Privacy Policy

1. Introduction & Who We Are

Hisab24 ("we", "us", "Hisab24") is a digital hisab khata built for Facebook, Instagram, and WhatsApp sellers in Bangladesh. We help you track orders, baki, delivery, and profit without a complicated ledger.

We built Hisab24 specifically for FB commerce sellers who get hundreds of comments and messages daily and need automatic order creation. We are not a marketing company. We do not sell your data. We only use your messages to create khata entries so you can run your business.

2. What Data We Collect

We only collect what we need to run your hisab. No extra tracking.

a) Account Data

• Name, phone number, email
• Login information (password hashed, never plain text)
• Shop / business name

b) Facebook / Meta Page Data (if you connect)

• Page ID, Page name, Page access tokens (encrypted)
• Comments with order intent on your connected Page posts
• Messenger messages sent to your Page — only to create orders

Important: We only read comments that look like order intent — e.g., contains phone number, "inbox", "price", "order", "নিতে চাই", "pp". We do NOT store all comments on your Page. We filter at the moment of collection and discard non-order comments.

c) Instagram Data (if you connect)

• Comments and Direct Messages for order creation only

d) WhatsApp Business Data (if you connect)

• WhatsApp messages where customers ask for order, price, delivery
• Phone numbers in masked form (we show last 4 digits in UI)

e) Business / Order Data you enter

• Order amount, advance, baki, delivery fee, profit you enter
• bKash / Nagad transaction references — we do NOT store full wallet numbers or PINs
• Delivery tracking numbers (Steadfast, Pathao) if you connect courier

3. How We Use Your Data

We use data only to run your hisab khata. Nothing else.

• Auto order from comments: Turn comment 'Apu price koto? 017...' into a draft order so you don't miss sales.
• Khata & profit: Product cost vs selling price, delivery cost → real profit per order.
• Fake order risk check: Phone number history against courier returns (with your action).
• Courier booking: Only when you click send to Steadfast / Pathao / RedX.
• Support: Help you when you contact us via WhatsApp or email.

We do NOT use your Facebook, Instagram, or WhatsApp data for advertising, profiling, or training AI models.

4. Meta Platform Compliance

Hisab24 is built on Meta Graph API and we strictly follow Meta Platform Terms, Developer Policies, and WhatsApp Business Terms.

• We do not sell any Facebook, Instagram, or WhatsApp data.
• We do not share Meta data with third parties, advertisers, or data brokers.
• We do not use Meta data for ads targeting, cross-app profiling, or unrelated purposes.
• We only use Meta data inside Hisab24 to provide the accounting features you explicitly requested.

Permissions we request

• Read comments with order intent on your Page posts
• Send inbox / comment replies you configure
• If you connect IG, read order-related comments/DMs
• If you connect WhatsApp Business, create orders from messages

When you disconnect or request deletion: We complete deletion within 7 days and confirm by email. For Meta's data deletion callback, we return a confirmation code and status URL as required.

5. Legal Basis

• Contract: We need your order data to provide the hisab khata service you signed up for.
• Consent: You explicitly connect Facebook / Instagram / WhatsApp and grant permissions.
• Legitimate interest: Keeping secure logs to prevent fraud, improve order detection accuracy, and support you.

6. Data Sharing

We do NOT share your Meta data with third parties.

We only share non-Meta data in these cases, with your explicit action:

• Couriers: Steadfast, Pathao, etc. — only if you click "Connect Courier" and only delivery name, phone, address for tracking. With your explicit consent each time.
• Infrastructure: Encrypted hosting in Singapore, email delivery for order updates — under contract, no selling.
• Legal: If required by Bangladeshi law or court order.

7. Data Storage & Security

• Data encrypted at rest (AES-256) and in transit (TLS 1.3)
• Tokens are encrypted with separate keys and never logged
• Servers located in Singapore (primary) with backup in Dhaka, Bangladesh
• We do not store full payment numbers — only last 4 digits / reference ID
• Access limited to authorized Hisab24 team for support only

8. Data Retention & Deletion

• Order / khata data kept while your account is active, or until you delete it — whichever comes first. This helps you see past sales during festivals.
• Active accounts: data kept while you use Hisab24
• After you delete account or disconnect Page: Meta data deleted within 7 days, khata data within 30 days unless legally required

Full instructions: Data Deletion page

9. Your Rights

• Access and review your data inside Hisab24
• Download a copy of your orders and connected Page data
• Correct inaccurate information
• Disconnect Facebook / Instagram / WhatsApp at any time
• Request full deletion via Settings or email

Email privacy@hisab24.com — we reply in Bangla or English.

10. Children's Privacy

Hisab24 is for business owners aged 18 and over. We do not knowingly collect data from children under 18. If you are under 18, please do not use Hisab24. If we learn we have data from a child, we will delete it promptly.

11. International Transfers

Your data is primarily stored in Singapore and may be processed in Bangladesh where our team operates. We ensure same level of protection through encryption and contractual safeguards. By using Hisab24, you consent to this transfer as needed to run your hisab.

12. Changes to Policy

We may update this policy when Meta changes its rules or we add new features. We will notify you inside Hisab24 and by email at least 7 days before major changes. Continued use after update means you accept the new policy.

13. Contact Us

If you have concerns about Meta Platform Data handling, you can also contact Meta via your Facebook Page → Settings → Privacy.