Privacy should be clear, practical and under your control.

Biloo is a business operating system developed and operated by Hisab Technologies in Addis Ababa, Ethiopia. In this policy, “Biloo,” “Hisab Technologies,” “we,” “us” and “our” refer to the entity responsible for the public website and the Biloo ERP service.

This policy applies when you visit hisabtech.com, request a demonstration, contact our team, create or manage a Biloo account, or use features that link to this policy. A separate customer agreement, data-processing agreement or implementation statement may provide additional terms for an organization using Biloo ERP.

Information you provide

• Contact details such as name, business email, telephone number and preferred contact method.
• Organization information including company name, sector, team size and operational requirements.
• Account details such as login identifiers, profile information and security preferences.
• Messages, demo requests, support questions, feedback and other communications.
• Billing and transaction references required to administer paid services. Complete payment-card details are handled by the applicable payment provider rather than stored directly by Biloo unless specifically stated.

Information generated through use

• Technical data such as IP address, browser type, device type, operating system, referring page and approximate region.
• Security and access events used to protect accounts, investigate errors and prevent abuse.
• Product interaction and performance information where analytics has been permitted or where collection is necessary to operate the requested service.
• Cookie and storage preferences, including whether optional analytics has been accepted or declined.

• Provide, maintain and secure the website, Biloo ERP accounts and requested business workflows.
• Respond to demo requests, support questions, implementation enquiries and account communications.
• Authenticate users, manage permissions, detect suspicious activity and protect service integrity.
• Process subscriptions, payments, billing records and service-related notices.
• Measure reliability, diagnose errors and improve navigation, content and product usability.
• Comply with applicable legal obligations, enforce agreements and respond to lawful requests.

We do not sell personal information. We do not use private customer business records for third-party advertising. Where we rely on consent for an optional activity, you may withdraw that consent without affecting processing that occurred before withdrawal.

Depending on the circumstances and the law that applies, we process information because it is necessary to provide a requested service or perform a contract; because we must meet a legal obligation; because it supports legitimate interests such as security, service improvement and customer support; or because you have provided consent for a specific optional purpose.

We balance legitimate interests against the rights and reasonable expectations of individuals. We use consent where required for non-essential storage or tracking technologies and provide controls to change that choice.

The public website may use browser storage, cookies or similar technologies. Essential technologies support security, maintain a consent record, remember display or language choices you request, and keep requested website functions working.

Optional analytics may be used to understand aggregate performance, page usage and navigation quality. Optional analytics is not required to browse the public website and should only be activated after the visitor permits it.

You may reopen the consent panel through the “Cookie settings” control in the website footer. You may also clear browser storage through your browser settings, although doing so may reset preferences.

We may share information with carefully selected providers that support hosting, authentication, database services, email delivery, monitoring, payments, customer support or security. Providers receive only the information needed for their role and are expected to protect it under contractual and legal obligations.

Information may also be shared with authorized administrators of the organization that controls a Biloo workspace, during a corporate restructuring with appropriate safeguards, or where disclosure is required by law, court order or a valid government request.

We do not disclose customer information to unrelated parties for their independent marketing.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, resolve disputes, meet legal obligations and enforce agreements. Retention periods vary by data type, customer instructions and regulatory requirements.

We use administrative, technical and organizational safeguards designed to protect information. These may include access controls, authentication protections, encrypted transmission, logging, backups, least-privilege access and operational review. No online system can be guaranteed completely secure, so users should protect credentials and report suspected misuse promptly.

Biloo may use cloud and technology providers operating in other countries. As a result, information may be processed outside the country where it was collected. We assess provider security and use appropriate contractual, organizational and technical safeguards based on the information and applicable requirements.

Customer-specific hosting, residency or transfer commitments should be documented in the relevant customer agreement or implementation statement.

Subject to applicable law and the role Biloo has in the relevant processing, you may request access to personal information, correction of inaccurate information, deletion, restriction, objection, portability, or withdrawal of consent.

For information held inside an employer’s or customer organization’s Biloo workspace, contact that organization first because it normally controls the business record and user permissions. We will support the organization where required.

To submit a privacy request, email mahir@hisabtech.com. We may need to verify identity and clarify the scope before responding.

The Biloo business service is not directed to children. We do not knowingly invite children to create business accounts or submit personal information through the public website.

We may update this policy when services, providers or legal requirements change. The effective date at the top of the page will be revised, and material changes may be communicated through the website, service or account contact details.

Privacy questions and requests may be sent to mahir@hisabtech.com or addressed to Hisab Technologies, Addis Ababa, Ethiopia.