Privacy Policy

ScomsERP Privacy Policy

Last updated: 15 December, 2025

Quantum InfoSys Pvt. Ltd. ("Quantum", "we", "our", or "us") is the developer and owner of ScomsERP, an integrated enterprise resource planning (ERP) platform.

ScomsERP is the core product. Academic, Healthcare, Corporate, Retail POS, HR & Payroll, Accounting, Inventory, Vendor Management, and other domains are modules enabled based on client requirements.

Controlled Access & Account Creation

Closed System

ScomsERP is a closed, organization-managed system. Public registration is not permitted.

No Public Registration

  • Users cannot create accounts directly from the app or website
  • No open sign-up or public self-registration is available

Organization-Managed Users

All users are registered by the client organization within ScomsERP.

User roles may include students, parents/guardians, staff, vendors, healthcare professionals, retail operators, or other organization-defined roles.

Credentials & Access Control

  • Login access is enabled only if approved by the organization
  • Password creation and reset are permitted only for enrolled users
  • Without valid records inside ScomsERP, no access is possible

Information We Process

Organization-Provided Data

Data Source

Quantum does not collect personal data directly from the public. All data is provided by the client organization.

  • Name
  • Contact details (if required)
  • Role-specific identifiers (student ID, employee ID, vendor code, etc.)

Technical & Usage Data

  • Device and operating system details
  • Application version
  • Authentication logs
  • Error and crash diagnostics

Permissions (Module-Based)

  • Camera — Profile photos, document uploads
  • Storage — Reports and files
  • Notifications — Alerts and reminders
  • Location — Attendance, delivery, or field services where enabled

Purpose of Data Processing

We process data for the following operational purposes:

  • User Authentication
  • Delivery of Enabled ScomsERP Modules
  • Display of Organization-Managed Information
  • System Security, Monitoring & Performance
  • Operational & Service Notifications

Data Sharing & Disclosure

We Do Not Sell Your Data

Quantum does not sell or rent personal data.

We May Share Data With:

Secure Infrastructure & Hosting Providers

Cloud services that host and maintain the ScomsERP platform.

Authorized Third-Party Integrations

Approved by the organization for specific functionality.

Legal or Regulatory Authorities

When required by Nepal law.

Access Control

All access is governed by role-based permissions defined by the organization.

Data Retention & Control

Data Ownership

Remains with the client organization.

Access Revocation

When disabled by the organization.

Deletion Requests

Subject to legal and contractual obligations.

Children & Student Data

Educational Institutions Only

Student or minor data is processed only when ScomsERP is used by authorized educational institutions.

  • No child self-registration
  • Data entered by institutions only
  • Parent/guardian access subject to institutional approval

Data Security

We implement comprehensive security measures to protect your information:

  • Secure authentication mechanisms
  • Encrypted data transmission
  • Role-based access controls
  • Infrastructure-level protections
  • Continuous monitoring
  • Regular security audits

International Data Processing

Cloud Infrastructure

ScomsERP may use secure cloud infrastructure outside Nepal. Appropriate safeguards are applied to protect confidentiality and integrity.

Data may be processed in secure data centers globally while maintaining the highest standards of data protection and security.

Account Deletion & Data Erasure

Organization-Managed System

ScomsERP is an organization-managed system. Users do not independently own accounts.

  1. Request Through Organization — Users may request account deletion through their organization.
  2. Access Revocation — Upon approval, access credentials are revoked.
  3. Data Processing — Data is deleted or anonymized in accordance with organizational, legal, and contractual requirements.
  4. Record Retention — Certain records may be retained for statutory or audit purposes.

Users may contact info@quantum.info.np for guidance on deletion procedures.

Policy Updates

This policy may be updated periodically to reflect changes in our practices, services, or legal requirements.

Updates will be published on our website or within the application.