Chat Privacy

Introduction and scope

ERP Online Hub ("EOH," "we," "us," or "our") provides an AI-powered platform that helps ERP professionals, consultants, and organizations design configurations, troubleshoot errors, learn ERP systems, and produce documentation. This Privacy Policy applies to personal information we process when you visit erponlinehub.com, create an account, or use any EOH service or feature.

By using our services, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the services. This Policy is written to meet the requirements of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), and other applicable California privacy laws. It supplements any other notices we provide and does not override any separate agreement you have with us.

Who we are

ERP Online Hub is the business responsible for the personal information described in this Policy (the "business" under the CCPA). For privacy questions or to exercise your rights, use the details in the Contact us section.

Personal information we collect

We collect the categories of personal information listed below. The specific information we hold about you depends on which services and features you use.

We do not intentionally collect government identifiers, financial account numbers, health information, or other special categories beyond what is described here. Please do not submit such information through chat, files, or shared screens unless it is necessary and you are authorized to do so.

Where we get your information

• Directly from you — when you register, complete your profile, subscribe, chat, upload files, speak to the voice assistant, or share your screen.
• Automatically — through cookies and similar technologies, and from your device and browser when you use the services.
• From sign-in and payment providers — limited account and transaction information when you choose Google or LinkedIn sign-in, or when you make a payment through our processor.
• From service providers — hosting, analytics, and infrastructure partners that operate the platform on our behalf.

How we use your information

We use personal information for the following business purposes:

• Provide the services — operate your account, generate AI responses, run voice and screen-guide sessions, produce exports, and deliver Learning Hub content.
• Process transactions — manage subscriptions, billing, and usage allowances.
• Personalize your experience — remember your preferences, language, and plan, and tailor guidance to your context.
• Maintain and improve the platform — monitor performance, debug issues, develop features, and ensure quality.
• Security and integrity — authenticate users, enforce rate limits, detect and prevent fraud, abuse, and unauthorized access.
• Communicate with you — send service messages, respond to support requests, and, where permitted, send product updates you can opt out of.
• Comply with law — meet legal, regulatory, tax, and enforcement obligations.

We will not use your personal information for materially different, unrelated, or incompatible purposes without providing you notice.

How EOH AI processes your data

EOH AI is our own multi-model engine. To generate answers and guidance, your prompts and the content you submit are processed by AI models, some of which are operated by trusted infrastructure providers acting as our service providers under contract. We may also run grounded web searches to verify answers; those searches use your query text, not your account identity.

Training and model use

We do not sell your content, and we do not use your private chats, files, voice, or shared-screen content to build advertising profiles. We instruct our AI processors to handle your content solely to provide the service to you. [Confirm with counsel and with each AI provider: state here whether your content may be used to train any provider's general models, and whether that is disabled by contract.]

Automated processing

AI outputs are generated automatically and may be imperfect. They are provided to assist you and are not a substitute for professional judgment. You remain responsible for reviewing and validating any configuration, code, or recommendation before applying it to a live system.

Live screen sharing and Live Screen Guide

Our live screen features let EOH see the screen you choose to share so it can guide you through ERP tasks. The Live Screen Guide adds step-by-step coaching: it highlights the specific buttons and fields to use, shows on-screen captions, and walks you through one step at a time. Because this feature involves images of your screen, we describe it in detail here.

What we access

• We capture still images (frames) of the screen or window you choose to share through your browser's screen-sharing prompt. You select what to share, and you can stop sharing at any time.
• We do not connect to, log into, or take control of your ERP system, and we never ask for your system credentials.
• We do not read, extract, copy, or store your underlying ERP database records. EOH only interprets what is visibly on the screen you present, in order to guide you.

How the images are used

• Each shared frame is sent to our AI engine to be analyzed so we can locate the relevant controls and generate the next guidance step, its on-screen highlights, and its caption.
• We generate a short text description of the analysis and the guidance we provide. This text, together with your session conversation, may be saved to your account history so you can revisit it and so the guide can keep context across steps.
• Highlights are drawn on a preview of your shared screen inside the EOH panel only. EOH does not draw on, click, or interact with your actual system.

Your control

• Sharing is initiated by you and clearly indicated by your browser. Ending the session stops all capture immediately.
• Please avoid displaying passwords, personal data of others, or confidential records you are not authorized to share. You are responsible for what you choose to show on screen.
• You can request deletion of stored screen-guide analyses and session history as described in Your California privacy rights.

Voice data

When you use the voice assistant, we capture your spoken audio to convert it to text (speech-to-text) and to generate spoken responses (text-to-speech). Audio is processed to provide the feature and to maintain your conversation context. Voice minutes are metered against your plan. You can use the platform without voice by typing instead.

