securityPrivacy Policy

Your privacy is of utmost importance to us. We are committed to protecting your personal information in accordance with applicable data protection laws.

• Data Collection: We collect only essential information such as your name, phone number, email address, and studio details required to operate and maintain your account.
• No Third-Party Sharing: We do not sell, trade, or share your personal data with any third parties. Your information remains completely secure and confidential.
• Secure Storage: All data is stored on secure, protected servers located in India.
• OTP Verification: Phone numbers and OTPs are used exclusively for identity verification and login security purposes.
• Payment Security: All payments are securely processed through Razorpay, which is fully PCI DSS compliant. We do not store any credit card or payment instrument details on our servers.

The Information We Request, and the Reasons We Presume to Request It

It would be a lamentable dereliction of candour were we to solicit your particulars without furnishing, in the same breath, an honest account of why each morsel of information is sought. What follows, therefore, is neither legalistic obfuscation nor performative throat-clearing, but a plain-spoken — if occasionally florid — enumeration of our purposes.

Your name and telephone number. These constitute the very sinews of the service: the name so that your studio may address you as a person rather than a ledger entry, and the number because it serves — in the grand Indian tradition — as your singular, portable identity, by which your bookings, payments, and receipts are unerringly tethered to you and to nobody else. Without them, the enterprise of keeping a "sahi hisab" would collapse into guesswork.

Your email address, where volunteered. We ask for it not to inundate you with importunate newsletters, but to possess a second, quieter channel for receipts and account recovery, should your telephone ever suffer one of its periodic indispositions.

Your photograph, should you deign to upload one. This is an entirely voluntary flourish. Its solitary purpose is cosmetic and humane in equal measure: that your profile, and the studio's records of its own clientele, might bear a face rather than a mere initial in a coloured circle. It is displayed to you and to the studio that serves you; it is paraded before no advertiser, fed to no algorithm, and sold to no one.

Your address and postal PIN code. Herein lies no cartographic espionage. The PIN code exists so that your studio may know, without an interrogation, the general precincts to which an album must be despatched or a photographer despatched at dawn; and so that delivery estimates may be grounded in geography rather than optimism. We derive from it no surveillance, and we decline, on principle, to track your movements.

Birthdays and anniversaries, where the studio records them. Photography is, after all, the business of commemorating occasions; these dates permit your studio to anticipate yours with a timely greeting or a well-priced offer, rather than a retrospective apology.

Records of payments and dues. These are the raison d'être of the entire platform — the incorruptible arithmetic of who has paid what, and when, preserved so that neither studio nor client need ever again quarrel over the contents of a dog-eared notebook.

Your preferred language. Solicited for the unremarkable reason that we would rather converse with you in the tongue of your choosing than presume the universality of our own.

In summation: we collect what the service cannot function without, we retain it no longer than propriety and law demand, and we regard the peddling of your information to third parties as a practice beneath contempt.

At a glance (the same facts, stripped of eloquence):

• Name & phone — your account identity; links your bookings and payments to you.
• Email (optional) — receipts and account recovery.
• Profile photo (optional) — shown on your profile to you and your studio; nothing else.
• Address & PIN code — album delivery and shoot logistics; never used for tracking.
• Birthday / anniversary — occasion reminders and offers from your studio.
• Payment records — the core ledger; who paid what, and when.
• Preferred language — the app speaks to you in it.

For data modification or deletion requests, please contact us at support@sahihisab.in.

encryptedData Security & Studio Data Protection

SahiHisab is built for serious studio businesses. Your client list, quotations, payments, and financial records are the lifeblood of your studio — we treat them with the same care you do.

