Privacy Policy

1. Introduction

Sri Ahobila Narasimha Swamy Devasthanam ("Temple", "we", "us", or "our") respects the privacy and security of information processed through the Ahobilam Temple ERP System ("ERP System").

This Privacy Policy explains what categories of information may be collected or processed through the ERP System, why that information is used, and how reasonable measures are applied to protect it.

2. Scope

This Privacy Policy applies specifically to information processed through the Ahobilam Temple ERP System and its associated authentication and administrative functions.

It does not necessarily apply to external websites, third-party services, or public websites that may be linked from the ERP System.

3. Information We May Process

Depending on the user's role and the functions available to that user, the ERP System may process information including:

• Employee or personnel identification information.
• First name, middle name, and last name.
• Email address.
• Telephone or phone number.
• Username and account information.
• Profile image or image URL.
• Role and authorization information.
• Account status and security information.
• Login and logout activity.
• Session information.
• IP address and related technical information.
• Location information where the ERP System is configured and authorized to process it.
• Other information necessary for legitimate institutional ERP operations.

4. Account Information

User account information is processed to create, maintain, authenticate, authorize, and administer ERP accounts.

Access to account information is intended to be limited according to the user's role, responsibilities, and applicable administrative permissions.

5. Password Information

User passwords are intended to be stored using secure password hashing rather than being stored as readable plain-text passwords.

Passwords should not be disclosed to administrators, other users, or third parties. The ERP System's password recovery process is used when a password needs to be reset.

6. Login and Security Information

The ERP System may process technical and security information associated with authentication and account activity.

This may include:

• IP address.
• Login attempts.
• Failed login attempts.
• Account lock status.
• Active sessions.
• Login and logout counts.
• Session expiration information.
• Password-change information.

Such information may be used to protect accounts, detect suspicious activity, troubleshoot problems, maintain system security, and support authorized auditing.

7. IP Address Information

The ERP System may record the IP address associated with an authenticated session.

IP information may be used for security monitoring, authentication records, troubleshooting, auditing, and investigation of suspected unauthorized activity.

8. Location Information

Where enabled and authorized by the system configuration, the ERP System may process latitude and longitude information associated with a user's current session or account.

Location information should only be collected and used for legitimate institutional purposes, such as security, operational verification, attendance-related functions, or other authorized ERP activities.

9. Profile Images

A user's profile image may be displayed within authorized areas of the ERP System, including the user's profile and navigation interface.

Profile images should be provided and used only for legitimate institutional identification and administrative purposes.

10. How Information Is Used

Information processed through the ERP System may be used for legitimate institutional purposes, including:

• User authentication and account management.
• Access control and role management.
• ERP operations and administration.
• Accounting and financial administration.
• Inventory and stock management.
• Asset and records management.
• Attendance and personnel-related operations.
• Reporting and auditing.
• Security monitoring and incident response.
• System maintenance and troubleshooting.

11. Information Sharing

Access to ERP information should be limited to authorized personnel and service providers who require the information for legitimate institutional purposes.

Information may also be disclosed where required or permitted by applicable law, regulation, lawful authority, or institutional requirements.

Personal information should not be sold or intentionally provided to third parties for unrelated commercial purposes.

12. Data Security

Reasonable technical and organizational measures should be used to protect ERP information against unauthorized access, alteration, disclosure, loss, or misuse.

Security measures may include authentication, password hashing, session controls, access restrictions, account locking, logging, and other security mechanisms appropriate to the ERP environment.

13. User Responsibilities

Users are responsible for protecting their credentials and for using the ERP System appropriately.

• Do not share your password.
• Do not leave an authenticated ERP session unattended on a shared computer.
• Log out when finished using the system.
• Report suspected unauthorized access.
• Do not download, copy, or disclose confidential information without authorization.

14. Data Retention

Information may be retained for as long as reasonably necessary for legitimate institutional, operational, security, accounting, auditing, legal, or regulatory purposes.

Actual retention periods may vary depending on the type of information, the purpose for which it is maintained, and applicable institutional or legal requirements.

15. Cookies and Session Technologies

The ERP System may use browser cookies or session mechanisms that are necessary for authentication and maintaining a secure logged-in session.

These mechanisms may be required for the ERP System to function correctly and securely.

16. Password Reset Information

When a user requests password recovery, the ERP System may generate a temporary password-reset token and associated expiration information.

Reset information is intended to be temporary and should not be treated as a permanent user credential.

17. Third-Party Services

The ERP System may rely on infrastructure, hosting, email delivery, security, networking, or other third-party services to operate.

Where third-party services process information, appropriate controls and contractual or operational requirements should be considered to protect information handled through those services.

18. Data Accuracy

Users and authorized administrators should take reasonable care to ensure that information entered into the ERP System is accurate and appropriate for its intended purpose.

19. Privacy and Security Incidents

Suspected unauthorized access, accidental disclosure, loss of information, compromised credentials, or other privacy or security incidents should be reported promptly to the appropriate ERP or institutional administrator.

20. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the ERP System, institutional practices, security requirements, applicable laws, or operational requirements.

The latest version published on this page will represent the current version of this policy.

21. Contact

Questions regarding this Privacy Policy or privacy practices associated with the ERP System should be directed to the appropriate authorized administrator of Sri Ahobila Narasimha Swamy Devasthanam.