File uploads and document exports

You may upload files for the AI to analyze and may export AI-generated content as PDF, Word, PowerPoint, or Excel documents. Uploaded files and generated exports are stored in your account so you can access them, subject to the limits of your plan. You control which files you upload; please upload only content you are authorized to process.

Learning Hub and simulations

The Learning Hub provides training content and interactive simulations (including tutor, stakeholder, troubleshooting, and interview modes) across many ERP systems. We process your progress, responses, and preferences to deliver lessons, track completion, and personalize your learning. Simulation inputs are treated the same as other chat content described in this Policy.

Cookies and tracking technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the platform, and understand how the services are used. Strictly necessary cookies are required for the site to function. You can control non-essential cookies through your browser settings.

Global Privacy Control. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by law. If your browser sends a GPC signal, we treat it as a request to opt out of any "sale" or "sharing" of personal information for that browser or device.

How we disclose information

We disclose personal information only as needed to run the platform and as described below. We share with service providers and processors who are contractually bound to use the information solely to perform services for us and to protect it. Typical categories include:

We may also disclose information when you direct us to, or with your consent.

Sale and sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding twelve months. If this ever changes, we will update this Policy, provide the required notice, and offer an easy way to opt out.

Sensitive personal information

To the extent any information we process is treated as "sensitive personal information" under the CCPA (for example, precise account credentials), we use it only to provide the services you request, secure the platform, and for other purposes permitted without an opt-out right under the CCPA. We do not use sensitive personal information to infer characteristics about you.

Data retention

We keep personal information only for as long as necessary to provide the services, meet the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type. As a general guide:

• Account and profile data — for the life of your account, then deleted or de-identified within [insert period, e.g., 90 days] of closure.
• Chat, voice, screen-guide, and file content — retained in your history until you delete it or your account is closed, subject to backups.
• Billing records — retained as required by tax and accounting law.
• Security and diagnostic logs — retained for a limited period for integrity and troubleshooting.

When retention is no longer required, we delete or de-identify the information. Residual copies may persist briefly in backups before being overwritten.

How we protect your data

We maintain administrative, technical, and physical safeguards designed to protect personal information. These include:

• Encryption in transit for connections between you and the platform.
• Two-factor authentication (2FA) available to protect account access.
• Access controls that limit internal access to personal information on a need-to-know basis.
• Private sessions — your chats, files, and guidance history are tied to your account.
• Secure payments processed by a PCI-compliant payment provider; EOH does not store your card details.
• Rate limiting and abuse prevention to guard against automated attacks.
• Ongoing monitoring, logging, and review of our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for the content you choose to share, upload, or display on screen.

Your California privacy rights

If you are a California resident, the CCPA gives you the following rights, subject to certain exceptions:

How to exercise your rights

To submit a request, email privacy@erponlinehub.com or use the contact details below. You may also manage much of your data directly in your account.

• Verification. To protect your information, we will take reasonable steps to verify your identity before fulfilling a request, typically by confirming information associated with your account. We will not fulfill a request if we cannot verify your identity.
• Authorized agents. You may use an authorized agent to submit a request. We may require the agent to provide proof of authorization and may still verify your identity directly.
• Timing. We will confirm receipt within 10 business days and respond to verifiable requests within 45 calendar days, extendable by an additional 45 days where reasonably necessary, with notice to you.
• No fee. Requests are generally free, unless they are excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or decline, as permitted by law.
• Appeals. If we decline your request, you may ask us to reconsider by replying to our decision.

Shine the Light

California Civil Code Section 1798.83 ("Shine the Light") permits California residents to request information about disclosures of personal information to third parties for those parties' own direct marketing purposes. We do not disclose personal information to third parties for their direct marketing. You may contact us at the address below with any Shine the Light request.

Children's privacy

Our services are intended for professionals and are not directed to children. We do not knowingly collect personal information from anyone under 16. We do not sell or share the personal information of consumers we know to be under 16. If you believe a child has provided us personal information, please contact us so we can delete it.

International users

EOH operates from and processes information in the United States and other locations where our service providers operate. If you access the services from outside the United States, you understand that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

Third-party links and integrations

The services may link to or integrate with third-party sites and tools that we do not control, including sign-in and payment providers. This Policy does not apply to those third parties. We encourage you to review their privacy notices before providing them information.

Changes to this policy

We may update this Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the services after an update means you accept the revised Policy.

Contact us

If you have questions about this Policy or wish to exercise your rights, contact us: