How the program works

Version 1.21   Changed: we added the log of users’ actions within the company account.

Tasaheel Accounting is a program that runs inside the browser. The accounts, entries, statements and reports are calculated on your device, and the company’s data is saved on the storage server, with a copy kept by the browser on the device for fast display. Saving needs an internet connection, and only the point of sale (cashier) sells offline: its sales are saved on the device until the connection returns, and are then uploaded to the server.

The program does not send your accounting data to anyone other than the storage server, except what you enable yourself (such as the Authority integration or the AI assistant), as described below.

What is sent to us?

Server storage (the cloud copy)

Each company’s data is stored on the storage server, which is the master copy of its data: every device you open from takes from it and saves to it. This starts once you create an account and agree to this policy from inside the program.

• What is uploaded: the company’s full data — the chart of accounts, the entries, customers and suppliers, assets, inventory, documents and invoices, payroll, projects and budgets, attachments and images, and the program’s users with the fingerprints of their passwords. It is uploaded in two ways: synchronisation of every change as it happens, and full backups of the company.
• Where: a server dedicated to us at Hetzner in Helsinki, Finland (European Union) — that is, outside the Kingdom and outside Egypt.
• Protection: the connection is encrypted (HTTPS), and the copy is stored encrypted (AES-256) with a key held by the provider, and the server verifies that the file returned to you is byte for byte the same as the one you uploaded.
• Who can open it: you, from your account, and our support team when you ask for help or for a specific technical reason. Every opening is logged (who · when · the reason) before the data is opened, and you can see this log from your account. We do not open it for any other purpose, and it is not sold or shared.
• For how long:
  • Synchronisation: the server keeps only the current state of each record — without a history of old versions. When you delete a record, only its number remains (without any data) so that your other devices know it was deleted.
  • Full backups: the last 3 copies, one copy for each day of the last 7 days, and one copy for each week of the last 5 weeks — older ones are deleted automatically.
  • As long as your subscription is active (or the free trial period — one month unless the code specifies otherwise): both remain until you delete them yourself.
  • If the trial or subscription ended and you did not subscribe: your data stays on the server one full year from the end of the free trial, or 6 years from the end of the paid subscription (adding and editing are locked, and downloading the encrypted copy, exporting reports and deleting are available), followed by a 30-day grace period, after which it is all deleted (the synchronisation and the copies) and it disappears from the backups within 14 days.
  • Notice before deletion: we start notifying you 90 days before deletion at your registered email address (90, 60 and 30 days before deletion), and one week before deletion a final notice with a download link for your data. If you subscribe at any time before deletion, your data comes back as it was. Deletion does not happen before all these notices have reached you on time; if a notice is delayed, the deletion is delayed with it. (Clause 2C of the Terms.)
• Deletion: when you delete the company from the server (from inside the program), the synchronisation data and all the backups are deleted immediately from the server’s database, and they disappear from the server’s backups within 14 days.
• Activity log: the server keeps a log of the company's operations showing who performed each operation, when, and its type (adding, editing or deleting, and the document type), without any of the data's content (no amounts, names or text). This log is kept for 10 years, even after the company is deleted, because it is evidence of the integrity of the books, and then deleted automatically. The data itself is deleted as described above.
• The server’s own backups: they are taken every day, encrypted, and stored on the server in Finland, with a copy at Cloudflare (the R2 service) inside the European Union only — and the decryption key is not stored next to them. Each copy is deleted automatically after 14 days.
• More than one device: several users and devices can save at the same time; the server records each save in order.

Data specific to some features

Document link for a customer: when you create a link for a posted invoice, a statement or a receipt, a read-only copy of that document alone is uploaded to the storage server: the header, the lines, the totals, the QR code data and your company details in the letterhead — without your books, your account numbers or any other party. You see the copy before creating the link, as the customer will see it. Anyone with the link can open it until it expires or you cancel it, and we record how many times it was opened and when it was last opened. A link lasts 90 days at most, and it is deleted from the server 30 days after it expires or is cancelled, whichever comes first.

Connecting external stores and points of sale: when you enable a connection between your company and an external service (such as an online store or a point-of-sale system), its orders and notifications reach the storage server and the program then pulls them into your books. We keep the incoming messages and their delivery log on the server for 30 days, after which they are deleted automatically. What arrives from these services may include your store customers’ data (such as name and delivery address), so enable only what you need.

