1. Introduction
Hisaabii Salon is an online system for salons and barbershops in Saudi Arabia. It covers services, appointments, checkout, ZATCA e-invoicing, customers, staff and reports. This Privacy Policy explains what information we collect, how we use it and who we share it with when you use our web and desktop applications and related services (the “Service”).
This policy is for salon owners and their staff who sign in to the Service. If you are a customer of a salon that uses the Service, the salon decides what it records about you, and we process that information on the salon’s behalf as described below.
By creating an account or using the Service, you acknowledge the practices described here. If you do not agree, please do not use the Service.
2. Information we collect
Account data: your name, email address, password (stored in hashed form), language preference and account settings.
Salon profile data: the salon’s name, VAT number, commercial registration number, address, logo, contact details and the settings you choose.
Records you create in the Service: services and prices, appointments, invoices and credit and debit notes, coupons, offers and loyalty points, stock, and the reports built from them.
Information about your customers that you or your staff enter: names, mobile numbers, email addresses, visits, purchases and loyalty points. You decide what to record, and you are responsible for having the right to record it.
Information about your employees that you enter: identity and residency details, visa dates, roles, salaries, advances, payments and any documents you upload.
Technical and usage data: device and browser information, IP address, the cookies needed to keep you signed in, and diagnostic logs needed to run and secure the Service.
Payment data: if your salon switches on online payment, card payments are handled by the payment provider (Moyasar) through your salon’s own account with them. Hisaabii Salon does not receive or store full card numbers.
3. How we use information
We use information to provide and improve the Service: signing you in, running your salon’s account, creating invoices and receipts, reporting invoices to ZATCA when you issue them, sending the notifications and emails you ask for, support, security monitoring and fraud prevention.
We process information about your customers and employees only to provide the Service to your salon and on your instructions. We do not sell it, and we do not use it to advertise to them.
We may use aggregated or de-identified information that cannot reasonably identify you or your customers for analytics and to improve the product.
4. Who we share information with
ZATCA (Fatoora): when you issue an invoice or a credit or debit note, the Service sends it to ZATCA’s Fatoora platform, as Saudi e-invoicing rules require. That platform is run by the Zakat, Tax and Customs Authority under its own terms.
Hostinger email (SMTP): delivery of emails such as verification codes, team invitations, alerts and documents you send through the Service.
Automatic translation (Google Gemini): when you type text in a field that has an English and an Arabic version, such as a service name or your salon’s address, that text may be sent to the translation service to suggest the other language.
Moyasar: only if your salon switches on online payment, and through your salon’s own Moyasar account.
Hosting, database and infrastructure providers that run the Service. We require every provider to handle information only as needed to provide its service to us.
5. Data retention
We keep account and salon data while your account and salons remain active, and for a reasonable period afterwards to meet legal, accounting, dispute and security needs.
Invoices and related tax records are subject to the retention periods that Saudi tax rules place on your business. Those obligations are yours as the taxpayer. The Service stores the records you create so that you can run your salon and show compliance, but deleting an account does not remove your duty to keep tax documents. Contact us if you need an export before closing a salon.
6. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, protect your account, remember your language and run the essential parts of the Service. If you block these cookies, signing in and core features may stop working.
7. Your rights and choices
Depending on the law that applies to you, you may ask to see, correct or delete the personal data we hold about you, or object to certain uses of it. Salon owners can also update most salon, customer and staff data directly in the Service.
If you are a customer of a salon that uses the Service, please contact that salon first: it decides what is recorded about you. We will help the salon answer your request.
Some records cannot be fully erased where we must keep them for legal, regulatory or security reasons. We will explain any limits when you make a request.
8. Security
We apply administrative, technical and organisational measures designed to protect information, including access controls, encryption in transit and monitoring. No method of transmission or storage is completely secure. You are responsible for keeping your password safe and for giving each member of your team only the access their role needs.
9. Children’s privacy
The Service is a business tool for salon owners and their staff. It is not directed to children, and children may not create accounts.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will change the “Last updated” date and, when a change is material, tell you through the Service or by email.
11. Contact
Privacy questions: privacy@hisaabii.com