01 What we store
Your account details (name, email, mobile), your business details (name, VAT number, commercial registration, address), the books you enter or that arrive from Basmtak HR, and security logs.
02 Why
To run the service, to issue your tax invoice, and to secure your account. We do not sell your data and we do not use it for advertising.
03 Who can reach it
You, and whoever you grant access to. Our engineers' access is limited to what support and operations require, and it is logged.
04 Where it is stored
The hosting region and provider will be named here before commercial launch. The intention is hosting inside the Kingdom.
05 Third parties
When you enable payment links, payment data passes through the payment provider you choose, under their terms. When you send invoices to ZATCA, that data reaches ZATCA as the regulation requires.
06 WhatsApp messages
When your business connects its WhatsApp Business account through Meta, we keep the account and number identifiers and an access token Meta grants us, encrypted. We send only the messages you ask for, in your business's name: invoices, quotes, statements, payment reminders and payment confirmations — and only to customers whose agreement your business has recorded. For each message we keep the recipient's number, what it was and its delivery status as Meta reports it, and we keep customers' replies to quotes and requests to stop. Messages pass through Meta's servers and are subject to Meta's terms and privacy policy. We do not read your business's other conversations and do not use this data for anything other than the sending you asked for.
07 Deleting WhatsApp data
Your business can disconnect WhatsApp at any time in Settings; we stop sending and delete the access token immediately. To delete the message log and recipients' numbers, write to us at the address on the contact page and we delete them within 30 days. Any customer can stop the messages by replying «STOP».
08 Your rights
You may ask for a copy of your data, ask for it to be corrected, or ask for your account to be deleted. Write to the address on the contact page.
09 Cookies
We use one cookie for the sign-in session, and a local preference for dark mode and language. There are no advertising cookies and no third-party tracking on this site.