Location of a mobile sales rep: if you enable sales-rep tracking, the rep’s device sends its location to the storage server at most once a minute, and only during an open shift and within the day plan’s hours, after the rep agrees on their device, and they can withdraw that agreement at any time. A supervisor can request their current location. The coordinates are stored encrypted and are seen only by the account owner and whoever you give sales-rep supervision rights. After 90 days the coordinates and the off-route or no-signal alerts are deleted, and a daily summary without locations (number of points, distance, first and last time) is kept for one year and then deleted. You are responsible for telling the rep about the tracking before enabling it.

Attendance from the program: if the company allows it and the employee allows location, the device’s location is saved once, at the moment of pressing clock-in or clock-out (no continuous tracking), with the record in the company data. If permission is refused or the location is slow, the attendance is recorded without it.

Internal chat and tasks: if you enable the chat inside the program, messages and their attachments (documents and reports from the program, and files users upload) and the tasks linked to them are saved with your company data on the storage server, with the same protection as your company data, and travel with the company's synchronisation. An attachment that points to a document or report in the program opens with the recipient's permissions: if they are not allowed to see it, it is not shown to them. Uploaded files have a maximum size. Messages are between users of the same company only and do not reach anyone outside it. Each user sees only the conversations they take part in, and the account owner sees all conversations in the company. Messages and attachments are not deleted automatically: they remain as long as your company data remains, and are deleted with it under the company data retention period. Only the owner can delete them, deliberately. Notifications of new messages appear inside the program only.

Calendar sync with booking platforms: if you turn it on, we keep on our server a list of the booked days for each unit (dates only, without guest names or amounts), to publish it at the calendar link you add to the platform. We also read, through the website's server, the platform calendar link you add, to bring its booked days into your program, without storing its content. The list is deleted when you stop the sync, and past days are deleted automatically.

Preventing repeat free use: we keep a "fingerprint" of your email that cannot be turned back into the address, together with the name of each function you used for free and the date you used it, so we know whether the free use of that function was already taken, even if you delete your account and create another. This data is kept for one year after your last use, and then it is deleted.

Trial code

If you enter a free trial code, the following is recorded with us:

• The code · the company’s name and its number in the program · the email and mobile number if you wrote them
• The time of use and the last day of the trial
• The approximate country and city and the browser type — without the IP address

Why: so that we can open the trial period for you and contact you if you would like to continue. It is stored on the Cloudflare service that hosts the website, and only the program owner sees it. For how long: two years from the code’s last use or the end of its period, whichever is later, as proof of use, and then it is deleted.

Users’ action log

We record users’ actions within the company account (the screen, the type of action, the record number, and the date and time) for oversight purposes. Only the general manager can view them, and the content of the records is not logged. Screen-opening logs are kept for 12 months.

Subscription data and consent record

When you subscribe or agree to the terms or to this policy, the program sends to our server:

• Subscription data: your name · the business name · email · mobile · username · plan
• Sign-up source: when you create your account from the website pages, we keep with it how you reached us: the campaign source, medium and name if you came from a campaign link, the name of the website you came from (without the page), and the first page you opened with us; so we know which channels help subscribers. It is not sent to Google or to any party, and it is kept for the subscription data period. If you answer "How did you hear about Tasaheel?", enter a partner code or arrive through a partner link when registering, we keep your answer and the code with your account, to know which channels help and to calculate the commission of the partner who referred you; they are kept for the same period as the subscription data.
• Signing in with Google or LinkedIn (when available): if you choose to register or sign in with your account on one of these services, we receive from it only your email address (after the service confirms it is yours) and your name, to verify your identity and link it to your account with us. We do not receive your password with them, we do not keep any sign-in token from the service, and we do not access any other data in your account with them. We keep with your account the name of the service and the time of your first and last sign-in with it, and we send a message to your email the first time you sign in with each service. Signing in with your password always remains available.
• Personal referral commission (when available): if a customer refers you by entering your email when registering, we link the referral to your account with us without telling them that you have an account. If you ask for your commission to be transferred, we keep your bank account number (IBAN) and the beneficiary name encrypted; only the person responsible for the transfer can see them when approving it, and every view is logged. They are deleted one year after the last transfer, or immediately if you ask, and we keep only the last four digits of the account number in the transfer record.
• Consent record: the version number of the text you agreed to and its «fingerprint» (which proves the text letter for letter) · the time of consent · the program version
• And with the request: the approximate country and city and the device and browser type — without the IP address

Why: so that we can manage your subscription and contact you about it, and be able to prove which text exactly you agreed to if a dispute arises. We do not use it for advertising, and it is not sold or shared with anyone.

The program sends the business name as you wrote it, and its registration date, to our server when the company is registered and whenever you change it, so that it is shown in your account with customer service; no accounting data is sent with it. Customer service also sees, next to it, your name as you registered it in your account on the server; nothing new is sent or stored for this.

