Privacy Policy
This policy explains how the operator of Smart Accounting collects, uses and protects personal data, in line with Qatar’s Personal Data Privacy Protection Law No. 13 of 2016.
1. Who is responsible for the data
- Your account and your staff accounts: we are responsible for them.
- Your shop’s customer and supplier data that you enter: you are responsible for it, and we process it on your behalf and only on your instructions, to provide the service.
2. Data we collect
- Account data: name, email and mobile, the shop name, commercial registration and address, and your password stored in a hashed form that cannot be recovered.
- Operating data you enter: products, prices, stock, invoices, payments and journal entries, and the names, mobiles and emails of your customers and suppliers if you enter them.
- Technical data: IP address, sign-in times and attempts, and an audit log of important actions and who performed them.
- When you sign in with Google: your name, email and account identifier only.
3. Why we use it
- To provide the service and run your account.
- Security: protecting sign-in, preventing fraud and abuse, and investigating problems.
- Subscriptions and billing, and essential account messages (email confirmation, password reset, expiry reminders).
- Support when you contact us.
We do not sell your data or use it for advertising, and we do not look at your shop’s data except to support you at your request, to protect the service, or when the law requires it.
4. Who we share it with
With providers that help us run the service, and only as much as needed:
- the hosting provider that stores the database and files, whose servers are outside the State of Qatar;
- the email service used to send account messages and emailed receipts;
- the smart-assistant provider when you use it: it receives your question and the report summaries needed to answer, nothing more;
- the payment gateway when you pay online — card details are entered with the gateway directly and never pass through us;
- Google, if you choose to sign in with it, and the fonts and icons your browser loads from Google Fonts and cdnjs;
- public authorities when the law requires it.
5. Your customers’ receipts
- Emailed receipts are sent in your shop’s name to the address you enter; WhatsApp receipts are sent from your own device and account.
- A receipt link is secret and hard to guess, and anyone who has the link can open it.
6. Cookies
We use essential cookies only: your sign-in session, POS device registration, and theme and language. No advertising cookies and no tracking tools.
7. How long we keep it
- We keep your data for as long as your account exists.
- When a shop’s data is deleted it is removed from the database immediately and remains in backups until they are replaced, within 30 days at most.
- We keep the record of subscriptions and payments between us, as it is a financial record, and the record of the deletion itself.
8. How we protect it
Encrypted connections (HTTPS), hashed passwords, each shop’s data kept separate from all others, role-based permissions, lock-out after failed sign-in attempts, and an audit log of important actions.
No system is perfectly secure; if a breach affects your data we will tell you without delay what happened and what we have done.
9. Your rights
- View and correct your data inside the app.
- Get a copy of it by exporting.
- Delete the shop’s data permanently (the owner, from Settings), or ask us to delete your personal account.
- Object to or ask about any processing by contacting us; we reply within 30 days.
10. Changes and contact
We will tell you about any material change to this policy before it takes effect. Contact: webregister@gmail.com.