MIISAAN by Hawlsame
Sign inGet started
Draft

Privacy Policy

Last updated: 7 October 2026

This page is a draft. The text below is the working version and is being reviewed before sign-up opens. Until then it is not a binding statement.

1. Who is responsible

Hawlsame Technologies, Hargeisa, Somaliland, support@miisaan.com ("we"). We decide how the data of our own users (the people who sign in to Miisaan) is used. For the business data our customers enter (their customers, suppliers and transactions), our customers decide, and we process it on their behalf (section 4).

2. What data is processed

  • Account data: name, email address, phone number if you give it, the password in protected (hashed) form, the role and rights in your company, sign-in times.
  • Business data you enter: your customers and suppliers (names, phone numbers, addresses if you enter them), sales, payments, expenses, stock, cash, documents, notes.
  • Subscription data: the plan, the period, payment reports with amount, currency, payment method, reference and date. We do not see or store your wallet or bank passwords.
  • Technical data: logs of requests and errors, security and audit records (who did what and when). We use IP addresses only to limit repeated sign-in, sign-up and password-reset attempts. We do not store them in readable form: they are kept in memory only, or as a one-way hash. Our hosting provider may keep standard server logs.
  • Messages: emails we send you (confirmation, password reset, notices) and the support messages you send us.

3. Purposes and legal basis

We use this data to provide and secure the service (create your account, let you sign in, keep your books), to manage the subscription and payments, to send you the messages the service needs, to give support, and to find and prevent misuse. We do not use it for advertising and do not sell it. We process it because it is needed to carry out the agreement with you, and where the law requires a further basis, because we have a legitimate interest in running a safe and reliable service. If you use Miisaan from outside Somaliland, the law of your country may give you additional rights; these terms of use do not limit them.

4. Processing on behalf of customers

You are responsible for the data about your own customers and suppliers: you decide what to enter and must have the right to do so. We process it only to provide Miisaan to you and follow your instructions given through the service. We do not use it for our own purposes. Companies are kept apart: users of one company cannot see another company's data. Inside a company, the owner decides who sees what.

5. Storage and security

The data is stored in a database operated for us by Supabase in Frankfurt, Germany (EU), and the application runs at Hostinger. We use Resend to send emails. These providers process data for us and may only use it for that. Connections are encrypted (HTTPS). Passwords are stored only as hashes. Access to the data is limited by roles and checked in the database itself. Our staff can look at customer data only through a support session: it needs a stated reason, is limited in time and is recorded, and you can see it in your company's audit log. No system is completely secure; we will inform affected customers without delay if we learn of a breach that puts their data at risk.

6. Retention and deletion

We keep your data while your account is active. If an account is locked, we keep it for a limited time so that you can come back: 60 days after the lock for accounts that never paid, and 180 days after the lock for accounts that paid at least once. We tell the owner by email at least 14 days before the data is deleted. Then the company's data is deleted completely. We keep a short record that the deletion happened, and the payment data (amount, currency, method, reference, date, without names and phone numbers) for 24 months to settle disputes. Deleted data can remain in backups until the backup period of our database provider ends. You can ask us to delete your account earlier at support@miisaan.com.

7. Your rights

You can ask us to tell you which of your data we hold, to correct it, to delete it, to give you a copy, and to stop using it where we have no further need. Business data about your own customers: please address their requests to yourself as the responsible party; we will help you find and export the data. To use a right, write to support@miisaan.com. We answer within 30 days. If you think we handle your data wrongly, please tell us first so that we can put it right. Other rights may follow from the law that applies to you.

8. Contact

Hawlsame Technologies, Hargeisa, Somaliland, support@miisaan.com.