Privacy Policy

Overview

This Privacy Policy explains how Ado Systems (“Hisab”, “we”, “us”) collects, uses, shares and protects personal information when you use Hisab - our point-of-sale, inventory, invoicing, payments, accounting, reporting and online-storefront platform - through our website, web app, storefront pages and mobile app (together, the “Service”).

Hisab is built for Ethiopian businesses of every kind - shops, wholesalers, importers, exporters and fuel stations. We have tried to describe what the Service actually does today, in plain words, including its limits. This policy works alongside our Terms of Service and is written with Ethiopia’s Personal Data Protection Proclamation No. 1321/2024 in mind. If anything is unclear, write to us at hisab@adosystems.com.

Who is responsible

Data-protection law separates the organisation that decides why and how personal data is used (the controller) from one that handles it on someone else’s instructions (the processor). On Hisab, both exist:

• Hisab is the controller of account and platform data - your sign-in details, the phone number on your account, which businesses you belong to and your role in each, our platform security log, plan and payment-request records, and messages you send us.
• Each business is the controller of what it keeps in Hisab - its products, sales, invoices, books and other records; the details it enters about its staff, customers and suppliers; orders and messages from its storefront shoppers; and its own activity log. Hisab processes this on the business’s behalf, following the instructions the business gives through its settings and through what its Owner and staff do in the Service.

So if you are a staff member, your Hisab login is covered by us, while your work records and activity inside a business belong to that business. If you are a shopper on a Hisab storefront, or a customer who receives an invoice, receipt or link from a business, that business decides how your information is used. Contact the business first, and we will help it respond (see Duties of businesses).

Hisab’s legal pages can also open on a shop’s own web address. Wherever you read it, this is Hisab’s policy; the shop may have its own.

Information we collect

Your account

• At sign-up we ask for your email address, phone number and a password - all three are required - together with your name and the name and type of your first business. The phone number must have 9 to 15 digits. We store it as you type it and do not verify it by SMS.
• Email confirmation. Before your first sign-in we email you a 6-digit code to confirm your address. The confirmation and password-reset emails also contain a link that includes your email address and the code, so that link can appear in your browser history.
• Your password is stored only as a one-way (bcrypt) hash, never in readable form.
• Your businesses - which businesses you belong to, your role and any extra permissions in each, and whether your access is active or frozen.
• Your session - when you sign in we issue a signed token that identifies you (not a business) and expires after 7 days.

Staff added by a business

Owners and managers add staff by entering the person’s email address and, optionally, a name and phone number, choosing a role and, for someone new to Hisab, setting a first password. Hisab does not send an invitation email; the staff member confirms their email address the first time they sign in. If the email already belongs to a Hisab account, that account is added to the business straight away, and the person adding it can see the name and phone number on that account. If a business adds your existing account, you are not asked first and Hisab does not tell you. You cannot leave a business by yourself: ask its Owner to remove you, or contact us if that is not possible.

Business records

Everything a business and its staff enter or create in Hisab, for example:

• the business’s own details - name, type, web address, logo, contact phone and address, VAT TIN and settings;
• products, prices, costs, barcodes, stock movements, batches, expiry dates and photos;
• sales and receipts (including which staff member made each sale, the till shift and the device), returns, invoices, payments received and made, payment references such as a Telebirr transaction number, and customer advance credit;
• staff performance and cash handling - sales per staff member, and till shifts recording who opened and closed them, the opening float and the counted and expected cash;
• customers (name, phone, email, notes, credit limit, payment terms, loyalty points) and suppliers (name, contact details, address, TIN, country and any bank details typed in);
• purchase orders, expenses, cash books, transfers between the business’s own accounts, bank or mobile-money account numbers kept in the chart of accounts, and the general ledger;
• import shipments and foreign-currency requests, export orders (buyers, consignees, notify parties and shipping details), and fuel-station tanks, charts and dip readings;
• trade-specific records some businesses keep - such as prescriptions, lens orders with eye measurements, or age and background-check logs - which can include sensitive information about the business’s customers or staff;
• storefront content and uploaded images (see Public pages, links & uploads).

