Introduction
MUSAED is a subscription-based digital business-management platform: accounting, sales, purchasing, inventory, employees, tasks, administrative services and reports, through the website and WhatsApp.
This policy explains what data we handle, why, how we protect it, and your rights. It applies to the website, the organization portal and conversations with MUSAED.
Data we collect
- Account data: name, mobile number, email address where given, role and permissions within the organization.
- Organization data: trade name, activity, branches and departments, location if entered, logo and document details.
- Business data your organization enters: customers and suppliers, quotations and invoices, purchasing, inventory, journal entries, expenses and receipts, tasks and projects, administrative-service requests and assets.
- Employee data: what the organization records about its employees, such as job title, contracts, attendance, leave and payroll.
- Conversations: messages, images, documents and voice notes sent to or from MUSAED.
- Subscription data: the plan, and the photos of transfer receipts you send to activate a subscription.
- Security and usage data: sign-in times and important actions with who performed them, to protect accounts and keep an audit trail.
Why we use data
- To provide MUSAED to your organization: recording operations, issuing documents and reports, following up tasks and sending notifications.
- To understand requests in conversations and turn them into drafts or structured operations.
- To manage the subscription and free trial and review payment receipts.
- To protect accounts, prevent misuse and keep a record of who did each action.
- To improve the service and support users.
We do not sell your data, and we do not use your organization’s data for advertising.
Organization data
The business data your organization enters belongs to it and remains under its control, subject to the agreement and applicable law. MUSAED provides the software and tools and does not claim ownership of your organization’s records.
Each organization’s data is separated from every other organization’s.
User and employee data
The organization’s account owner adds employees and approves their permissions, and is responsible for what is recorded about them and for informing them.
Each employee sees only what their permissions allow. A job title alone grants no permission; permissions are approved by the account owner.
Conversation data
We use messages to understand and answer your request: replying from your organization’s data, creating a draft, sending a report or following up a task.
Messages and documents are processed automatically to understand requests and extract data. An unclear request may be followed by a clarifying question, extracted data may need your review, and important actions need confirmation or approval before they are carried out.
Voice notes are stored as sent.
Documents and files
Files you upload or send (images, invoices, statements, documents) are kept for your organization and used for the purpose you sent them for, such as preparing data or attaching them to a request or document. Only people with permission can access them.
Financial and operational data
Entries, invoices, expenses, inventory and payroll are recorded as your organization enters or approves them. MUSAED keeps a record of every posted financial entry; corrections are made by a reversing entry that stays visible.
Permissions and access
- Access follows role, approved permissions and organization settings.
- The account owner can stop any employee’s website access at any time.
- We access your organization’s data only where needed to provide the service or the support you request, to protect accounts, or where the law requires it.
Data retention
We retain data for as long as needed to provide the service, meet legal obligations, resolve disputes and maintain the audit history.
When a trial or subscription ends, your organization’s data is kept and the account may become view-only until the subscription is activated. When an organization account is deleted, its data is deleted, and one entry recording the deletion itself is kept.
Disclosure of data
- Within your organization: only to people with permission.
- At your organization’s request or with its consent.
- To the extent needed to provide the service to your organization.
- Where required by law or by an order of a competent authority.
Data security
- Role-based permissions and least privilege for every user.
- Protected sign-in; password-setup links work once and for a short time; we never ask for passwords over WhatsApp.
- Separation of each organization’s data, and protection of data in transit.
- An audit trail of important actions.
Your rights
You may request access to, correction of, export of or deletion of your data. Requests about organization data are made by the account owner, who is responsible for it. Contact us through the MUSAED WhatsApp conversation, or through your organization’s account owner.
Changes to this policy
We may update this policy. The last-updated date and version appear at the top of the page, and organizations are informed of material changes.
Contact
For any question about privacy or your data: through the MUSAED WhatsApp conversation, or through your organization’s account owner.