For how long: the subscription data as long as your subscription is active, and after it ends it remains for the same period as your company’s data (above, in «Server storage») so that we can notify you before deletion, after which it is deleted. The consent record is kept as long as your subscription is active, then for 6 years after the last use of your account, because it is legal proof of what you agreed to and when, and then it is deleted. (This is the subscription and consent data only, not your books.) Anything the law requires us to keep is excluded from deletion, including the tax invoices we issue to you for the subscription and the related log of actions on your subscription (activation, renewal, suspension, special prices, and who carried them out), which are kept for the statutory period: at least six years from the end of the tax period in which they were issued. If the internet is down at the time of consent, the program continues normally, and the record waits on your device and is sent as soon as the internet comes back.

Security alerts and devices: security alerts (such as suspicious sign-in attempts) are kept with the account email, the IP address and the alert type for one year to investigate repeated attempts, and are then deleted. We keep the last date your company’s program was opened and how many times it was opened, and the approximate country for one year from the last opening, and then delete them; the fingerprint of your company key (which reveals neither the key nor any personal data) stays as long as the company exists.

Support messages and requests (Write to us · Ask me · Request a quote)

If you send us a message or a request, the following is recorded with us:

• The name and the business name if you wrote them · the mobile number or email we reply to you on · the text of the message · the screen, the program version and the language · and the time it was sent
• The IP address is not saved; we save only an encrypted fingerprint of it, and a random device number not linked to you, in order to limit nuisance messages

Why: so that we can reply to you and follow up your request. They arrive at the info@ mailbox, only the Tasaheel team sees them, and they are stored on Cloudflare.

For how long: one year after the request is closed, and you can ask for them to be deleted before that at the contact email.

Integration with the Zakat, Tax and Customs Authority (optional)

• Optional: it works only when you enable it yourself. If you are required to use e-invoicing, enabling it is your responsibility.
• What is sent: the invoice itself (the seller, the buyer, the items, the amounts, the tax, the unique identifier and the signature) to the Authority’s platform in the Kingdom of Saudi Arabia, through our server (the browser cannot talk to the platform directly).
• What is saved: the Authority’s approved response is saved with your company’s data for the same periods as above.
• Your business’s signing key and stamp certificate:
  • If your company runs on your device: the key is saved encrypted on your device so that you can sign while offline, and it is not included in the backup — if you restore a copy on a new device, you redo the integration with a new code from the Authority.
  • If your company runs on the server: the private key and the stamp certificate (CSID) are created and saved encrypted on Tasaheel’s servers. They are never sent to your device or to any other party, and they are used only to sign your invoices and send them to the Authority. The integration is completed only with a one-time code (OTP) from the Authority that the business owner enters personally.

Error diagnostics data

If an error happens in the program or it freezes, the program sends us a small report by itself so that we can fix it without you having to report it. The report contains only:

• The screen where the error happened and the program’s version
• The technical error text and where it occurred in the program’s code, and how long the freeze lasted if it froze
• The last steps in the program before the error (the names of screens and buttons only)
• The browser and operating system type (such as Chrome on Windows)
• A random device number not linked to your account or your company, the type of address the program was opened from, and the approximate country

The report is cleaned before it leaves your device: it contains no names, numbers, amounts, entries or company data, no personal data, and not the IP address (we use a fingerprint of it that changes every hour only to limit the number of reports). Only the program owner and the developers see it, to fix faults, and it is deleted automatically after 90 days.

You can turn the sending off from the company settings → «Send error reports automatically».

Website visit log

Every time you open tasaheelerp.com while connected to the internet, the website records one line about the visit itself — not about what is inside the program:

• The time of the visit
• The approximate country, region and city (not your GPS location), and the internet provider
• The page you came from (if you came in through a link)
• The device type, operating system and browser, and the device model if the browser sends it
• A random number in a cookie so that we know the visit is from the same browser

Your IP address is not stored in this log. Cloudflare uses it at the moment the request arrives to determine the approximate country and city, and we record only that result. What links two visits together is the random number in the cookie, and if you clear the browser’s cookies a new number is generated.

The storage server uses the IP address to protect your account from password guessing (it locks sign-in after many failed attempts), and saves it with: your sign-in session (until it ends — 30 days at most), the failed sign-in attempts (7 days), and your consent record (it stays with the record as proof that you agreed and when). We do not use it for any other purpose.

The purpose: to know who uses the website and from where, so that we can improve and protect it. Only the program owner sees this log; it is not sold or shared, and it is deleted automatically after 90 days. Your books and accounting data are not part of it.