Storefront shoppers

• Orders - a shopper gives a name and phone number (both required), an optional note (for example a delivery area or time) and the items wanted. No account, email address or online payment is involved.
• Contact messages - on Growth storefronts where the business has switched the form on: an optional name, an optional phone number or email, and the message.
• Each order or message is saved in that business’s records and noted in its activity log as “A customer”, together with the shopper’s IP address.

People who receive invoices, receipts and links

• A shared invoice shows the customer’s name and the invoice details (see Public pages, links & uploads).
• When staff text a receipt, they type the customer’s phone number. Hisab passes it to our SMS provider with the receipt details. The number is not saved on the sale, but it may be kept in the business’s activity log.

Plans and payments

The plan each business is on, when its free Growth year started and ends and, for paid Growth requests, the payment reference typed in, the email address of the person who made the request (normally the Owner), the business name and the time of the request. We do not collect card or mobile-money details (see Plans & payments).

Messages to us

There are three ways to write to the Hisab team. Emails and contact-form messages reach our team’s Telegram chat so someone can answer quickly, and we answer them by email, sent through Resend. Get help is a conversation inside Hisab: it is not passed to Telegram or answered by email. We keep your message and our reply so we can help you.

• Email. If you email us (for example at hisab@adosystems.com), Resend receives the email for us. We save who sent it, the address it was sent to and the subject; the text itself stays with Resend - except that when we answer, our reply quotes your email, and our reply is kept in our own database.
• The contact form on our website asks for your name and your email address (where we reply), and, if you choose, your phone number and your business’s name, together with the topic you pick and your message. You do not need an account to use it.
• Get help in the app sends your message and topic together with the account you are signed in with - its name, email address and phone number - the business you are in when you send it (its name, type and plan), your role there, the page of the app you were on and your browser or app details, so we can help without a round of questions. Our answers come back inside the app, under Help, and not by email; you can write back there, as often as you need. The whole conversation - your messages and our answers, with the time of each - is kept in our own database and shown only to the account that started it. Get help messages stay inside Hisab - our team reads and answers them in our own admin screen; they are not sent to Telegram or by email. We record when you have opened our answers, so the app knows which are new. In the app our answers are signed “Hisab Team”; we keep a note of which team member wrote each one. The shared demo cannot send Get help messages; demo visitors can use the contact form instead.

Contact-form messages and Get help conversations are saved in full in our own platform database.

Technical data and data on your device

IP addresses, browser or app details and records of sign-ins and changes, described in Activity & security logs, and the small amount of information the Service keeps on your device, described in Cookies & device storage.

Activity & security logs

Hisab keeps two kinds of logs. One helps each business see who did what; the other helps us keep accounts and the platform secure.

Each business’s activity log

• Every change made inside a business - adding, editing, deleting, selling, approving and so on - is recorded with the person’s name and role at the time, the record affected, a short summary, the fields that changed with their old and new values, any amount, whether it went through or was refused, and the IP address it came from. Simply viewing data is not recorded.
• Sign-ins are recorded once per person, per business, per day, with the IP address and a simple device description (for example “Android phone” or “Chrome on Windows”). Refused attempts are recorded with the device too.
• If someone enters the wrong password for your account, the attempt is shown, with its IP address and device, in the activity logs of up to five businesses you belong to (at most once every ten minutes per business), so their Owners can spot it.
• Storefront orders and messages appear as “A customer” with the shopper’s IP address. Plan changes made by Hisab appear under our operator’s email followed by “(Hisab)”.
• Passwords, PINs, tokens, card numbers and similar secrets are masked before anything is saved. Other details are stored as entered, including phone numbers, email addresses, account numbers and notes.
• By default only the Owner can open the full log, including IP addresses and devices; the Owner can give it to individual staff. Anyone in the business can see who added or last changed each record.

Hisab’s platform security log

Separately, we log account events across the whole platform: sign-ups, email confirmations, every sign-in (including demo sessions), failed and blocked sign-ins, password-reset requests and resets, new businesses, free-year activations, paid upgrade requests (with the payment reference), cancellations of Growth and plan changes by our operator. Each entry stores the time, the account and email involved, the business if any, a short description, the IP address and the full browser or app description (user agent). A failed sign-in is recorded with the email address that was typed, even if no account uses it. In the Service, only Hisab’s platform operator can see this log.

