Privacy Policy

Last updated: April 2026

1. Who is responsible for your data

The data controller for this website is:

Madeeha Hassan
Charlie Living, 10117 Berlin, Germany
hassan.madeeha1989@gmail.com

This privacy policy applies to the Hisaab landing website at gethisaab.com (currently in pre-launch).

2. What data we collect and why

Waitlist sign-ups

When you join the waitlist, we collect your email address. We use it solely to notify you when Hisaab launches and, occasionally, to share relevant product updates.

Legal basis: Your consent (GDPR Art. 6(1)(a)). You can withdraw this at any time by emailing us or clicking the unsubscribe link in any email we send you.

What we do not do: We will never sell your email address, add you to third-party mailing lists, or send promotional content unrelated to Hisaab.

Server logs

Our hosting provider (Vercel) automatically records standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used to keep the website running and diagnose technical problems.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) in operating a secure and functional website.

3. Third-party services

Vercel (hosting)

This website is hosted on Vercel Inc. (US). Vercel processes data under standard contractual clauses (SCCs) as required by GDPR for transfers to third countries. See Vercel's privacy policy.

Supabase (waitlist database)

Waitlist email addresses are stored in Supabase, a database platform. Supabase offers EU-region data storage. See Supabase's privacy policy.

Bunny.net (fonts)

We load web fonts (DM Sans, Space Grotesk, Nunito) from Bunny.net, an EU-based font delivery network. No personal data is transferred to third-party font providers. See Bunny.net's privacy policy.

4. Cookies and analytics

We use cookies only with your explicit consent.

Essential cookies

We store your cookie preference in your browser's local storage (key: hisaab_consent). This is a functional record, not a tracking cookie, and does not require consent.

Analytics cookies (consent required)

If you click "Accept analytics" on our cookie banner, we load an analytics tool to understand how visitors find and use Hisaab — which pages they visit, where they click, and how they navigate the site. This data is aggregated and used only to improve the product.

You can withdraw your analytics consent at any time by clicking Cookie preferences in the footer of any page.

5. How long we keep your data

• Waitlist emails: Until you unsubscribe or request deletion, or up to 12 months after Hisaab launches (whichever comes first).
• Server logs: Up to 30 days, as determined by Vercel's infrastructure.
• Analytics data: Per the analytics provider's retention policy (typically 12–24 months). You may request deletion directly from us.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict how we process your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email hassan.madeeha1989@gmail.com. We will respond within 30 days.

Right to complain

You have the right to lodge a complaint with the supervisory authority responsible for Berlin:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Friedrichstr. 219, 10969 Berlin
datenschutz-berlin.de

7. Contact

Questions about this policy or your data: hassan.madeeha1989@gmail.com

For changes to this policy, we will update the "Last updated" date at the top of this page.