Introduction
Welcome to Bytewisier. We operate Hisab — a cloud-based accounting and business management platform — and related services available at bytewisier.io.
This Privacy Policy explains what personal and business data we collect, why we collect it, how we protect it, and the rights you have over it. By creating an account or using any Bytewisier service, you agree to the practices described in this policy.
Information We Collect
Account Information
When you register, we collect the minimum information needed to create and manage your account:
- Full name and email address
- Business name and business type
- Password (stored as a secure, salted hash — never in plain text)
- Optional: phone number and profile picture
Business & Financial Data
Because Hisab is an accounting platform, it stores the financial records you enter. This includes:
This data is entered by you and belongs entirely to you. We process it only to provide the service.
Integration Data
If you connect a third-party service (such as Shopify), we collect:
- OAuth access tokens required to sync data on your behalf
- Order and product data pulled from the connected platform
- Sync status and activity logs
You can revoke any integration at any time from your account settings.
Usage & Technical Data
We automatically collect limited technical data to operate and improve the service:
- Pages visited, features used, and time spent in the application
- Error logs and crash reports
- IP address, browser type, and operating system (for security purposes)
- Device identifiers
This data is aggregated and anonymised wherever possible. We do not build individual behavioral profiles for advertising.
How We Use Your Data
We use the data we collect for the following purposes:
- To provide the service: Process transactions, generate reports, sync integrations, and display your business data accurately.
- To maintain your account: Authentication, password recovery, and account management.
- To send you service-related communications: Account confirmations, security alerts, and important product updates. You cannot opt out of transactional emails.
- To improve the product: Understand which features are used most, diagnose bugs, and prioritise development.
- To ensure security: Detect and prevent fraudulent access, unauthorised activity, and abuse.
- To comply with legal obligations: Respond to lawful requests from authorities where required.
We do not use your data to serve advertisements, train AI models for external use, or share it with data brokers.
Data Storage & Security
We take the security of your financial data seriously. The measures we implement include:
- Encryption in transit: All data between your browser and our servers is transmitted over HTTPS using TLS.
- Encryption at rest: Database backups and sensitive fields are encrypted at rest.
- Access controls: Production data access is restricted to authorised personnel only, with audit logs maintained.
- Regular backups: Your data is backed up regularly so it can be restored in the event of a system failure.
- Secure password storage: Passwords are hashed using industry-standard algorithms (bcrypt). We never store or log plain-text passwords.
While we implement strong safeguards, no system is completely immune to attack. If we discover a breach that affects your data, we will notify you promptly in accordance with applicable law.
Third-Party Integrations
Shopify
When you connect your Shopify store to Hisab, you authorise us to access your store's order, product, and inventory data via Shopify's official OAuth API. We:
- Store your OAuth access token securely to enable automatic syncing
- Pull order and product data on your behalf and create corresponding accounting entries in Hisab
- Do not read payment card information — Shopify does not expose raw card data through its API
You can disconnect your Shopify store at any time from Hisab's integration settings. Upon disconnection, we delete your OAuth token immediately.
Google Fonts
Our web interface loads the Inter typeface from Google Fonts. This causes your browser to make a request to Google's servers, which may log your IP address per Google's Privacy Policy. No personal data from your Hisab account is shared with Google.
Hosting & Infrastructure
Bytewisier uses cloud infrastructure providers to host and run the service. These providers act as data processors and are bound by data processing agreements. They do not have access to your data beyond what is technically required to run the servers.
Data Sharing
We do not sell, rent, or trade your personal or business data to any third party, ever.
We may share data only in the following limited circumstances:
- Service providers: Infrastructure, hosting, and monitoring providers who process data strictly on our behalf under contractual obligations.
- Legal requirements: If compelled by a court order, government authority, or applicable law, we may disclose data. Where permitted, we will notify you before complying.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified in advance and given the opportunity to export or delete your data.
- With your explicit consent: Any other sharing requires your clear, prior consent.
Your Rights
You have full control over your data. At any time you may:
- Access your data: View all data stored in your account directly within the Hisab application.
- Export your data: Export your transactions, ledgers, and reports as PDF or CSV from within the app at any time.
- Correct your data: Edit any incorrect information directly within the application.
- Delete your data: Request full account deletion by contacting us at privacy@bytewisier.io. We will permanently delete all your data within 30 days.
- Revoke integrations: Disconnect any third-party integration from account settings at any time.
- Object to processing: Contact us if you believe we are processing your data in a way you did not consent to.
To exercise any of these rights, email us at privacy@bytewisier.io. We respond to all privacy requests within 15 business days.
Data Retention
We retain your data for as long as your account is active and for a reasonable period afterward to allow you to reactivate or export your data.
- Active accounts: All data is retained while your account is active.
- Inactive accounts: Accounts with no activity for 24 months may receive a notice before data is archived.
- After account deletion: All personal and business data is permanently and irreversibly deleted within 30 days of your deletion request. Anonymised aggregate usage statistics may be retained longer.
- Legal hold: Where required by applicable law, we may retain certain records for the legally mandated retention period.
Cookies
Hisab uses a minimal set of cookies strictly necessary to operate the application:
- Session cookies: Maintain your login session so you don't need to re-authenticate on every page. These are deleted when you close your browser or log out.
- Security tokens: Short-lived tokens stored in browser memory to protect against cross-site request forgery (CSRF).
- Preference cookies: Optionally store UI preferences (e.g. selected date range) to improve your experience across sessions.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies (such as Google Analytics) on the Hisab application. The public landing page at bytewisier.io is static HTML and sets no cookies.
Children's Privacy
Hisab is a business software platform intended for use by adults (18 years or older). We do not knowingly collect personal data from children under the age of 13.
If you believe a child has registered an account, please contact us at privacy@bytewisier.io and we will promptly delete the account and all associated data.
Changes to This Policy
We may update this Privacy Policy as the product evolves or as legal requirements change. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send a notification email to all registered users at least 14 days before the changes take effect
- Display an in-app notice when you next log in
Continued use of the service after the effective date constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
- Email: privacy@bytewisier.io
- General support: support@bytewisier.io
- Website: Contact form
We aim to respond to all privacy-related inquiries within 15 business days.