Hesabdar AIRoles
The business determines purposes and whose personal data it enters and ensures a lawful basis. The Hesabdar AI operator processes it technically for the selected service, documented instructions and legal duties. Separate operator purposes for account and payment data are described in the Privacy notice.
Scope and duration
Scope covers entered documents, counterparty contacts, staff and payroll records, bookings and sales. Processing is limited to the service and separately justified legal retention. Do not enter unnecessary or unlawfully processed special-category data.
Confidentiality and safeguards
The operator must limit access to necessary authorized people, maintain confidentiality duties and apply technical and organizational safeguards. The business manages passwords, roles, staff devices and the links it creates. Required grounds for service providers and external transfers must be established separately.
Instructions and requests
An authorized owner can request export, correction, access revocation or erasure at admin@hesabdar.site. Customer and staff requests should be directed to the correct business, authority checked and addressed lawfully. Unlawful instructions must not be followed.
Incidents and service end
On a breach, operator and business should cooperate to contain risk and meet applicable notification duties. At service end, the business should obtain exports and the operator should address return, erasure and lawful archival requests. Required statutory record retention remains applicable. These terms do not replace separately required formal consent or system registration.
Annex A: categories and operations
Subjects may include staff, customers, supplier representatives and booking guests. Data includes names/contact details, business identifiers, accounting records, payroll, attendance, sales and appointments. Operations include intake, storage, calculation, display, authorized sharing, export, correction and deletion. Do not supply extra data for unused functions.
Providers, instructions and evidence
Provider roles are described in the external services notice. The operator ensures appropriate confidentiality and safeguards with providers receiving access. Authority is checked for instructions and requests. Customers may request explanations of safeguards without exposing other customers’ data or server secrets. New bulk uses require separate agreement.