Privacy Policy

Who we are

Hesabnote (“Hesabnote”, “we”, “us”) operates the website hesabnote.com and the Hesabnote accounting service for travel and ticketing agencies, including the Hesabnote browser extension. This policy explains how we handle information when you visit our website, request an account or use the service.

Information we collect

Account and agency details you give us when you request an account: agency name, contact person, email address, phone number, address, country and similar business details.
Staff user details: names, email addresses, roles and section permissions of the people your agency adds. Passwords are stored only as secure hashes.
Business records you enter: sales, tickets, passenger names, PNRs and routes, customers, payments, B2B supplier accounts, cash and bank accounts, expenses and journal entries.
Technical information: IP address, browser type, pages requested and timestamps, recorded in server logs to keep the service secure and working.

How we use information

To provide the service: store your records, calculate balances and produce your reports and invoices.
To review and approve agency account requests and to verify who is signing in.
To send service messages such as account approval, security notices and important changes.
To keep Hesabnote secure, prevent misuse and fix problems.
To improve the service, for example by learning the layout of B2B portal ticket pages so tickets are read correctly.

We do not sell your information, and we do not use your agency's records or your customers' details for advertising.

Agency data and your customers

The records your agency enters, including details about your own customers and passengers, belong to your agency. Each agency's records are kept separate and are visible only to that agency's own users. We process this data on your behalf and only to run the service for you.

Your agency is responsible for having the right to record its customers' information and for telling them how it is used, as required by the laws that apply to you.

Ticket capture and reading

When you press Send to Hesabnote, the extension sends the text of the ticket page you are viewing to your Hesabnote account so that the sale form can be filled in. It only does this when you ask it to.

Hesabnote first tries to read the page with its built-in reader.
If a portal's page layout is new or has changed, the page text may be sent to a trusted third-party processing provider to identify the ticket fields. The provider processes it only to return the result and is bound by confidentiality and data-protection terms.
To read future tickets quickly, Hesabnote remembers the layout of a portal's page (which labels hold which fields). These layout patterns may be shared to help other agencies using the same portal. Your passengers' details and prices are not shared with other agencies.

We share information only:

With service providers who help us run Hesabnote (for example hosting, email delivery and the processing provider described above), under obligations to protect it.
When required by law, or to protect the rights, safety and property of our users, the public or Hesabnote.
As part of a merger, acquisition or sale of the business, in which case this policy will continue to protect your information.

Cookies

We use only the cookies needed for the service to work: a sign-in cookie that keeps you logged in, a security cookie that protects forms against forgery, and a language cookie that remembers whether you chose English or Dari. We do not use advertising or third-party tracking cookies.

How we protect data

We use encrypted connections (HTTPS), hashed passwords, role-based access inside each agency and strict separation between agencies. No system is perfectly secure, so please use strong passwords, keep them private and remove staff who leave your agency.

How long we keep data

We keep your agency's records while your account is active, because accounting records must stay complete. If your account is closed, we delete or anonymise your data within a reasonable period, unless we must keep some of it longer to meet legal obligations or resolve disputes. Server logs are kept for a limited time.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain uses. Agency owners can view and correct most information directly in Hesabnote and download their sales records. For anything else, contact us and we will respond within a reasonable time. If a request concerns an agency's customer records, we will work with that agency to answer it.

Children

Hesabnote is a business tool and is not directed at children. Agencies may record passenger details for travellers of any age as part of their normal business.

Changes to this policy

We may update this policy as Hesabnote grows. We will change the date at the top and, for important changes, let agency owners know by email or in the app.

Contact us

Questions about privacy? Email support@hesabnote.com and we will be glad to help.