A current list of the main sub-processors supporting OptERP is available on request from info@geofinity.com.np. We assess each sub-processor for security and compliance before engagement and review them periodically.

• Demo and contact submissions: up to 24 months from last interaction.
• Customer account and workspace data: for the term of the subscription plus up to 90 days for export, then deletion.
• Billing and tax records: as required by applicable law (typically 5–7 years).
• Security logs: up to 12 months, longer where legally required.
• Backups: rolling window, overwritten on schedule.

OptERP is designed with a security architecture aligned to ISO/IEC 27001 recommendations: encryption in transit (TLS 1.2+) and at rest, role-based access control, least-privilege administration, hardened infrastructure, audit logging, vulnerability management and routine backups. No system can be perfectly secure — report concerns to info@geofinity.com.np.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting past processing).
• Lodge a complaint with a competent supervisory authority.

To exercise any right, contact info@geofinity.com.np. Where you use OptERP through an employer or customer, please contact them directly — we will support them in responding to your request.

Data may be processed in regions where our infrastructure and providers operate. When personal data is transferred outside your country, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

OptERP is intended for business use and is not directed to individuals under 16. The OptERP Education edition is used by institutions and processes student records under the institution’s instructions and lawful basis.

OptERP includes AI-assisted features (e.g. recommendations, summarisation). These support human decision-making and do not produce legal or similarly significant effects on you without human review.

We may update this policy from time to time. Material changes will be notified through the product or by email where appropriate. The “Last updated” date reflects the latest revision. Continued use after the effective date constitutes acceptance.