Your books are yours. This policy explains how we treat them.

This Privacy Policy explains how eHisab (the "app", "we", "us") — the accounting and bookkeeping service available on the web at ehisaab.app and on mobile devices — collects, uses, stores, shares and protects information when you use the app. It applies to every visitor, registered user and team member who uses the app.

The app is operated by the eHisab team. It is an accounting tool for small businesses in Nepal: it keeps sales and purchase records, invoices, bills, dues (udhaar), inventory, bank and cash balances, and financial reports. Your business records are yours — we store and process them only to provide the service to you.

By creating an account or using the app, you agree to this policy. If you do not agree, please do not use the app.

We collect only what is needed to run your accounting. This falls into five groups:

• Account information — your name, email address, phone number and password. If you sign in with Google, we receive your Google account name, email address and profile picture. We never see or store your Google password.
• Business information — business name, address, currency (Nepalese Rupees), VAT/PAN registration status and tax registration number (PAN/VAT number).
• Financial records you enter — transactions, invoices, quotations, bills, dues, payments, inventory items and stock movements, budgets, recurring schedules, and bank, cash or wallet account records.
• Documents you upload — photos or files of receipts and bills, stored in private storage.
• Team information — the names and email addresses of staff you invite into your business, and the role you assign them (owner, admin, accountant or viewer).

We also collect a small amount of technical data automatically: device type, browser version, IP address, and app log data used to diagnose errors and keep the service secure. We do not sell your data, and we do not run advertising on your accounting records.

• Internet access — required to sync your records with your account.
• Photos / files / storage — used only when you attach a receipt or bill image to a record, or export a report. We read only the file you pick; we never scan your device.
• Notifications (if enabled) — used only for reminders you set, such as payment reminders.

We do not access your contacts, camera roll, location, microphone or any other data beyond what you actively choose inside the app.

• To keep your books — store, calculate and present the records you enter, including ledgers, dues, VAT and TDS calculations and reports.
• To operate your account — sign-in, password reset, multi-business setup, team invitations.
• To send service messages — security notices, sign-in alerts, receipts for paid plans, and transactional messages like the payment reminders you choose to send.
• To provide support — answering questions you send through the contact form or email.
• To improve and secure the app — understanding which features are used at an aggregated level, detecting abuse and preventing fraud.

We do not use your financial data to advertise to you, and we do not use your business records to train machine-learning models for other customers.

We share data only with the providers we need to run the service — hosting, managed database, private file storage and email delivery — and only the parts each provider needs to do its job. These providers process data on our behalf under contract and are not permitted to use it for their own purposes.

• Sign-in with Google — when you use Google sign-in, the sign-in itself is handled by Google under Google's own privacy policy; we receive only your basic profile details.
• Public invoice links — sharing an invoice creates a random, unguessable link that shows exactly one invoice and nothing else from your books.
• Legal requirements — we may disclose information when the law requires it, for example a valid order from a Nepali court or authority.
• Business transfers — if the business behind the app is ever sold or merged, customer data may transfer to the new owner, who must honour this policy.

We never sell your personal or financial information to anyone.

• All traffic between your device and our servers is encrypted with TLS.
• Your records sit in an encrypted managed database.
• Access is enforced at the database level with row-level permissions, so one business's queries can never read another business's data.
• Receipts and bill images live in private storage and are reachable only through short-lived signed links.
• Optional app lock — you can protect the app with a PIN on your device.
• Every create, update and delete on financial documents is recorded in an audit log with the acting user and timestamp.

No system is perfectly secure, but we design so that a leak of one account exposes only that account.

Your records are kept for as long as your account is active, because accounting records typically need to survive the fiscal year they belong to. You can delete individual records yourself at any time from inside the app.

To delete your entire account and all data connected to it, email hello@ehisaab.app from your registered email address with the subject "Delete my account". We will verify the request and delete your business data. Minimal backups may persist for a short period before they are fully purged. We will confirm the deletion to you by email.

If you delete the app from your phone, your data is not deleted — your books live in your account, not on your device. You must request account deletion as described above.

• Access and export — you can view and export your registers, reports and party statements as CSV at any time.
• Correct — you can edit the business details and the records you have entered.
• Delete — you can remove individual records in the app, and request full account deletion by email.
• Privacy mode — you can hide money amounts on shared screens from the app's settings.
• Communications — service and security emails are necessary for your account; if we ever send optional updates, you can opt out.

To exercise any of these rights, write to hello@ehisaab.app and we will respond within one business day.

The app is a business accounting tool and is not directed at children. We do not knowingly collect personal information from anyone under 13 (or under 16 where local law requires). If you believe a child has created an account, contact us and we will remove it.

Our hosting and database providers may operate outside Nepal. Where data is transferred internationally, we rely on the provider's contractual and security commitments to protect it as described in this policy.

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect, and update the "last updated" date above. Continuing to use the app after a change means you accept the updated policy.

Questions about privacy, this policy, or deleting your data? Email hello@ehisaab.app or use the contact page at ehisaab.app/contact — we reply within one business day.