1. Information We Collect

When you use Hisbuu, we collect information necessary to provide our driver operations platform. This includes:

Account Information: Name, email address, phone number, company name, and role designation when you register as an admin or driver.
Driver KYC Data: Civil ID details, driving license information, vehicle registration data, and associated document uploads as required for driver onboarding and compliance.
Operational Data: Daily submission records, order counts, cash collection amounts, deposit screenshots, bank deposit references, and reconciliation data.
Financial Data: Payout calculations, adjustment records, earnings data uploaded from partner platforms, and bank statement information used for reconciliation.
Asset Records: Equipment assignments, uniform tracking, and asset status information linked to individual drivers.
Usage Data: Login timestamps, IP addresses, browser information, and platform interaction patterns to maintain security and improve service quality.

2. How We Use Your Information

We use the information we collect to:

Provide and operate the Hisbuu platform, including driver management, submission tracking, reconciliation, and payout processing.
Verify driver identity and compliance through KYC workflows.
Generate reports, dashboards, and analytics for operational decision-making.
Send operational notifications via email, SMS, or WhatsApp (submission reminders, payout alerts, document expiry warnings).
Provide customer support and respond to your inquiries.
Maintain platform security, detect fraud, and prevent unauthorized access.
Improve our platform features and user experience.

3. Data Storage & Security

Your data is stored on secure servers with industry-standard protections:

All data is encrypted in transit using HTTPS/TLS protocols.
Uploaded documents are stored outside the public web directory with access controls, using Bunny CDN for secure and fast global delivery.
Database access is restricted to authorized services only, with parameterized queries to prevent injection attacks.
Automated daily backups ensure data recoverability with 30-day retention.
Role-based access controls ensure users only see data relevant to their function.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

With your organization: Data submitted by drivers is accessible to authorized admins within the same tenant/organization.
Service providers: We use third-party services for CDN storage (Bunny CDN), messaging (WhatsApp Business API), and hosting infrastructure. These providers process data only as necessary to deliver their services.
Legal requirements: We may disclose information if required by law, regulation, or valid legal process.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Operational records (submissions, reconciliation data, payout history) are retained for the duration of your subscription plus 12 months for accounting and compliance purposes. Upon account termination, you may request complete data deletion, which we will process within 30 business days.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate information.
Request deletion of your data (subject to legal retention requirements).
Export your data in a machine-readable format.
Object to or restrict certain processing activities.

To exercise any of these rights, contact us at the email provided below.

7. Cookies & Analytics

Hisbuu uses essential cookies for session management and authentication. We do not use third-party advertising cookies or tracking pixels. Minimal analytics data may be collected to understand platform usage patterns and improve performance.

8. Multi-Tenant Data Isolation

Hisbuu operates as a multi-tenant platform. Each organization's data is logically isolated — admins and drivers from one organization cannot access data belonging to another. White-labeled deployments maintain the same strict data isolation.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For significant changes, we will notify active account holders via email.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@hisbuu.com
Company: Dhofar Digital