Privacy Policy | MSTOLUCA

At MSTOLUCA we take your privacy very seriously. This policy explains how we handle your information when you use our mobile application. Our commitment is clear:

ZERO data on our servers. ZERO sharing with third parties. You control your data.

1. What data do we handle?

1.1. ERP Connection Data (Dolibarr)

URL of your Dolibarr installation
Access credentials (username and password)

IMPORTANT: This data is NEVER sent to our servers.

1.2. Business Data

Products, Clients, Invoices, Expenses, Reports
Any other data from your Dolibarr

This data is queried in real-time from your own Dolibarr database and is never copied, stored, or transmitted to third parties.

1.3. Anonymous Usage Data

We may collect anonymous information about app usage to improve the user experience. This information is completely anonymous and not linked to your identity.

2. Where is your data stored?

Data Type	Storage Location
Dolibarr Credentials	Only on your device (secure local storage)
Connection URL	Only on your device
Business Data (products, invoices)	On your own Dolibarr server (we don't touch it)
App Settings (language, preferences)	Only on your device

3. How do we protect your data?

3.1. On your device

iOS: Credentials are stored in the Keychain (hardware encrypted).
Android: Credentials are stored in the Keystore System (encrypted).

3.2. In communication

All communications between the App and your Dolibarr are done via HTTPS/TLS.
We never transmit your credentials through insecure channels.

3.3. On our servers

We do not have servers that store your data. The App works as a 'client' that connects directly to your Dolibarr.

4. Do we share your data?

NO. Absolutely not.

We do not sell, rent, or share your data with advertisers.
We do not use your data for marketing purposes.
We do not have access to your business transactions.
We do not share information with third-party analytics.

5. Camera Usage (Optional)

If the App includes barcode scanner or camera functionality:

The camera is only activated when you request it.
Captured images are never sent to any server.
They are only used to identify products locally on your device.

6. User Rights & Dolibarr Security

Your Rights

Since we do not store your data, you do not need to request: Access, Rectification, or Deletion (because we don't have it).

If you delete the App, all credentials and settings stored on your device are automatically deleted.

Your Dolibarr Installation Security

Remember that the security of your Dolibarr server is your responsibility. We recommend:

Keep your Dolibarr updated to the latest version.
Use strong passwords.
Enable HTTPS with valid certificates.
Perform regular backups.