Privacy Policy

Last updated: February 2026

Data Security & Multi-Tenancy

Your financial data is our top priority. Hesaby is built with a strict multi-tenant architecture that ensures complete data isolation between organizations. Each tenant's data is logically separated and protected, ensuring that your financial information is never accessible by other organizations using the platform. We employ industry-standard encryption for data in transit and at rest.

Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email, organization details)
• Financial data you enter (transactions, accounts, projects, expenses)
• Usage information and analytics to improve our services
• Telegram account information (if you choose to link your account)

How We Use Your Information

We use your information to:

• Provide, maintain, and improve our financial management services
• Process your transactions and generate financial reports
• Respond to your requests and provide customer support
• Monitor and enhance the security of our platform
• Comply with legal obligations and enforce our terms

How We Protect Your Data

We implement comprehensive security measures to protect your data:

• End-to-end encryption for all data transmission
• Strict tenant isolation at the database and application levels
• Role-based access control and authentication
• Comprehensive audit trails and activity logging
• Regular security audits and encrypted backups

Data Sharing & Third Parties

We do not sell your financial data to third parties. We may share information only in the following circumstances:

• With your explicit consent
• With trusted service providers who assist in operating our platform (under strict confidentiality agreements)
• When required by law or to protect our rights and safety

Your Rights

You have the right to:

• Access and export your personal data at any time
• Correct or update your information
• Request deletion of your account and associated data
• Restrict or object to certain data processing activities
• Request data portability in a machine-readable format

Data Retention

We retain your financial data for as long as your account is active or as needed to provide you services. If you delete your account, we will securely delete your data within 30 days, except where we are required to retain it for legal or compliance purposes. Soft-deleted records are permanently purged according to our data retention schedule.

Cookies & Tracking

We use cookies and similar technologies to maintain your session, remember your preferences (such as language selection), and analyze how you use our platform. You can control cookie settings through your browser, though some features may not function properly without them.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us through your account administrator or the support channels provided in your organization's dashboard.