Server logs

The web proxy in front of our application server keeps an access log of requests, which normally includes the IP address, the time, the address requested and request details such as the browser description (user agent). The application also logs errors, which can include an email address or a domain name - for example when an email could not be sent. If email or text sending is not set up on the server, the message itself, including any code or phone number, is written to this log instead of being sent.

How long each log is kept is set out in How long we keep data. IP addresses are recorded as the connection reports them and may not identify a person or place precisely.

How we use information

We use the information above to:

• create and run your account, confirm your email address, sign you in and let you reset your password;
• provide the Service to each business - storing its records, doing its calculations, producing its reports, showing its storefront, and sending the receipt texts and links its staff choose to send;
• let each business control and review access - roles, permissions, freezing or removing staff, and its activity log;
• keep Hisab secure and prevent abuse - for example by recording sign-ins and failed attempts, limiting how many requests one address can make, and investigating problems;
• manage plans - the free Growth year, paid upgrade requests and confirming payments;
• answer your questions and provide support - replying by email to what you send us by email or through our contact form, and inside the app to what you send with Get help;
• fix problems and improve the Service;
• meet our legal obligations and enforce our Terms.

Your phone number is required so there is a way to reach you about your account - for example, so Hisab support can contact you about your plan or a payment you report. You, the people who manage staff in each business you belong to, and Hisab’s platform operator can see it. Hisab does not send messages to it automatically, does not verify it and does not use it for marketing.

The only emails Hisab sends automatically are the sign-up confirmation code and the password-reset code. We do not send marketing emails or newsletters. We do not sell personal information or business records, we do not show ads, and we do not use the contents of any business to build advertising profiles.

No automated decisions about people. Hisab does not make automated decisions about you that have legal or similarly significant effects. Checks such as refusing a credit sale that would take a customer past the credit limit a business set apply that business’s own rules.

Our legal bases

Where the Personal Data Protection Proclamation No. 1321/2024, or another data-protection law that applies, requires a lawful ground for processing, we rely on:

• Contract - to provide the account (including keeping a phone number to reach you), plan and Service you signed up for, and the services a business has asked us to run for it.
• Legitimate interests - to keep accounts and the platform secure, keep security and activity logs, prevent abuse, and fix and improve the Service, in ways that do not override your rights.
• Legal obligation - to meet laws that apply to us, such as tax and accounting rules and lawful requests from authorities.
• Consent - only where we specifically ask for it; you can withdraw it at any time. Separately, your browser asks your permission before the web app can use your camera to scan barcodes.

For information a business keeps in Hisab about its customers, staff and suppliers, the business decides the purpose and needs its own lawful ground. We process that information on its instructions.

Who we share it with

We share personal information with the providers below so they can do their part in running Hisab, and in the limited cases listed after the table. Each provider handles data under its own terms and privacy policy.

• Inside a business. A business’s records are visible to its Owner and staff according to the roles and permissions the Owner sets. Your name, email and phone number are visible to the people who manage staff in each business you belong to.
• People a business shares with. Storefronts, invoice links, report links and receipt texts show information to whoever the business shares them with (see the next section).
• Professional advisers. We may share information with our lawyers, accountants or auditors where they need it to advise us, under their duty of confidentiality.
• Legal and safety. We may disclose information where the law or a valid legal order requires it, or to protect the rights, safety and property of Hisab, our users or the public.
• Business transfers. If Ado Systems is involved in a merger, acquisition or sale of assets, information may transfer as part of that deal; we will require the recipient to honour this policy or tell you about any material change.

No payment processor is connected to Hisab. Apart from Cloudflare’s cookie-free visit counts described above, our pages contain no analytics, advertising or tracking tools. We never sell personal information or business records to anyone.

Public pages, links & uploads

Some parts of Hisab are designed to be seen without signing in. Anyone who has the address can read the things below, so share them with care.

