LedGo ERP ("LedGo", "we", "us") is shop-management software for retailers: billing, inventory, GST, purchases, accounts and, optionally, the shop's own online store. It is developed and operated by TMB Tech. This policy covers the LedGo ERP Android app, the LedGo ERP web application, the online store that shops can publish for their customers (including any shop-branded customer app), and this website. It explains what information is handled, why, who can see it, and the choices you have.
Who this applies to
There are two groups of people, and they use LedGo in different ways.
- Shop owners and their staff use the LedGo ERP app and web application under accounts created by the shop or by us. There is no public self-signup for the ERP. Each shop's business data is kept in its own separate database.
- Customers of a shop use the shop's online store, on the web or in a shop-branded customer app, to browse products and place orders. A customer creates their own account with a mobile number.
The shop decides what business records it keeps in LedGo. For the records a shop enters about its own customers, suppliers and staff, the shop is responsible for having the right to record them. TMB Tech provides and hosts the software.
Information we handle
Shop owners and staff
| Data | Why we handle it |
|---|---|
| Username, password, name, email, phone | To sign you in and identify you inside your shop. Passwords are stored only in hashed form; nobody, including administrators, can read your password. |
| Profile picture (optional) | Shown on your own account inside your shop. |
| Sign-in history | Date and time, IP address, device or browser name and whether the sign-in worked, so the shop can see who signed in and to help stop misuse. |
| Shop details | Shop name, legal name, GSTIN, address, phone, email and logo, used on bills and reports. |
| Customer and supplier records | Names, mobile numbers, GSTIN, addresses, credit limits and balances that the shop enters to run billing and accounts. |
| Employee and bank details | Employee name, mobile number and designation, and the shop's bank account number and IFSC, if the shop chooses to record them. |
| Business records | Products, batches and stock, sales and purchase bills, returns, orders, collections, payments, expenses and the ledger. Also customer inquiries and crop-planting notes (customer, crop and area) if the shop uses them. This is the core data the software exists to record. |
| Photos and files | Product photos, the shop logo, and, if the shop uses the AI features, photos or PDFs of supplier invoices and of handwritten order notes. |
| Change history | An audit log of who changed which record, with the old and new values. |
| Support messages and website enquiries | Messages between a shop and our support team, and the name, email, phone and message someone sends through an enquiry form. |
Customers of the online store
| Data | Why we handle it |
|---|---|
| Mobile number, password, name, email (optional) | To create and secure your account. Your mobile number is verified with a one-time code sent by SMS when you sign up and when you reset your password. The password is stored only in hashed form. |
| Delivery address and pincode | So the shop can deliver your order. |
| Location (optional) | Only if you tap "Use current location" at checkout. The coordinates, and a map link added to your address, are sent with that order. |
| Orders | The items, payment type (cash on delivery or UPI) and status of each order. The shop you order from sees your name, mobile number, address and order. |
| Notification token | A device token, with a device description such as "Android 14", so notifications can be sent to your device if you allow them. |
Technical information
Our servers keep standard logs (such as IP address, time and errors) to keep the service running and secure. We also record the size of AI requests (token counts) and any error message for each request, but not the content of the request.
Permissions the apps ask for
The LedGo ERP Android app opens the LedGo ERP web application inside the app. It may ask for the permissions below. Each one is used only for the purpose shown, and you can turn any of them off in your phone's settings.
| Permission | What it is used for |
|---|---|
| Camera | To take a photo when you choose to, for example a supplier invoice, a product photo or the shop logo. |
| Microphone | For voice ordering. Your phone's own speech recognition turns your voice into text; LedGo receives only the text and never the audio. |
| Notifications | To show alerts that are sent to your phone through Google's Firebase Cloud Messaging. |
| Bluetooth, USB and Wi-Fi | To find and connect to your label or receipt printer. Bluetooth scanning is not used to work out your location. |
| Files and downloads | To save reports and exports (Excel, PDF) to your Downloads folder. |
| Location | Only if a screen asks for it and you allow it. The staff screens do not use your location at present. |
| Internet and network state | To reach the LedGo server. |
A shop's customer app asks for fewer permissions: internet, notifications (order updates) and location (only when you tap "Use current location" at checkout). Voice search in the customer app uses your phone's speech recognition. The customer app does not ask for the camera, microphone, contacts or storage.
AI features
LedGo has optional AI features. They are off unless a shop's administrator turns them on and enters the shop's own account key for an AI provider. If they are off, nothing is sent to any AI provider.
- Voice ordering. Speech is converted to text on your phone or in your browser. The text, and a short list of matching products from the shop's catalogue, are sent to the AI provider to work out the order. LedGo does not receive or store the audio. The speech-to-text service itself is provided by your phone or browser, which may be operated by Google or your browser's maker.
- Purchase invoice import. A photo or PDF of a supplier invoice that the shop chooses to upload is sent to the AI provider to read the items and amounts.
