Privacy Policy

1. Overview

Korex ERP is a self-hosted software product. Because Korex runs on your own server, all data belongs to you — we do not have access to any data entered into your Korex installation.

2. Data We Do Not Collect

• Your business data (clients, employees, invoices, etc.)
• User credentials or passwords
• Financial or payment information entered into your system
• Any personally identifiable information of your users or customers

3. License Verification

During installation, your Envato purchase code is sent to the Envato API for verification. No personal data is transmitted to us during this process.

4. Data Stored in Your Installation

All data — employee records, financial data, CRM contacts, and documents — is stored exclusively on your server. You have full control and ownership of this data.

5. Your Responsibilities

• Complying with data protection laws (GDPR, CCPA, etc.)
• Maintaining server security and regular backups
• Informing your users about how their data is used
• Implementing appropriate access controls

6. Cookies

Korex uses cookies only for essential functions — session management and CSRF protection. No tracking or advertising cookies are used.

7. Third-Party Services

When you configure optional integrations (payment gateways, email providers), their respective privacy policies apply to data shared with them.

8. Security

Korex implements bcrypt password hashing, CSRF protection, and SQL injection prevention. Server-level security is your responsibility as the operator.

9. Contact

Privacy questions? Email us at hello@dranmolagarwal.com.