Privacy Policy

1. Information We Collect

To provide robust SaaS POS and financial tracking services across various retail and service industries, we collect several categories of information:

A. Personal Identification Information

When you sign up for a 14-day free trial, purchase a subscription, or request a product demo, we collect personal details including:

• Full name
• Business/Company name and branch locations
• Primary email address
• Mobile phone number and alternative contact information
• Billing and physical business addresses
• Account credentials (hashed passwords and secure authentication tokens)

B. Business & Operational Data (User Content)

As a core function of our platform, you input and store vital business management data. EZ Hishab acts as a data processor for this information, which includes:

• Product & Inventory Details: SKU codes, product names, stock levels, pricing, supplier catalogs, and reorder thresholds.
• Transaction & Sales Logs: Sales receipts, invoice history, payment types, discount codes, customer dues, and return logs.
• Accounting & Financial Ledgers: Income statements, trial balances, general ledgers, accounts payable, accounts receivable, and VAT/tax figures.
• Customer & Supplier Records: Names, addresses, contact numbers, and transaction histories of your end customers and vendors.

C. Technical, Usage, and Device Data

When you interact with our web platform or mobile applications, we automatically collect technical information:

• IP addresses, hardware model, operating system version, and unique device identifiers.
• Browser type, language preferences, time zones, and cookie session identifiers.
• Log files detailing feature usage, system errors, click patterns, access timestamps, and session durations.

2. How We Collect Information

We collect information through three primary mechanisms:

• Direct Input: Information you explicitly provide when creating an account, filling out contact forms, setting up inventory, or conducting sales transactions.
• Automated Data Collection: Technical logs, cookies, and tracking technologies that collect device performance metrics when you interact with our platform.
• Third-Party Integrations: Payment confirmation tokens and status updates received from integrated payment partners (such as Pay Station) during subscription purchasing.

3. How We Use Your Information

EZ Hishab uses the collected data strictly for operational, support, and business improvement purposes:

• Service Delivery & Maintenance: Provisioning accounts, enabling multi-branch syncing, generating invoice PDFs, processing POS transactions, and supporting offline-to-online synchronization.
• Financial Analytics & Reporting: Calculating tax liabilities, processing real-time inventory alerts, generating profit/loss statements, and providing graphical business performance dashboards.
• Account Management & Billing: Validating subscription status, processing monthly or one-time plan renewals, issuing billing notices, and verifying payment transactions.
• Customer Support & Training: Resolving technical issues, assisting with bulk data imports (via CSV/Excel), providing onboarding training, and responding to inquiries.
• Platform Security & Optimization: Monitoring system integrity, detecting fraudulent activity, preventing unauthorized access, and improving software speed and reliability.
• Service Communications: Sending critical service updates, technical advisories, security alerts, and administrative notices.

4. Data Encryption and Security Standards

Data security is the foundation of our infrastructure. We employ industry-leading security practices to protect your sensitive financial and operational records against unauthorized access, loss, alteration, or disclosure:

• Military-Grade Encryption: All data transmitted between your device and our systems is encrypted using TLS 1.3. Data stored in our databases is secured using AES-256 military-grade encryption.
• Secure Cloud Infrastructure: Our applications and databases are hosted on enterprise cloud servers equipped with automated threat detection, DDoS mitigation, continuous firewall protection, and restricted physical accessibility.
• Access Control & Anonymization: Access to database administrative controls is strictly restricted to authorized engineers under multi-factor authentication and role-based privilege checks.
• Data Backups: We perform regular automated database backups to ensure business continuity and disaster recovery capabilities.

5. Third-Party Sharing and Disclosures

We maintain a strict policy against selling, renting, trading, or monetizing your personal or business data. We disclose information only under the following limited and controlled conditions:

• Payment Service Providers: We share necessary transaction metadata with trusted payment gateway providers (such as Pay Station) to process subscription payments securely.
• Essential Cloud Infrastructure: We utilize third-party cloud hosting, email delivery, and SMS gateway vendors bound by strict data processing and confidentiality agreements.
• Legal and Regulatory Compliance: We may disclose information if required by applicable laws, legal processes, court orders, or enforceable governmental requests in Bangladesh.
• Business Transfers: In the event of a merger, acquisition, corporate restructuring, or asset sale involving The Second Source, user accounts and data may be transferred under confidentiality covenants to the acquiring entity.

6. Data Retention and Account Deletion Policy

We retain your personal and business records for as long as your account remains active or as needed to fulfill our legal obligations.

A. Active Accounts

All inventory, customer, ledger, and sales records remain accessible on our servers throughout the lifespan of your active paid or trial subscription.

B. Canceled or Expired Accounts

If your subscription is canceled, expires, or if you do not convert after your 14-day free trial:

• Your data remains safely stored and archived in an inactive state for 30 calendar days.
• During this 30-day grace period, you may reactivate your account to fully restore all historical ledgers, sales records, and inventory configurations.
• After the 30-day grace period, all associated business records and account data will be permanently deleted from our primary production databases and cannot be recovered.

7. User Data Rights and Control

As an EZ Hishab user, you maintain complete ownership over your business data and possess the following rights:

• Data Portability and Export: You can export your product lists, customer databases, sales logs, and general ledgers at any time in standard formats (such as CSV or Excel).
• Data Import: You retain the right to upload existing business data into the system using our supported import templates.
• Data Rectification: You can review, update, or correct your personal profile, business details, and billing settings directly via the software dashboard.
• Account Closure: You may request account closure and premature deletion of your records by submitting a formal written request to our support team.

8. Cookies and Web Tracking

EZ Hishab uses cookies, local storage objects, and similar web tracking technologies to enhance user experience:

• Essential Cookies: Necessary for account authentication, maintaining active login sessions, and routing network traffic securely.
• Preference Cookies: Remembers user settings such as language choice (Bangla/English) and dashboard view options.
• Analytics Cookies: Collects anonymous statistical data on software performance and page navigation to help us improve user interface workflows.

You can control cookie preferences through your browser settings, though disabling essential session cookies may impair core software functions.

9. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy periodically to reflect changes in our legal obligations, service features, or data security practices.

When updates are made, we will revise the "Last Updated" date at the top of this policy. For significant modifications, we will provide noticeable notice via email, in-app notification dashboards, or on the main website prior to the change taking effect.

10. Contact Information and Legal Entity

EZ Hishab is designed, developed, and maintained by The Second Source. For questions, concerns, data protection inquiries, or support requests regarding this Privacy Policy, please contact our team: