Privacy Policy

Effective August 12, 2026

This policy applies to Least Sucky ERP and the Least Sucky website.

What Least Sucky is

Least Sucky ERP is a business operations system for organizations managing work such as people, purchasing, inventory, production, and accounting. An organization using Least Sucky generally controls the business records its authorized users enter into the ERP.

Information we collect

Depending on how Least Sucky is configured and used, we may process:

• Account and identity information, such as name, company email, business identifier, login status, role, and assignment.
• Organization information, such as legal entities, sites, departments, positions, reporting relationships, and access settings.
• ERP business records, including purchasing, supplier, inventory, warehouse, production, journal, ledger, invoice, and payment-recording information.
• Security and activity information, such as sign-in events, access denials, audit history, record changes, session identifiers, IP address, browser information, and diagnostic logs.
• Communications sent to Least Sucky, including support questions and feedback.

Least Sucky does not use the AP payment feature to initiate bank transfers. It records payment activity supplied by authorized users.

Facebook login

If Facebook login is enabled and you choose to use it, Least Sucky requests only your Facebook public profile, and reads only two things from it: the account identifier Facebook assigns you for Least Sucky, and the name on your profile. Least Sucky does not request or receive your email address. It also does not request or receive your profile picture, friends, photos, posts, likes, or any other Facebook content.

That information is used only to connect your Facebook account to a Least Sucky account your organization administrator already created, to sign you in, and to keep a security record of the connection. Least Sucky never posts to Facebook on your behalf and never reads anything from your Facebook account beyond what is described here. You can disconnect Facebook at any time from your account page in Least Sucky, or by removing Least Sucky from the apps connected to your Facebook account.

How we use information

We process information to:

• provide, secure, maintain, and troubleshoot Least Sucky ERP;
• authenticate users and enforce organization, role, assignment, record, and field access;
• perform the business workflows requested by authorized users;
• preserve audit, accounting, security, and transaction integrity;
• respond to support requests and communicate about the service; and
• comply with applicable legal obligations and protect users, organizations, and the service.

Cookies and sessions

Least Sucky uses essential session technology to keep users signed in, protect form submissions, and maintain authorized working context. These functions are necessary for the authenticated application. We do not describe them as advertising cookies.

How information is shared

Information may be available to authorized users and administrators within the organization that controls the relevant ERP workspace. We may also disclose information to service providers that help host, secure, maintain, or support Least Sucky, subject to appropriate restrictions; when directed by the controlling organization; to comply with law or legal process; or to protect rights, safety, and service integrity.

Least Sucky does not sell personal information.

Retention

Retention depends on the type of record, the controlling organization's instructions, operational needs, security requirements, and applicable law. Accounting journals, inventory transactions, approvals, audit events, and other records that preserve business history may need to be retained or de-identified rather than deleted. Session and diagnostic information may be retained for shorter periods appropriate to security and operations.

Security

Least Sucky uses safeguards intended to protect information, including authenticated access, permission checks, assignment scope, audit history, and protections against casually rewriting posted business records. No system can guarantee absolute security.

Your choices and requests

If your account is provided by an employer or another organization, contact that organization's Least Sucky administrator first. The organization may be responsible for responding to requests involving the business records it controls.

You may also review the Least Sucky Data Deletion Instructions or email info@leastsucky.com. We may need to verify your identity and authority before acting on a request.

Children's privacy

Least Sucky is a business operations service and is not directed to children.

Changes to this policy

We may update this policy as Least Sucky changes. We will post the revised policy here and update the effective date.

Contact

Questions about this policy can be sent to info@leastsucky.com.