Privacy Policy
Last updated: 16 June 2026
1. Introduction
My Hisab (“we”, “us”, or “our") provides automated bookkeeping and VAT compliance services for small businesses in the United Arab Emirates via WhatsApp. This Privacy Policy explains how we collect, use, store, and protect your personal and business data when you use our service.
2. Information We Collect
We collect the following categories of information:
- WhatsApp messages and media: invoice images, voice notes, text messages, and metadata sent to our WhatsApp Business number.
- Business details: business name, Tax Registration Number (TRN), contact phone number, and email address.
- Financial data: extracted invoice data including vendor names, amounts, VAT amounts, dates, and categories.
- Account information: email and password for admin dashboard access.
3. How We Use Your Data
We use the collected data to:
- Process and extract data from invoice images using optical character recognition (OCR) and AI.
- Maintain accurate financial records and generate VAT returns.
- Send confirmation and follow-up messages via WhatsApp.
- Provide customer support and improve our service.
4. Data Storage and Security
Your data is stored securely using industry-standard encryption at rest and in transit. We use encrypted cloud storage for invoice images and a secure relational database for financial records. Access is restricted to authenticated personnel only.
5. Third-Party Services
We use Meta’s WhatsApp Cloud API to send and receive messages. WhatsApp message content is processed in accordance with Meta’s Business Messaging Terms. We do not sell or rent your data to third parties.
6. Data Retention
We retain your financial data for as long as your account is active or as required by UAE tax law. Invoice images are retained to support record-keeping requirements and are deleted upon account closure unless legally required to be kept longer.
7. Your Rights
You have the right to access, correct, or delete your personal data. To exercise these rights, contact us using the details below. We will respond within 30 days in accordance with UAE data protection regulations.
8. UAE Law Compliance
This Privacy Policy is governed by the laws of the United Arab Emirates, including the Personal Data Protection Law (PDPL). We comply with all applicable UAE regulations regarding the processing and protection of personal and financial data.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
privacy@myhisab.ae