Privacy Policy

eKhata is digital khata, cash book, stock and billing software for shops and wholesalers in Pakistan, run from Johar Town, Lahore. This policy explains what information we collect when you use our website (ekhatapk.com) and the eKhata app, what we do with it, who can see it, and the choices you have.

If you have a question about it, contact us at [email protected] or on WhatsApp at 0307 6368099.

• Account details: your name, phone number or email, business name, type and address, and your role. Our team creates your account; there is no public sign-up.
• Business records you enter: customers and suppliers, bills, payments, stock, expenses, the cash book, staff, attendance, advances and salaries, and the reports built from them.
• Files you add: logos, receipt photos and product photos.
• Sign-in and technical data: when you log in we record a session with your IP address and your browser or device type, so we can keep the account secure.
• Messages you send us by WhatsApp, phone or email.

The contact form on our website does not send your details to our server. It opens a WhatsApp message that you then choose to send.

Your records contain information about your customers, suppliers and employees, such as names, phone numbers and balances. That information is yours: you decide what to enter and why. You are responsible for having the right to record it, and for answering your own customers and staff if they ask what you hold about them. We process it only to provide the service to you.

• To create and run your account and provide the app
• To give you support and help you move your existing khata
• To keep the service secure, prevent misuse and fix faults
• To manage your trial and subscription
• To meet legal obligations

We do not sell your information. We do not use it for advertising, and we do not share your business records with advertisers.

• You, and the staff you give logins to, only for the modules you allow.
• eKhata administrators and support staff, who can access account and business data when needed to set up your account, give support, maintain the service and keep it secure.
• Service providers that help us run the service, such as the cloud server provider that hosts our systems.
• When we must by law, or to protect our rights or the safety of others.

Some features pass information to other services at your request. When you send a statement or a link through WhatsApp, that content goes to WhatsApp and is covered by its terms. Our pages load fonts from Google Fonts, which means your browser contacts Google when you visit.

We use one cookie that the app needs to work: a sign-in cookie that keeps you logged in. It is marked so that scripts on the page cannot read it, and a session lasts up to 30 days unless you log out.

Your browser also keeps a few settings on your device: your language, the business you last selected, whether you have seen the welcome tour, and, if you turn it on, your app PIN. The PIN stays on your device.

We do not use advertising cookies or third-party analytics trackers.

• Passwords are stored as one-way hashes, not as readable text.
• Sign-in sessions are stored as hashed tokens.
• Each business's records are kept separate from every other business's, and staff access follows the permissions you set.
• The site is served over HTTPS.
• Your records are backed up daily.
• We limit repeated login attempts and other abuse.

No system is perfectly secure, and we cannot promise that nothing will ever go wrong. You help by choosing a strong password, not sharing your login, using staff logins instead of your own, and keeping your device locked.

We keep your information while your account is active and for as long as we need it to provide the service, to meet legal obligations and to resolve disputes. Backups are kept for a limited time and then replaced.

You can ask us to give you a copy of your records or to delete your account and records by writing to [email protected]. We may keep information we are required by law to keep. Copies in backups are removed as the backups are replaced.

You can ask us to show you, correct, export or delete the information we hold about you. You can change your password from the app, and you can ask us to remove a staff login. If you are a customer, supplier or employee of a shop that uses eKhata and want to see or correct what that shop holds about you, please contact the shop, because it decides what is recorded.

eKhata is for businesses and is not meant for children under 18. We do not knowingly collect information from children.

We may update this policy as the service changes. When we make an important change we will tell you in the app or by message, and the date at the top will change.

Contact: [email protected], WhatsApp or phone 0307 6368099, Johar Town, Lahore, Pakistan.