Privacy Policy

1. Who we are

Gnariex is a software company headquartered in the Philippines that provides enterprise ERP software, custom software development, and web development services to businesses across Papua New Guinea, Australia, and South-East Asia. You can reach us at info@gnariex.com.

This policy covers two contexts: (a) the Gnariex website at gnariex.com, and (b) the GnX Suite platform — our cloud ERP SaaS application. Sections that apply differently to each are labelled accordingly.

2. What information we collect

Gnariex website

When you submit our contact form, we collect:

• Your full name
• Your email address
• Your business or organisation name (optional)
• Your message or query

We do not collect payment information, government IDs, or sensitive personal data through the public website. We do not use analytics tools, advertising pixels, or tracking cookies on the marketing website.

GnX Suite platform

When you create and use a GnX Suite account, we collect:

• Account data — your name, email address, and a hashed password on account creation.
• Usage data — pages visited, actions taken within the application, and error logs for support and troubleshooting.
• Business data — financial records, contacts, documents, and other data you or your organisation enter into the platform. This data belongs to you; we act as data processor on your behalf.

3. How we use your information

Gnariex website

We use contact form submissions solely to:

• Respond to your enquiry or query
• Arrange a scoping call or product demonstration if you request one
• Follow up on your enquiry where relevant

We do not sell, rent, or share your information with third parties for marketing purposes. We will never add you to a mailing list without your explicit consent.

GnX Suite platform

We use platform data to:

• Operate, maintain, and improve the GnX Suite service
• Authenticate users and enforce tenant data isolation between organisations
• Provide technical support and resolve errors
• Meet our legal, accounting, and tax obligations
• Analyse usage patterns — only where you have consented to analytics cookies

4. Third-party processors & sub-processors

To operate our services, we use the following processors. Each is bound by their own privacy policy and data-processing terms.

Gnariex website

• Resend — email delivery service used to route contact form submissions to our inbox. Data is transmitted securely and not retained beyond delivery.
• Vercel — cloud hosting and serverless infrastructure. Your request passes through Vercel servers when you submit a form.

GnX Suite platform

The GnX Suite platform uses additional sub-processors for hosting, databases, storage, and monitoring. The current list is maintained at: app.gnariex.com/admin/settings/legal.

5. Data retention

Gnariex website

Contact enquiry data is retained in our email inbox for as long as necessary to complete the business conversation. If no engagement results, we delete the correspondence within 12 months. You may request earlier deletion at any time.

GnX Suite platform

• Active accounts — data retained while your account is active.
• Financial records — retained for 7 years to meet accounting and tax obligations.
• After account closure — personal data deleted within 30 days, unless a longer period is required by law.
• Security audit logs — retained for 2 years.
• Financial audit logs — retained for 7 years.

6. Your rights

Under applicable privacy law (including GDPR where it applies), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete information.
• Erasure — request deletion of your data where no legal retention obligation applies.
• Portability — receive your personal data in a structured, commonly used, machine-readable format.
• Restriction — request that we pause processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email us at info@gnariex.com. We will respond within 30 days.

7. Security

Gnariex website

All data in transit is encrypted via HTTPS/TLS. Form submissions are validated and sanitised server-side before processing. We do not store contact form data in a database — it is delivered directly to our inbox via Resend and retained only in email.

GnX Suite platform

In addition to HTTPS/TLS, the platform applies: passwords stored as secure hashes (never in plain text); tenant data isolation ensuring one organisation cannot access another's data; and role-based access controls restricting data access to authorised users within your organisation.

8. Cookies

Gnariex website

The Gnariex marketing website uses only strictly necessary cookies set by Next.js and Vercel for routing and performance. No analytics, advertising, or tracking cookies are used, and no consent banner is shown.

GnX Suite platform

The GnX Suite application uses two categories of cookies:

• Essential cookies — required for authentication and tenant data isolation. These cannot be disabled; the application cannot function without them.
• Analytics cookies — set only after you give explicit consent via the in-app cookie banner. You may decline or withdraw consent at any time using the “Essential only” option in the banner.

See our Cookie Policy for full details on both contexts.

9. Changes to this policy

We may update this policy as our services evolve. Material changes will be reflected by an updated effective date at the top of this page. For significant changes affecting GnX Suite platform users, we will notify you by email or in-app notice. Continued use of the website or platform after changes constitutes acceptance.

10. Contact

Questions about this policy or your data: email info@gnariex.com or call +63 956 043 1217.