• Storefronts. Each business has a public storefront page. Once the Owner or a manager publishes it, it lists each active product’s name, category, selling price, unit, pack price, photo and whether it is in stock - never costs, stock counts, barcodes or suppliers. The shop’s name, logo, type, and the contact phone and address entered in storefront settings can be read through the storefront even before it is published; for Growth shops this also includes the tagline, About text and other website-page text.
• Invoice links. When staff share a customer invoice, Hisab creates a link containing a long random code. Anyone with the link can open the invoice without signing in. It shows the invoice number, the customer’s name, the date, each item with its quantity and price, the totals, VAT, amount paid, balance and status, and the shop’s name, logo, phone, address and VAT TIN - but not costs or the customer’s other details. The link always shows the invoice as it is now, including later payments or a void. Invoice links do not expire and cannot currently be switched off; a link stops working only if the voided invoice is permanently deleted.
• Report links. Anyone in a business who can view reports can share one. Sharing saves a copy of what was on screen at that moment - title, period, columns and rows, which can include customer, supplier or staff names - and lets anyone with the link see it under the shop’s name and logo. Report links do not expire and cannot currently be withdrawn.
• Uploaded images are not private. Product photos, logos, storefront pictures and payment-slip images attached to supplier payments are stored together on our server, not separated by business. Each image gets a long random address that is not listed anywhere, but anyone who has that address can open it without signing in. Removing an image from a product or setting does not delete the file. Please do not upload images you need to keep private, such as bank or Telebirr slips showing account details.
• Images hosted elsewhere. If a business uses an image hosted on another website, visitors’ browsers fetch it from that website, which receives their IP address and browser details under its own terms.
• Search engines. Invoice and report pages ask search engines not to index them, but that does not stop anyone who has the link.

Custom domains

On Growth, the Owner or a manager can connect the shop’s own domain from the Storefront page. Hisab sends the domain name to Vercel to attach it, adds www as a redirect for a root domain, shows the DNS records (A, CNAME and, when needed, an ownership TXT record) to add at the registrar, and checks when the domain is live. On that domain, the storefront, the sign-in page, the app, and invoice and report links can appear under the shop’s name and logo. Signing in there still uses your Hisab account, your password still goes to Hisab, and the domain gives no one extra access to business data.

Changing or removing a domain in Hisab does not detach it from our hosting provider, and a connected domain can keep showing the shop after a business returns to Starter. If you no longer want your domain to point at Hisab, remove its DNS records at your registrar and let us know.

The shared demo

Where we offer a one-tap demo, every visitor uses the same demo businesses as the same demo owner. Anything typed there can be seen and changed by other visitors, so please do not enter real or personal information. The names, phone numbers and sales in the demo are fictional.

What Hisab staff can see

Hisab is run through a platform operator account held by Ado Systems. From its console, the operator can see:

• the list of accounts: name, email, phone number, whether the email is confirmed, number of businesses and join date;
• for each business: name, web address, type, status, Owner’s name and email, number of members, plan and free-year dates, and activity signals. The signals are when it was created, the last day someone used it, the date of its last sale (or last cashbook entry or export order), and yes/no flags: whether it has ever sold, whether its catalogue is empty, whether its storefront is published, whether a custom domain is attached and connected, and whether a paid request is waiting. A health score is worked out from these signals only;
• totals across businesses. These cover all real businesses, or one business category or type, over a period: sales value and number of sales, average sale, units sold, VAT on sales, discounts, voids, returns, money taken at the till, invoice payments received and amounts owed on invoices, the mix of payment methods, product categories and units, sales by hour and weekday, and counts of orders, purchase orders, expenses, cashbook entries, shipments, export orders, till shifts and offline uploads. A figure that would cover fewer than three businesses is never shown, and figures that would let one be worked out by subtraction are held back too. A product category name or unit typed by a business appears only when at least three businesses use it. Demo businesses are left out. Our servers work these totals out from each business’s records when the page is opened and keep them in memory for about a minute. They are not stored, and the operator cannot see the records behind them, any single business’s figures, or its customers, products or sales;
• plan and subscription history (free-year activations, paid requests with their payment reference, plan changes and cancellations) and system health (database, disk, email, Telegram, SMS and domain-service status, queue sizes);
• the platform security log, including IP addresses, browser details and payment references, plus overall counts;
• messages sent to us: for emails, who sent them, the subject and whether we have replied; for contact-form messages and Get help conversations, everything described in Messages to us, with our answers and, for Get help, whether you have opened them.

