Privacy Policy

Account Information: During registration, you provide a phone number for verification. Your phone number is stored as your account identifier.

Store Credentials: Takealot Seller API Keys you voluntarily add to connect your store data. All API Keys are encrypted using AES-256-GCM encryption, ensuring they cannot be read in plaintext even in the event of a data breach.

Business Data: Orders, products, inventory, and sales data synced from Takealot via API. This data is used solely to provide you with ERP management services.

Usage Logs: Automatically recorded server logs including IP addresses, browser types, and access times, used for security and service optimization.

Free Tool Data: The Profit Calculator and Label Cropper run entirely in your browser. No files are uploaded to our servers — your PDFs and calculation data remain local to your device.

Core Services: Order synchronization, smart pricing, data reporting, and other ERP functions.

Account Verification & Security: Phone-based OTP verification to prevent unauthorized access.

Service Improvement: Analysis of anonymized usage trends to optimize product features and performance.

We will never use your business data (product information, sales figures, sourcing strategies, etc.) for any commercial analysis, resale, or third-party sharing. This is our absolute commitment.

Encryption in Transit: All data transmissions use HTTPS/TLS encryption.

Encryption at Rest: Sensitive credentials (API Keys) are stored with AES-256-GCM symmetric encryption.

Multi-Tenant Isolation: Strict database-level tenant isolation ensures each user's data is completely independent and invisible to others.

Infrastructure: Services are deployed on high-availability cloud infrastructure with automated backups and disaster recovery.

Access Control: We follow the principle of least privilege — only necessary system components can access relevant data.

Takealot Seller API: We interact with Takealot using your authorized API Keys. Data flows only between you and Takealot.

Cloud Providers: We use internationally certified cloud computing services for infrastructure support.

We do not sell or share your data with any advertising platforms, data analytics companies, or other third-party commercial entities.

Right of Access: You can view your account information and store data at any time within the system.

Right to Deletion: You can remove stores via Store Management, which deletes the associated API Keys and related data. To close your account and delete all data, please contact our support team.

Data Portability: To export your data, please contact support and we will provide it within a reasonable timeframe.

Withdraw Authorization: You can revoke API Key authorization at any time through the Takealot Seller Portal. Once revoked, the system will no longer sync your store data.

This website uses essential functional cookies to maintain your login session and language preferences. We do not use any third-party tracking cookies or advertising cookies.

TAL-ERP is an enterprise B2B tool not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

As our services cater to cross-border sellers on the South African Takealot platform, data may be transferred between mainland China and South Africa. We ensure that equivalent security measures consistent with this policy are applied during all data transfers.

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notifications or website announcements. Your continued use of our services constitutes acceptance of the updated policy.