OnePackERP

Privacy Policy

Last updated: 1 October 2026

OnePackERP (onepackerp.com) is business software for carton and packaging companies in Pakistan: orders, delivery challans, invoices, stock, purchases, ledgers, payments and payroll. This policy explains what information we hold, why, where it is kept and the choices you have.

Information we hold

• Your account: your name, email address, mobile number (if you add one) and your password, which is stored only in scrambled (hashed) form.
• Your company's records: everything your team enters — customers, suppliers, orders, challans, invoices, stock, purchases, payments, ledgers, employees and salaries, bank accounts, expenses, and uploaded files such as your logo.
• Billing: the subscription you choose and the payment proof (transaction ID and screenshot) you upload.
• Security records: sign-in times, IP address and browser type, kept to protect your account and to help when someone cannot sign in. We never record passwords or one-time codes in these records.

How we use it

• To run the software for your company and show your data only to your company's users.
• To send emails you need: one-time sign-in and password codes, password-reset messages and billing notices.
• To keep the service secure, prevent misuse and answer support requests.

We do not sell your information, and we do not use your business records for advertising.

Who else processes it

• Hosting: the application and its database run on our own server.
• Email: emails are sent through Google's Gmail service.
• AI assistant (optional): if your company owner uses the assistant in the Boss app, the question and the business figures needed to answer it are sent to our AI provider to produce the answer.
• FBR (optional): if your company turns on FBR Digital Invoicing, the invoices you choose to submit are sent to FBR's system using your own FBR token.
• Backups: database backups are sent over an encrypted connection to OnePackERP's own Google Drive (see below).

We share information with authorities only when the law requires it.

Backups and Google Drive

Every night the OnePackERP database is backed up on our server and a copy is stored in OnePackERP's own Google Drive account. Server copies are kept for 14 days and Google Drive copies for 30 days, then deleted automatically.

The Google app "OnePackERP Backups" is used only by OnePackERP itself, to upload these backups to OnePackERP's own Drive. It is never used to sign in our customers and never accesses any customer's Google account or files. It requests only the drive.file permission, which lets it see only the files it created.

How long we keep information

• Your records stay while your company uses OnePackERP.
• If a company is permanently deleted, its data is removed from the live system; a protected backup of it is kept on our server for 90 days in case the deletion was a mistake, then deleted.
• Database backups are kept for 14 days on the server and 30 days in Google Drive.
• Sign-in security records are kept for 30 days.

Security

The site uses HTTPS, passwords are hashed, sign-in codes expire after 10 minutes, repeated wrong attempts are slowed down, and changing or resetting a password signs out every other device. Each company's data is kept separate from every other company's.

Your choices

• You can view and correct your company's records inside OnePackERP at any time.
• You can change your name, email, mobile number and password in Settings, and sign out of all other devices.
• To close your account and have your company's data deleted, contact us at the address below.

Changes

If we change this policy, we will update the date at the top of this page.

Contact