The only change the operator can make from the console is moving a business between Starter and Growth. Each such change is recorded in our security log and also shown in that business’s own activity log, under the operator’s email followed by “(Hisab)”, with the IP address and device. Simply viewing these lists is not separately logged.

The console cannot open a business’s records - its products, sales, customers, books or staff roles. Nobody at Hisab has standing access to a business inside the app: like anyone else, we have to be added as a member. If a business adds Hisab’s operator account as a member (for example for support), that account can see and do what its role allows and is not held back by custom per-person access limits; with a role that manages staff, it can also change access and freeze or remove members, as an Owner can. Remove it when the job is done.

Plans & payments

• Free Growth year. Each business can switch on the Growth plan free for 365 days from the Plan & billing page - no payment and no card. We record when the year started and when it ends. Each business gets the free year once; if it cancels part-way, it can switch Growth back on only for the rest of that same year. When the year ends, the business automatically returns to the free Starter plan and nothing is charged.
• Paid Growth. After the free year, a business asks for Growth by paying to an account Hisab lists (for example a bank or Telebirr account) and typing in the payment reference. We store the request - business name, the email of the person who made it (normally the Owner), payment reference and time - and the reference is also written to our platform security log. Our operator checks the payment and switches Growth on by hand. When we check a payment, our bank or mobile-money statement shows us the details it normally shows for an incoming payment, such as the payer’s name and account or phone number; we use them only to match your payment and keep them with our accounting records.
• No card on file. No payment processor is connected to Hisab. We never receive card numbers, bank passwords or mobile-money PINs, and nothing is charged automatically. Your bank or mobile-money provider handles your payment under its own terms.
• Records. The current plan and free-year dates are kept with the business’s platform record, and plan requests and cancellations appear in the business’s activity log. We keep records of payments we receive as the law requires.

Cookies & device storage

Hisab sets no cookies, and our pages contain no advertising or tracking scripts. Instead, the Service keeps a few things on your device so it can work:

• Your sign-in - the web app keeps your session token in your browser’s local storage (hisab.auth), together with your name, email, phone number, your list of businesses and the one you selected. The token is sent with each request to our server instead of a cookie.
• Offline sales - if the network drops while a sale is being charged, the web till saves it in local storage (hisab.salesQueue) - products, quantities, prices, discount, VAT, payment method and reference - and sends it when you are back online.
• Preferences - calendar choice, till layout and report date range, plus a short-lived flag in session storage used to recover from a failed page load. Preferences stay on the device after you sign out.
• App files - every Hisab page, including storefronts and pages on a shop’s own domain, installs a service worker that keeps copies of Hisab’s pages, typefaces and static files in the browser so they load quickly and work offline. It does not store data from our API.
• Recent screens - so the app opens instantly, it keeps the last copy of a few screens for the signed-in person in each business - the dashboard figures, the till’s product list and settings, and what that person may see and do - in local storage (hisab.c:…), and replaces them with fresh data a moment later. Each person’s copy is kept apart, and signing out removes all of them from the device.
• Mobile app - the Hisab app keeps your session (token, profile and selected business) in the phone’s app storage and removes it when you sign out. On Android it asks only for internet access, and it contains no analytics or advertising tools.
• Shoppers - a storefront cart lives only in the open page and is gone when the page closes. Like any Hisab page, a storefront also installs our service worker, which keeps copies of the pages and static files in the browser so they load faster, and may set the short-lived session-storage flag described above. Storefronts set no cookies.
• Visit counts - on Hisab’s own address (hisab.adosystems.com), including the app and storefront pages there but never on a shop’s own domain, a small Cloudflare Web Analytics script reports each page view: the page, the page you came from, your browser and device type, your country and how fast the page loaded. It sets no cookies, stores nothing on your device and is not used to follow you across other websites.
• Camera - if you scan barcodes with your camera in the web app, decoding happens on your device and camera images are not uploaded.

