Data deserves clarity. And control.

Erpie app (PC, iPhone and Android)

Last updated: 11 November 2026.

Erpie is ERP24's artificial intelligence assistant for businesses. It is available as a desktop app (macOS and Windows), an iPhone app and an Android app, and is always connected to the Erpie server of the company the account belongs to. This section explains what data the app processes, why, where it is stored and how to request its deletion. It applies together with the rest of this policy.

Who is responsible

The Erpie account is created by the company the user works for (the client company). For the data the user puts into Erpie as part of their work, the client company is, as a rule, the data controller and ERP24 acts as processor, under the contract between them. ERP24 is the controller for the data it processes directly to provide and maintain the service, such as delivering notifications and handling support requests.

What data the app processes

• Account: name, work email, company, role (for example, administrator) and profile photo, if the user chooses one. The password is never stored in plain text.
• Conversations with Erpie: the messages the user writes, the replies and what Erpie does to reply (steps and files created).
• Files and photos: those the user sends to Erpie, to the team or to the project files, including photos taken with the camera or picked from the gallery. The app only uses the camera and the gallery when the user asks and after permission is granted in the system.
• Voice notes and dictation: with microphone permission, the user can dictate text and record voice notes for the team. The audio is sent to the company's Erpie server and transcribed there by a speech recognition model (Whisper) running on that server; it is not sent to external providers for transcription. For dictation, the audio is kept only in memory until it is transcribed and is then discarded. Team chat voice notes and their transcripts are stored encrypted.
• Team chat: messages, files and voice notes exchanged between colleagues of the same company, stored encrypted.
• Notifications: to receive notifications, the app registers the device identifier (token) from Firebase Cloud Messaging (Android) or the Apple Push Notification service (iPhone), the device name and a key generated by the phone itself. The text shown in the notification is encrypted with that key: Google and Apple only deliver the message and cannot read its content. The user chooses which notifications to receive and can turn them off.
• Biometric unlock: if the user enables Face ID or fingerprint unlock, the check is done by the phone's operating system; the app does not receive or store biometric data.
• Computer (folders, screen, mouse, keyboard and browser): in the desktop app, Erpie only accesses the folders the user connects or authorises, and only sees the screen, uses the mouse and keyboard or opens websites when the task requires it, with the permissions the user has granted in the operating system and in the app. On the phone, Erpie does not control the device: the app is used to chat and follow the work.
• Technical data: app version, operating system and error logs needed to keep the service running. When the user uses “Report a problem”, the description they write is sent to ERP24.

The app does not collect location, phone contacts or advertising identifiers, and does not include third-party analytics or advertising tools.

Artificial intelligence

Messages, and the files and transcripts the user includes in the conversation, are processed by artificial intelligence models to generate replies. The model providers are chosen and configured by the client company (for example, Anthropic, OpenAI or Google) and data is sent to them through their business interfaces (API). If the user connects a personal subscription from a provider in the desktop app, the terms of that subscription also apply.

ERP24 does not use users' conversations, files or audio to train artificial intelligence models. The client company can enable data protection rules that detect sensitive information (for example, an IBAN) and stop it from being sent to the model.

Replies are generated automatically and may contain mistakes: please check important information. If a reply is offensive, inappropriate or incorrect, you can report it on the reply itself, using the “Report” option, or write to info@erp24.pt. Reports are reviewed by ERP24.

Where data is stored and how it is protected

• Data is stored on the client company's Erpie server: a server owned by the company or a server contracted and managed by ERP24 for that company. Each company only sees its own data.
• The servers managed by ERP24 are hosted by netcup GmbH (Germany), acting as hosting processor, in a data centre in Vienna, Austria. Data stays in the European Union and hosting does not transfer it outside the EU. What goes to the artificial intelligence providers is described above, under “Artificial intelligence”.
• Phone notifications go through an ERP24 service that hands them to Apple and Google with the text already encrypted.
• Communication between the app and servers on the internet is encrypted in transit (HTTPS/TLS).
• At rest, project files, team chat messages, files and voice notes, transcripts and stored credentials are encrypted with keys managed by the server.
• Access is controlled by account and role, and administrative actions are logged.

Retention and deletion

Data is kept while the account is active and the client company keeps the service, or until it is deleted. The user can delete their conversations in the app. Dictation audio is discarded right after transcription. Reports of replies are kept for at most 1 year and are then deleted automatically. When the client company removes a person, the account is deleted; when the service ends, data is deleted or returned under the contract.

Deleting the account in the app: the user can delete their account at any time inside the Erpie app: on the computer, under My account › Delete my account; on iPhone and Android, under More › Delete my account. They confirm with their password. The account and personal data are deleted immediately and permanently: password, sessions on all devices, notification registrations, conversations with the assistant, personal chat and its files, memories, profile and photo, personal credentials, schedules, notifications and the messages sent in the team chat. We keep only: the projects and files shared with the company, because they belong to the company; the AI usage record, without the user's name, because the company needs it to reconcile its providers' invoices; and the company's security activity log (which actions were taken, by which email and when). The only administrator of a company must hand over administration to someone else before deleting their account. The last account on a server cannot be deleted from the app, so that the server is never left without an owner: to delete it, together with the company and all its data, request it by email to info@erp24.pt.

Requesting deletion by email: alternatively, the user can ask the Erpie administrator of their company or ERP24 directly, by emailing info@erp24.pt with the subject “Delete Erpie account”, stating the account email and the company. We confirm the requester's identity, handle the request with the client company where it is the controller, and reply within one month at the latest. Only what the law requires us to keep is retained.

Data sharing

The Erpie app has no advertising, does not sell data and does not share personal data with third parties, except with the technical processors needed to provide the service (the artificial intelligence model providers chosen by the client company, Apple and Google for delivering notifications, and the hosting and storage providers of the servers, such as netcup GmbH) or where required by law.

Children

The Erpie app is intended for professional use and is not intended for anyone under 16.

Rights and contact

The rights listed above also apply to the Erpie app. To exercise them, or for any privacy question about the app, write to info@erp24.pt. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).