- Scan order. A photo of a handwritten order note that the shop chooses to upload is sent to the AI provider to read the items and quantities. If the note has a customer's name or mobile number written on it, that is part of the photo.
The providers a shop can choose are Anthropic, Google (Gemini) and OpenAI. Each handles what it receives under its own terms and privacy policy. We do not use the content of these requests to train any model. The shop, not TMB Tech, chooses the provider and holds the account with it.
Third-party services
- Google Firebase delivers push notifications (Cloud Messaging) and, in the Android app, provides remote settings such as the current site address and the latest app version (Remote Config). Firebase receives your device notification token and technical identifiers such as an app installation ID. When a staff member uses "Forgot password", their email address is registered with Firebase Authentication so Google can send the reset email and complete the reset. The password is then stored with us as a hash.
- SMS gateways. One-time codes for online store customers are sent by SMS through an SMS gateway service used by the platform. A shop may also configure its own SMS gateway to send messages to its customers. The gateway receives the mobile number and the message.
- WhatsApp. Where the software offers a WhatsApp button (for example to send a bill or a reminder), it opens WhatsApp on your own phone with the message filled in. The message is sent by you, from your WhatsApp, and not through our servers.
- UPI and maps. A UPI payment opens your own UPI app, and the payment is handled by your UPI app and your bank. LedGo does not process or store card or bank login details. Map links open Google Maps.
- AI providers, only if the shop turns the AI features on (see section 4).
- Google Fonts supply the typefaces on some pages, so your browser requests the fonts from Google.
- Our hosting provider (currently MonsterASP.NET) hosts the servers and databases.
LedGo does not show advertising and does not use advertising identifiers. It does not use Firebase Analytics or Crashlytics.
How we use information
- To run a shop's billing, stock, purchases, accounts and reports.
- To let customers place orders and let the shop receive, pack and deliver them.
- To sign you in, keep your account secure and prevent misuse.
- To send notifications and, if a shop chooses, messages to its customers.
- To provide support and to find and fix problems.
We do not sell personal information and we do not use it for advertising.
Who can see your data
- Inside a shop. A shop's records are visible to that shop's own users, according to the roles and permissions the shop gives them.
- Online store customers. The shop you order from can see your name, mobile number, delivery address and orders with that shop. An online store account is a single account that works with the shops on the platform; a shop only sees what you order from it.
- Our team. The TMB Tech people who operate and support LedGo can access the platform, including customer accounts, to run the service, provide support and help with password resets. This is never for marketing or resale.
- Service providers listed in section 5, for the purpose described there.
- Where the law requires. We may disclose information if required by law or a valid legal request.
Storage, security and retention
Each shop's business data is kept in a separate database file, and platform-level accounts are kept in a central database, on servers run by our hosting provider. Data is sent over encrypted (HTTPS) connections. Passwords are hashed with a standard method, failed sign-ins are recorded and an account can be locked after repeated failures, and access inside a shop follows the roles the shop sets. In the customer app, your sign-in session is kept in your phone's encrypted storage and is excluded from device backups. Backups of the platform are taken for recovery.
Records are kept while the shop's account is active, and afterwards for a reasonable backup period. A shop may need to keep bills and accounts for the period required by its own tax and accounting rules, and that can limit what can be deleted.
No system is perfectly secure. If you believe your account has been misused, contact us straight away.
Cookies and browser storage
- Online store. A sign-in cookie that keeps you signed in for up to 30 days, a security cookie that protects forms, a saved shopping cart, and a random device identifier used for notifications.
- ERP web application. Cookies that keep you signed in and protect forms.
- This website. Your browser remembers your colour theme, light or dark mode and language choice, and whether a lighter page style was turned on for a slow computer. These stay on your device and are not sent to us. The contact and free-trial buttons open your own email app with a message addressed to us; nothing is sent until you send it.
You can clear these from your browser settings at any time. Doing so will sign you out and empty your cart.
Your rights
You can ask for access to, correction of or deletion of your personal data.
- Shop staff: ask your shop's administrator, who manages the accounts and records of that shop, or contact us and we will coordinate with the shop.
- Online store customers: you can update your details on the Profile page of the online store. To delete your account, use the delete option on that Profile page in a web browser, or write to us; a shop's customer app does not have its own delete button yet, so please use the web page or email us. Deleting deactivates the account and signs you out of your devices. Your orders remain in the records of the shops you ordered from, because they need them for their accounts. If you would like your personal details removed from those records as well, write to us.
Email us at the address below with the subject "Data Deletion Request", and include your registered mobile number and, if you are a shop user, your shop name. We will confirm and process the request. Some records may need to be kept where the shop has a legal or accounting duty to keep them.
Children's privacy
LedGo is a business tool and an online shopping service for adults. It is not directed at children, and we do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows the latest revision. If a change is significant, we will say so on this page.
Contact us
This is the public Privacy Policy for LedGo ERP and its online store.