Our web host receives standard technical information, such as IP address and browser details, when pages load, and handles it under its own terms. Our confirmation and password-reset emails load the Hisab logo from our website, so opening one can send your IP address to our web host. You can clear Hisab’s storage in your browser settings; you will then need to sign in again, and any unsynced offline sales will be lost.

How we protect data

These are the measures in place today:

• Encryption in transit - pages and our API are served over HTTPS, and our API server tells browsers to use HTTPS only (HSTS).
• Separation between business records - each business’s records are kept in their own database file, and every request for them is checked against the signed-in person’s active membership of that business. Frozen members are refused. Uploaded images are the exception: they are not separated by business, and anyone who has an image’s address can open it.
• Permissions checked on the server - roles and extra grants are checked by our server, not only hidden on screen. The per-document access levels you set are enforced on the server for the main documents - invoices, payments, customers, products, orders, cash book, expenses, ledger, purchasing, imports, reports, shifts, settings, staff, billing and storefront. In other areas, such as offline till sales, export, fuel and transfers, those settings do not take away what the person’s role allows.
• Hashed passwords - passwords are stored only as bcrypt hashes and are masked in activity logs.
• Request limits - sign-up, sign-in, email-confirmation and password-reset requests, storefront orders and contact messages, messages from our own contact form and Get help, and public invoice and report links limit how many requests one IP address can make each minute.
• Protected server secrets - keys and secrets are kept in restricted server configuration, not in our code.

And these are the limits, so you can decide what to keep in Hisab:

• the application does not encrypt stored databases or files;
• uploaded images and shared links open for anyone who has their address;
• signing out does not cancel a session on the server;
• we do not promise a particular backup schedule (see Backups and copies);
• we do not claim any security certification.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authority as the law requires. Please use a password you do not use anywhere else, and tell us at hisab@adosystems.com straight away if you think someone else has used your account.

How long we keep data

We may keep some information longer where the law requires it, to resolve disputes, or to enforce our agreements.

Backups and copies

Copies of the server’s data may be made on our servers, for example before an update. Information you delete can remain in those copies after it is gone from the live Service. We do not promise a particular backup schedule, so export the records that matter to you regularly.

What deleting does

Inside a business, the Owner and the staff they allow decide what to delete. Here is what each kind of deletion actually does:

• Products are switched off rather than erased, so their history stays.
• Customers can be deleted only if no sale or payment refers to them.
• Invoices must be voided first. Deleting a voided invoice permanently removes it with its items, payments, stock movements and ledger entries. Only the Owner, or staff the Owner allows, can do this.
• Purchase orders, expenses, transfers, cash books, and export orders and expenses are permanently removed when deleted; where they posted ledger entries, those are removed too. Deleting an export order keeps its expenses, no longer linked to it. Expenses for goods the shop used itself cannot be deleted.
• After a record is deleted, its activity-log entries - including its label (such as an invoice number or a name) and amount - remain until the 24-month clean-up.
• Removing a staff member ends their membership and custom access in that business only. Their Hisab account stays, and their name remains on the sales, entries and log lines they made.
• Cancelling Growth or returning to Starter changes only the plan. No records, website content, messages or domain settings are deleted.
• Closing an account or a whole business is not available in the app yet. Ask us, and we will tell you what we can delete and what has to be kept.

Hosting & transfers

Hisab’s application server, databases and uploaded files are hosted on Microsoft Azure. Our web pages are served by Vercel, visits to our own site are counted by Cloudflare, emails are delivered and received by Resend, emails and contact-form messages sent to us are passed to our team on Telegram, and receipt texts are delivered by an SMS provider. These providers operate internationally and some or all of their servers may be outside Ethiopia, so your information may be stored or processed in other countries.

We share data with these providers only so they can provide their part of the Service. Where the Personal Data Protection Proclamation or another applicable law sets conditions for sending personal data abroad, we will take the steps it requires.

