Privacy Policy

Preksa ERP · Effective 1 October 2026

1. About this policy

This policy explains what information Preksa ERP (the “Application”) handles, why, and what choices you have. The Application is an internal business system operated by Preksa Hygiene Co., Ltd. (“Preksa”, “we”, “us”), #24, St. #1, Phum Sambuo, Sangkat Dongkao, Khan Dangkao, Phnom Penh, Kingdom of Cambodia, and is available at apperp.teleinfokh.com. It is intended only for authorised staff and representatives of Preksa.

2. Google user data we access

You sign in with your Google account using Google’s standard OAuth 2.0 sign-in. The Application requests only these scopes:

Scope	What we use it for
`openid`	To confirm your identity with Google.
`email`	To read your verified email address and check it against the list of authorised users. This is the only piece of Google data the Application uses.
`profile`	Requested as part of the standard sign-in. The Application does not store your Google profile picture. The name shown inside the Application comes from the user record created by an administrator, not from your Google profile.

The Application does not access your Gmail, Google Drive, Google Calendar, Contacts, or any other Google service data through your sign-in. It requests online access only: it does not ask Google for a refresh token or for access when you are not present.

Google API Services User Data Policy. The Application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to authenticate and authorise you, is not used for advertising, is not sold, and is not transferred to anyone except as described in section 7.

3. Information held in the system

Apart from Google sign-in data, the Application stores the business records that authorised staff enter in the course of their work. Depending on the module, these include:

User accounts: name, email address, assigned roles and active/inactive status, set by an administrator.
Business records: purchase orders and bills, sales orders, invoices and receipts, delivery orders, stock and inventory records, operating expenses, financial settings and account balances.
Contact details of business partners: names, company details, addresses and telephone numbers of customers and suppliers, as needed for documents such as invoices and delivery orders.
Operational logs: basic technical logs kept by the hosting platform to diagnose errors.

This information is entered by or on behalf of Preksa for business purposes. It is not collected from the public.

4. How we use information

To verify who you are and decide whether you may sign in.
To apply your assigned role, so you see and change only what that role allows.
To run Preksa’s procurement, sales, logistics, expense and reporting operations, and to produce documents such as invoices, delivery orders and financial reports.
To protect the system, investigate errors and prevent unauthorised use.
To meet accounting, tax and other legal obligations.

We do not use information for advertising, profiling or marketing, and we do not sell it.

5. Sessions and cookies

After a successful sign-in the Application creates a random session token that is held temporarily on the server (together with your email, name and roles) for up to 6 hours, so you do not have to sign in on every page. The token expires automatically and is not used for tracking.

The Application does not use advertising cookies or analytics trackers. Google’s sign-in and hosting services may set their own cookies under Google’s Privacy Policy.

6. Third-party services

The Application relies on the following services. They may receive technical information such as your IP address and browser type when your browser loads them.

Google — sign-in (Google Identity), application hosting (Google Apps Script) and data storage (Google Sheets and Google Drive in Preksa’s Google account).
Content delivery networks (cdnjs / Cloudflare, jsDelivr, DataTables, jQuery) — deliver standard open-source code libraries used by the pages.
Google Fonts — delivers typefaces used by the pages.
QuickChart (quickchart.io) — generates the QR code images printed on some documents. To draw a QR code, the text encoded in it is sent to this service. That text is limited to items such as a document number, a date and, on some delivery documents, a contact telephone number. No other record contents are sent.

7. Sharing and disclosure

We do not sell personal information and we do not share it for advertising. We disclose information only:

to the service providers listed in section 6, to the extent needed to operate the Application;
to our professional advisers (for example accountants and auditors) where needed for the business;
where required by law, court order or a competent authority; and
to protect the rights, safety or security of Preksa, its staff or others.

Within the Application, access to records is limited by user role.

8. Storage and security

Data is stored in Google Sheets within Preksa’s Google account and is protected by Google’s infrastructure security. Connections to the Application use HTTPS. We limit access through authorised-user lists and role-based permissions, and sensitive configuration values are kept out of the page code. No system can be guaranteed completely secure, so please protect your Google account (use a strong password and 2-Step Verification) and tell us promptly if you suspect misuse.

9. Retention and deletion

User accounts are kept while the person is an authorised user and are deactivated when access is no longer needed.
Session tokens expire automatically within 6 hours.
Business records are kept as long as needed for operations and for accounting, tax and legal requirements, which may be several years.

You can ask us to correct or delete your user record at any time (section 13). Some business records cannot be deleted while we are legally required to keep them.

10. Your choices and rights

Withdraw Google access: you can remove the Application’s access to your Google account at any time at myaccount.google.com/permissions. You will not be able to sign in again until you re-authorise.
Access, correction, deletion: contact us to ask what we hold about you, to correct it, or to have it deleted, subject to the legal retention needs in section 9.
Questions or complaints: contact us using the details in section 13 and we will respond.

11. Children

The Application is a workplace system for adults and is not directed at children under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy as the Application or the law changes. The effective date at the top shows the latest version. If a change materially affects how Google user data is used, we will give notice inside the Application or by email before it takes effect.

13. Contact

Preksa Hygiene Co., Ltd.
#24, St. #1, Phum Sambuo, Sangkat Dongkao, Khan Dangkao, Phnom Penh, Kingdom of Cambodia
Email: symonpum@gmail.com