Access and business isolation
The application applies account sessions, roles and server-side business data restrictions. Passwords are stored as hashes. Owners manage roles and revoke departing staff access. Shared credentials and unlocked terminals can expose access; device security and screen locking remain necessary.
Backup and recovery
Server backups and separately configured encrypted offsite backups are available. Frequency and last successful completion depend on configuration; a usable backup is not assumed automatically. Export critical data separately. Recovery should first be tested in isolation, with the business, restore point and authority to replace current data confirmed.
Incident reporting
Report suspected access, a lost device or misdirected data to admin@hesabdar.site with the subject “Security”. Include the time, affected function and a redacted screenshot. The operator contains the threat, preserves evidence, investigates impact and fulfils applicable notification duties. Do not attach passwords, tokens or customer databases.
Service levels and interruptions
No uptime percentage, 24/7 support or fixed recovery time is promised without a separate written service-level agreement. The operator investigates and communicates next steps and known recovery timing. Hosting, security and provider incidents may affect specific functions. This does not remove the operator’s responsibilities or liability for its fault.