# Privacy Policy — OpenZero ERP

**Last updated: 2026-08-13 • MPL-2.0 • Offline-first**

## Principle: Your Data Stays Yours

OpenZero MVP is **offline-first, local-only**. No server collects your contacts, invoices, or accounting data in the initial version.

- **Storage:** IndexedDB in your browser, on your device. Not sent to any server unless you manually Export JSON/CSV.
- **No tracking:** No Google Analytics by default (placeholder commented), no cookies, no fingerprinting, no third-party trackers. Cloudflare Pages may add privacy-friendly Web Analytics if you enable — no personal data.
- **No account:** No login in MVP, no email collection.
- **Export & Deletion:** You can export all data JSON/CSV anytime (right to portability, GDPR Art.20, Botswana DPA). Reset button deletes all local data (right to erasure, GDPR Art.17).

## Future Multi-User Phase (Cloudflare D1/KV/R2)

When we add login + sync (Phase2 free tier):
- Data will be stored in Cloudflare D1 (SQLite) with region affinity (Africa if possible for BW Data Protection Act 2024).
- Passwords hashed with Argon2id, not plaintext.
- You will be data controller, we are processor. DPA available on request.
- Encrypted backups, retention policy: 30 days soft-delete then purge.

## What We Collect (Current)

- **Nothing** from app itself. GitHub and Cloudflare may collect standard web logs (IP, user-agent) for security, per their policies.

## Your Rights (GDPR, Botswana DPA 2024, POPIA, CCPA)

- Access: Export JSON
- Rectification: Edit contacts/items/invoices (draft only, posted immutable per IFRS — use credit note pattern)
- Erasure: Reset button + clear IndexedDB + clear cache
- Portability: JSON + CSV
- Objection: No marketing, no profiling

## Contact

Open GitHub Issue in faroukpandor/openzero or email via GitHub profile.

## Compliance Notes

- Accounting data may be subject to record retention laws (Botswana: 5 years for VAT). Do not delete if law requires retention.
- This is not legal advice. Consult local counsel for GDPR/BW DPA compliance when self-hosting for clients.

## Summary

**Offline-first = privacy by design.** Your business data never leaves your device unless you choose to export or use future hosted version.