• Per-Studio Isolation: Every record in our database is tagged with your unique studio ID. Our application enforces this tag on every read and write — no studio can ever see, list, or query another studio's data, even by accident. Staff accounts are further scoped to the studio they belong to and the specific modules their owner has enabled.
• Encrypted In Transit: All traffic between your phone/computer and SahiHisab travels over HTTPS (TLS). Public quotation, booking, and order share links also enforce HTTPS so client-facing pages cannot be intercepted on the network.
• Encrypted At Rest: Our databases and file storage are hosted on hardened cloud infrastructure in India with encryption-at-rest enabled. Daily automated backups are retained on the same encrypted infrastructure.
• SQL Injection Defence: Every database query in our application uses prepared statements with parameter binding. We do not concatenate user input into SQL — the single most common cause of data leaks in the industry is structurally not possible in our codebase.
• Authentication & Sessions: Logins are protected by PIN with rate-limited OTP fallback, plus device-level session tokens. Suspicious request patterns are throttled automatically by our DDoS and rate-limit layer. Sessions expire and are cleaned up by a scheduled job.
• CSRF & Audit Trail: Every state-changing request is verified with a CSRF token. Financial actions — payments, settlements, waivers, refunds — write to an immutable audit trail with the user, timestamp, and before/after values.
• Payment Data: We never store card numbers, CVVs, UPI PINs, or net-banking credentials. All payments are tokenised by Razorpay, which is PCI DSS Level 1 certified.
• No Data Sale, No Ad Tracking: Your studio's client list, contact numbers, photos, and revenue figures are not sold, shared with advertisers, or used to train third-party models. We do not share data with other studios, vendors, or partners except where you explicitly enable an integration.
• Public Share Links: Quotation, booking, order, rental, and task links use long, random, unguessable tokens. You can revoke or rotate them at any time from the studio app.
• Staff & Internal Access: Only a small number of authorised SahiHisab engineers have production access, gated by SSH keys with two-factor authentication. Production access is logged. We never read your business data unless you ask us to investigate a specific issue, and we never copy production data to laptops or local machines.
• Your Data, Your Control: You own all data you put into SahiHisab. You can export it at any time and request full deletion of your studio's data by writing to support@sahihisab.in — we honour deletion requests within 7 working days and confirm completion in writing.
• Incident Commitment: In the unlikely event of a security incident that affects your studio's data, we will notify you in writing within 72 hours of confirming the incident, along with what was affected and the remediation steps taken.

gavelTerms of Service

By accessing or using SahiHisab, you agree to be bound by the following terms and conditions:

• Service: SahiHisab is a cloud-based studio management SaaS (Software as a Service) platform designed for professional photographers and studios.
• Free Trial: All new users receive a complimentary 7-day free trial with full access to all features. No payment or credit card information is required during the trial period.
• Subscription: After the 7-day free trial, a paid subscription is required to continue using the platform. Subscriptions are billed on a monthly or yearly basis as per the plan selected by the user. All payments are processed securely through Razorpay.
• Auto-Renewal: Subscriptions renew automatically at the end of each billing cycle unless cancelled by the user prior to the renewal date.
• No Refunds: All subscription payments are final and non-refundable, as a comprehensive free trial is provided for evaluation prior to purchase. Please refer to our Refund & Cancellation Policy for complete details.
• Data Responsibility: Studio owners are solely responsible for the accuracy and legality of all content and data they upload to the platform, including but not limited to customer information, quotations, and images.
• Account Termination: We reserve the right to suspend or terminate any account found to be engaged in spam, misuse, or any activity that violates these terms, without prior notice.
• Governing Law: These terms are governed by and construed in accordance with the laws of India.
• Jurisdiction: Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts in Bhagalpur, Bihar, India.

currency_rupeeRefund & Cancellation Policy

Important: SahiHisab provides a generous 7-day free trial with full access to all features. No credit card or payment is required during the trial. This trial period is specifically designed so that you can thoroughly evaluate the software before making any purchase decision.

• No Refund After Payment: Since we provide a 7-day free trial with complete access to all features, all subscription payments made after the trial period are final and non-refundable. By subscribing, you acknowledge that you have had sufficient opportunity to evaluate the product during the free trial.
• Cancellation: You may cancel your subscription at any time by contacting us at support@sahihisab.in. Upon cancellation, your subscription will remain active until the end of your current billing cycle (monthly or yearly). No further charges will be applied after cancellation.
• No Partial Refunds: No partial or pro-rated refunds will be issued for unused portions of a billing cycle after cancellation.
• Auto-Renewal: Subscriptions automatically renew at the end of each billing cycle. You will be notified before renewal. To avoid being charged for the next cycle, cancel before your current cycle ends.
• Exceptional Circumstances: In case of accidental duplicate payments or technical errors on our part, please contact us within 48 hours at support@sahihisab.in with your studio ID and payment details. We will review and process corrections within 5-7 business days.

sellPricing

Simple, transparent pricing with no hidden charges. Cancel anytime.

• Free Trial: 7 days with full access to all features. No credit card required.
• Monthly Plan: ₹299 per month
• Yearly Plan: ₹1,799 per year — Save ₹1,801 compared to monthly billing.

Both plans include unlimited bookings, quotations, walk-in orders, payments, rentals, team management, analytics, and support for all 8 languages.

contact_supportContact Us

infoAbout SahiHisab

"SahiHisab" literally translates to "Correct Accounts" in Hindi.

• We are a dedicated studio management software built specifically to empower Indian photographers.
• We are a proud part of the larger Flipix ecosystem.
• Our platform is lightweight, mobile-first, and heavily optimized to serve Tier 2 and Tier 3 city studios.
• Founded and proudly developed in Bhagalpur, Bihar, India.