Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account, including your email address, display name, date of birth, and phone number (optional). We also collect usage data automatically, including IP addresses, browser type, device information, pages visited, and interaction patterns. This data helps us improve the platform and maintain security.

2. How We Use Your Information

Your information is used to: provide and maintain the Hisaab Kitaab service, process your accounting data, send transactional emails (OTP verification, password resets, receipt notifications), improve our platform through analytics, prevent fraud and unauthorized access, and comply with legal obligations. We never sell your personal data to third parties.

3. Cookies and Tracking

We use essential cookies for session management and security (CSRF tokens, session identifiers). We may use analytics cookies (Google Analytics 4, Microsoft Clarity) if enabled by the administrator. You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

4. Third-Party Services

We integrate with the following third-party services: Razorpay (payment processing), Google (OAuth authentication, Analytics, reCAPTCHA), Amazon SES (email delivery), and Cloudflare/CDN (content delivery). Each of these services has their own privacy policies. We only share the minimum data required for each service to function.

5. Data Security

We implement industry-standard security measures including: Argon2id password hashing, AES-256 encryption for backups, HTTPS enforcement with HSTS preloading, Content Security Policy headers, CSRF protection on all forms, rate limiting on all endpoints, IP-based access controls for admin areas, and regular security audits. All database access uses PDO prepared statements to prevent SQL injection.

6. Data Retention

Your account data is retained as long as your account is active. If you delete your account, we remove your personal data within 90 days (retention period for audit purposes). Error logs and analytics data are retained for up to 90 days. Backup data encrypted with AES-256 is retained according to the backup schedule configured by the administrator.

7. Your Rights

You have the right to: access your personal data, request correction of inaccurate data, request deletion of your account and associated data, export your accounting data in standard formats, and withdraw consent for optional data processing. To exercise any of these rights, contact us through the Contact page.

8. Children's Privacy

Hisaab Kitaab is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out through our Contact page. We aim to respond to all privacy-related inquiries within 48 hours.