SiteHisabPrivacy Policy
SiteHisab is a construction site accounting app. You put your site's records into it — labour, materials, bills, money — and we keep them for you. This page explains exactly what we collect, why, where it goes, and how to get rid of it. It is written to be read, not to be survived.
Who we are
SiteHisab is operated from India and is the data controller for the information described here. For any privacy question, correction or deletion request, write to avigyan7@gmail.com. We answer privacy requests within 30 days.
What we collect, and why
1. Your account
When you create an account we collect your phone number or email address (whichever you sign in with), and — if you sign in with Google — your name and profile photo URL from that Google account. This is how we identify you across your phone, the web and the desktop app, and how we keep your data attached to you and not to a device.
2. The site data you enter
Everything you record in the app: project names and locations, daily site diary entries, labour attendance and the names in your labour register, material receipts, tools, work orders, bills, payments and cash movements, rates, bookings and the customer names against them. You choose what goes in. Some of it — labour names, buyer names, party names — is personal information about other people, and you are responsible for having a reason to record it.
3. Files you upload
Photographs and documents you attach: challans, bills, drawings, PF/ESI papers, your letterhead. These are stored as files in your account.
4. Purchase and licence information
When you buy the SiteHisab app on Google Play, we ask Google (through the Play Integrity API) to confirm that the app on your device is a genuine Google Play install licensed to your Google account. We record only the result — that your SiteHisab account is licensed, and when. We never receive your card, UPI or Google Play payment details. Anything you buy from us on the website — such as AI credits — is handled by Razorpay, which sends us only the payment reference, amount and status. Nothing is sold inside the Android app.
5. Usage analytics
The SiteHisab website, web app and Android app use Google Analytics (via Google Tag Manager) and Firebase Analytics to count visits and understand which screens are used. Because the Android app runs the web app inside it, this applies there too. This is standard usage analytics and is not linked to the contents of your site records.
Where your data goes
| Service | What it receives | Why |
|---|---|---|
| Google Firebase — Authentication, Cloud Firestore, Cloud Storage, Cloud Functions | Your account identifier, all your project data, and the files you upload | This is where your account and your records are stored and synced between your devices |
| Google Play (Play Integrity API) | A one-time integrity token from your device | To confirm your app purchase so your account unlocks |
| Anthropic (Claude) | The messages you type into Talk to AI, and the summary figures of the tab you are on — including a short list of names from your labour register and your machine and tool list, so the assistant knows who and what you mean; photographs of bills when you ask the app to read one | To turn what you say into register entries and to answer your questions |
| OpenAI | Structural drawings you upload for AI reading, when it is used as a fallback | To extract quantities and bar bending schedules from your drawings |
| Resend | Your email address and the sign-in link | To deliver sign-in emails |
| Google reCAPTCHA | Device and browser signals when you sign in with a phone OTP | To confirm a real person is requesting the code, not an automated script |
| Razorpay | Payment amount, reference and status when you pay us on the website | To take the payment. Card and UPI details are entered on Razorpay and never reach us |
| Google Analytics / Tag Manager | Anonymous website usage | To understand which pages are useful |
AI providers process your content to return a result. We do not sell your data to anyone, and we do not use your site records to advertise to you.
What we do not do
- We do not sell or rent your data.
- We do not read your project data for marketing.
- We do not collect your location, contacts, call logs or SMS.
- The Android app requests only the Internet permission — no camera, contacts or location permission. When you photograph a bill or attach a document, Android's own camera and file picker do that work and hand SiteHisab only the one file you chose.
The Windows desktop app
The desktop app keeps your project data on your own computer. It does not sync those records to our servers. Only features that genuinely need the internet — AI drawing reads — leave the machine.
Children
SiteHisab is a business tool and is not directed at children under 13. We do not knowingly collect data from children.
How long we keep it, and how to delete it
We keep your data for as long as your account exists. You can delete individual rows and files inside the app at any time.
To delete everything: open the app, go to Account → Danger zone → Delete account + all data. This permanently deletes your login, every project's data and every file you uploaded. It cannot be undone. You can also email avigyan7@gmail.com and we will do it for you. Full instructions are on our delete your account page.
What survives deletion, and why. To be straight with you, a few small records are kept after an account is deleted: any pending team invitations you sent (which hold the email or phone you typed), a one-line record that this phone or email once held an account — so a deleted account cannot be recycled to claim a fresh licence — a hashed, masked copy of your email used for sign-in rate limiting, and payment references we are required to retain for accounting. None of this contains your project data, your files, or anything you recorded about your site.
Your rights
You may ask us for a copy of your data, ask us to correct it, or ask us to delete it. The app also has a built-in export (CSV) for your own records. Write to avigyan7@gmail.com.
Security
Your data is stored on Google Firebase infrastructure and is reachable only by your signed-in account and the team members you explicitly invite. Traffic is encrypted in transit. No system is perfect, and we will tell you promptly if something material happens to your data.
Team members
If you invite someone to your account, they can see the parts of your projects you grant them. Invitations use the email address or phone number you enter, and we store it in order to send and manage the invitation.
Changes
If this policy changes materially we will update the date at the top and, where the change matters, tell you in the app.