Account, sessions and acceptance records
Account information is retained as needed for service. Sessions normally last 7 days and are revoked on sign-out. Password reset links are single-use and valid for 30 minutes. Expiry ends authorization, not necessarily every technical trace. Acceptance records retain the version, language and server time; legal evidence needs are assessed separately.
Business and staff records
Accounting records, attachments, bookings and attendance are managed according to business instructions and applicable retention duties. There is no single automatic purge period for every category. The business identifies the lawful purpose and removes unnecessary personal data. Legally retained data is restricted to that purpose.
Requests and end of service
Request export, closure or deletion from an authorized account at admin@hesabdar.site. Identify the business, data category and action. The operator checks authority, other members’ rights, export format and mandatory retention exceptions, then communicates a plan. Subscription cancellation, member removal, record archiving and irreversible deletion are separate actions.
Devices, backups and external recipients
Offline drafts and demo samples may remain in the browser; check shared devices after use. Clearing browser storage can destroy unsynced work. Deleted server data may remain in older backups; completed deletions must be reapplied after restoration. Copies already sent to Telegram, email or partners are managed separately with those recipients.