soft1-syncerp — Privacy Policy

Last updated: 31 May 2026

soft1-syncerp ("the Service", operated by ByteBee) is a connector that lets an authorized company query its own Softone ERP data through Claude. This policy explains what data the Service handles and how.

Who controls the data

Each customer company ("tenant") is the data controller of its own ERP data. ByteBee acts as a data processor that relays read-only queries between Claude and that company's Softone installation.

What we collect and store

• Account data: the email, display name and a salted password hash of each panel user. Passwords are hashed (PBKDF2-SHA256); we never store them in plaintext.
• Softone connection credentials that the company enters in the panel: either a static API token or a Softone web-user username and password. Passwords are encrypted at rest (Fernet/AES) with a server-side key and are used only to authenticate to that company's Softone API on its behalf.
• OAuth tokens issued to Claude so it can call the connector on the user's behalf (access/refresh tokens, expiry).

What we do NOT store

The Service is read-only and stateless with respect to ERP content. Customer/product/sales data fetched from Softone is passed through to your Claude session in real time and is not persisted, logged, or used for any other purpose. We do not sell data and we do not use it to train models.

Data sharing

Data flows only between three parties: your Claude client, the Service (hosted on Railway), and your own Softone ERP. No third-party sharing beyond these.

Retention

Account and connection data persist until the company deletes the user/tenant. Deleting a user removes their account and revokes their tokens immediately. OAuth tokens expire automatically (access ~1h, refresh on rotation).

Security

OAuth 2.1 with PKCE; TLS in transit; encrypted credentials at rest; per-tenant isolation. Report security issues to the contact below.

Contact

ByteBee — vsalapataras@bytebee.gr

← Back to soft1-syncerp