This policy explains how we collect, use and protect data on the Hesabat website and services. It is an initial draft prepared for legal review.
We collect two kinds of data: data you provide when you sign up or contact us (such as name, email, phone and company details), and data you enter to use the service (such as entries, invoices, customers and suppliers).
We use data to provide and operate the service, support users, improve the product and send service notices. We do not sell your data to any third party.
We apply technical and organisational controls to protect data, including fine-grained per-user permissions, a change log and regular backups, with the confidentiality required for accessing customer data.
We may use external service providers (hosting, payment processing or analytics) under contracts that limit their use of the data to providing the service.
You may access and correct your data and request its export or deletion under applicable rules, and you can reach us through the contact details published on the site.
We may update this policy, and any material change will be published on this page with its effective date.