Website visit measurement (Google Analytics) — only with your consent

• On the website’s public pages only (home, pricing, sectors and guides), not inside the program, we use Google Analytics to learn how visitors reach the website and which pages help them.
• It works only after you agree in the consent bar shown on your first visit. If you decline or ignore the bar, nothing is loaded from Google.
• What is sent: the pages you visited, the source of the visit (such as a search engine or an advertising campaign link), the device and browser type, the approximate country or city, and one event when a free trial is started from the website. Not sent: your name, email, number, business name or anything of your accounting data.
• The data is received by Google (based in the United States), so it is transferred outside the Kingdom. We have turned off sharing it with Google’s advertising services, and it is not used to show you ads.
• Google keeps it for two months and then deletes it, and we see only aggregated figures.
• You can withdraw your consent at any time from the «Measurement settings» link at the bottom of every page; measurement stops and Google’s cookies are deleted from your browser.

External services

The program does not use any advertising tracking service. On the website’s public pages only, we use Google Analytics with your consent (see «Website visit measurement» above). The website is hosted on Cloudflare, which determines the approximate location from the IP, and collects general visit statistics (Cloudflare Web Analytics — without cookies and without knowing who you are). The storage server is at Hetzner (Finland).

If you choose to sign in with Google or LinkedIn, the service’s own window opens and handles you under its policy; we send it nothing from your data with us.

Necessary system messages (such as password recovery and inviting a new user) are sent through an email provider, Resend (based in the United States, with sending from the European Union region); this data is transferred outside the Kingdom. It receives only your email address and the text of the message, and does not receive anything of your accounting data.

Sending documents by email from the program: when you use the service for sending documents by email, once it is available, if you send a document by email from within the program (such as an invoice, a statement or a quotation), the file and the text of your message are sent through the same provider to the address you choose, in your company’s name, and replies go to your account’s email. In this case the provider receives the content of the document itself, and it is transferred outside the Kingdom. This happens only when you choose to send. We do not keep the file or the message text; we keep only a sending log with its time, the document number, its size and the result, and a fingerprint of the recipient’s address, encrypted with a secret key we hold, that cannot be traced back to the address without that key, for 90 days, after which the log is deleted automatically.

The AI assistant (optional): it works only after you agree once from inside the program. When you ask it, your question and a summary of the figures needed for the reply (together with any image or file you choose to attach, such as a photo of a supplier invoice) are sent through our server to the AI provider Anthropic in the United States to produce the reply — that is, this data is transferred outside the Kingdom, and this is with your consent before the first use. Under their commercial terms they do not use it to train their models, and they usually delete it within 30 days (and they may keep it for up to two years if it is flagged as a violation of the usage policy or for a legal obligation). We do not store the question, the reply, the figures or the attachment — we store only the number of times, the volume of use and its cost for each company, and the attachment’s type and size. And if you enter the address of another service yourself, the text goes directly to that address. We keep the number of times the smart assistant is used each day (without the content of the conversations) for thirteen months, to calculate points and review them, and the identifier of the device the assistant was used from each day for ninety days, to enforce usage limits.

Backups

We keep periodic backups of your company’s data on the server (see «For how long» above), and you may export a copy at any time.

• To export a copy: «Backup» from the settings screen, and keep it off the device if you wish.
• If you use the program from the website, install it as an app and always open it from the same address — each address (such as with and without www, or the trial instance) has separate storage in the browser.

Cookies

There are no advertising cookies. The website sets one cookie named tv containing a random number for the visit log (it lasts one year). If you agree to visit measurement, Google sets cookies named _ga and _ga_… (they last 13 months), deleted when you withdraw consent. The program uses the browser’s local storage for things like the chosen language, the last username and your sign-in token for the storage server — and all of it is on your device.

Your rights over your data

• To know what we hold about you and get a copy of it — and you can download your company’s copies from your account at any time.
• You have the right to access your personal data we hold and to obtain a copy of it; it is provided to you under the Personal Data Protection Law, independently of the fees for the full data migration service.
• To see who on our team opened your copies, when and why.
• To correct any incorrect subscription data.
• To delete your company’s copies from your account yourself, or request deletion of your whole account — we may keep only the consent record until the end of the retention period because it is legal proof for both parties.

Send your request to the contact email below, and we reply within 30 days.

Changes to the policy

If this policy changes, we notify you at your registered email address or inside the program, and the date below is updated. If the change affects server storage, uploading stops until you agree to the new version.

Who is responsible for your data, and contact

The party responsible for the account and subscription data, the consent record, the server storage copies and the visit log: Tasaheel ERP company.

Contact email: [email protected]
Policy last updated: 2026-10-25