Your rights

Subject to the Proclamation and other applicable law, you can ask us to:

• Access - tell you what personal data we hold about you and give you a copy;
• Correct - fix inaccurate details. There is no in-app screen for changing your name, email or phone number yet, so email us. You can change your password at any time with “Forgot password?” on the sign-in page of the Hisab website;
• Delete - erase your personal data, apart from what we or a business must keep by law, for security, or to resolve disputes;
• Export - reports can be downloaded as Excel or saved as PDF, a period workbook can be downloaded for your accountant, and invoices can be printed or saved as PDF. For a fuller copy of your data, ask us;
• Object or restrict - ask us to stop or limit certain uses, and withdraw consent where we relied on it;
• Complain - to the authority that supervises data protection (see Contact & complaints).

To make a request, email hisab@adosystems.com from the address on your account. We may need to confirm it is you first, and we will reply within the time the law allows.

If you are a staff member, shopper or customer of a business, most information about you belongs to that business, so ask it first. If you contact us, we will pass your request to the business and help it respond. Where we hold data about you ourselves - your Hisab account or our security log - we will handle that part directly.

Children’s privacy

Hisab accounts are for adults. Hisab is a business tool, not directed at children, and we do not knowingly create accounts for anyone under 18. If you believe a child has signed up or given us personal information, contact us and we will delete it.

Businesses may still record information about customers who are children - for example a patient’s prescription or lens order, or a shopper’s order. The business is responsible for having a lawful basis for that information, including any parental consent the law requires.

Duties of businesses

If you run a business on Hisab, you are the controller of the personal information you keep in it. That means you are responsible for:

• having a lawful reason to collect and keep information about your customers, suppliers and staff - especially sensitive details such as prescriptions, eye measurements or background checks;
• telling your staff that Hisab records their sign-ins, actions, IP addresses and devices in your activity log, that reports show sales per staff member and each till shift’s opening float and counted and expected cash, and that their email and phone number are visible to your managers;
• knowing that if you use images hosted on another website, your shoppers’ browsers fetch them from that website;
• giving your shoppers a privacy notice - Hisab storefronts do not show one for you, so you could add it to your storefront’s About text where your plan allows - and contacting them yourself, since Hisab does not message shoppers;
• having permission before you text a receipt to a customer’s phone number;
• sharing invoice and report links only with the right people, remembering that they cannot be withdrawn;
• entering staff details accurately, choosing a safe first password and telling the person how to sign in;
• keeping the devices that run your till secure, and letting offline sales sync before signing out;
• keeping the records the law requires, and handling your customers’ and staff’s requests to see, correct or delete their information. We will help where we reasonably can.

What Hisab does for your business

• We process the information in your business only to provide, support and secure the Service for you, in line with this policy and the instructions you give through your settings and through what you and your staff do in Hisab.
• People at Ado Systems may look inside your business only in the cases described in What Hisab staff can see.
• If a breach affects your business’s records, we will tell the Owner without undue delay, so you can meet your own duties to your customers and staff.
• The providers we use are listed in Who we share it with. When that list changes, we will update this policy.
• We will help you answer requests from your customers and staff where we reasonably can.
• If you want to close your business, ask us. Before anything is deleted you can export your reports, period workbook and invoices (see Your rights), and we will tell you what we can delete and what has to be kept.

Changes to this policy

We will update this policy as Hisab changes. This version describes the Service as of 19 October 2026, including the operator console’s network totals and business activity signals, phone numbers at sign-up, the free Growth year, self-service custom domains and answers to Get help inside the app. When we make a material change, we will update the date at the top and, where appropriate, tell you in the Service or by email. Please check back from time to time. This policy is currently published in English only.

Contact & complaints

For questions, requests or concerns about your privacy, email hisab@adosystems.com or write to Ado Systems, Addis Ababa, Ethiopia. A real person reads every message, and we will work with you to put things right. If you are not satisfied with our answer, you can complain to the supervisory authority responsible for the Personal Data Protection Proclamation in Ethiopia, or to the data-protection authority where you live.