Privacy
Your books are yours. Here is exactly what we keep.
Dhandau is made by Wepronex, 901–908, 9th Floor, Fortune Tower, Shahrah-e-Faisal, Karachi. This page explains what we keep when you use Dhandau, who can see it, and what you can ask us to do. Last updated 25 October 2026.
What we keep
- Your account: your unit’s name, your name if you give it, your WhatsApp number and your email. Your password is kept by our sign-in service in scrambled form; we never see it.
- Business details you add in Settings for your bills: address, phone, NTN and STRN.
- Your books: orders and quotations (the client’s name, what was ordered, quantity, price, dates, payments received and any notes, such as who is working on the job), expenses, advances, monthly bills such as rent and salaries, and your bill numbers.
- Clients are only the names you type. We keep no phone number or address for them.
- Your subscription: when your trial ends, the date you have paid until, and the payments we record (amount, date, how you paid and its reference).
- A partner code, if you came to Dhandau through a partner’s link.
Bills and the free tools
When you send a bill, the PDF is made on your phone and you send it yourself, for example on WhatsApp. The bill’s details stay saved in your account, so you can see it and send it again.
The profit calculator works only in your browser: nothing you type is sent to us or stored. The quotation, invoice and delivery challan formats are blank pages to print.
Who can see what
- Anyone who signs in to your unit’s account.
- Dhandau staff, to switch on your account and help you. Our admin screen shows your unit’s name, the owner’s email and WhatsApp number, when you joined, your trial and payment dates, your payments, your partner code and how many people use the account. The database also lets our admin accounts read your business details (address, phone, NTN, STRN) and the names and emails of your users.
- The database’s rules do not let our admin accounts open your orders, clients, expenses, advances or bills.
As the people who run Dhandau, we can technically reach the database itself. We open your books only if you ask us to help with them, or if the law requires it. We never sell your data or use it for advertising.
Where it is kept
| Who | What | Where |
|---|---|---|
| Supabase | Your account and your books | Mumbai, India |
| Vercel | Runs the website and the app | Washington, D.C., United States |
| Vercel Web Analytics | Visit counts, as totals (see below) | Vercel, a United States company |
We use the country your connection comes from to show prices in rupees or dollars. It is not stored.
Cookies and visit counts
- A sign-in cookie keeps you signed in until you sign out (at most 400 days).
- A language cookie remembers English, Urdu or Bahasa Indonesia for a year.
- If you arrive through a partner’s link, a cookie keeps the partner code for up to 90 days, and it is removed when you sign up.
- Expenses you enter without a connection wait on your phone until they are saved, then they are cleared from it.
We count visits to our public pages with Vercel Web Analytics, the counting built into the service that runs this site. It sets no cookies, and Vercel says it does not store internet addresses. It records the page, the site you came from, your country and city, and your type of device, browser and operating system. We also count taps on our WhatsApp links and finished sign-ups. Nothing inside the app is counted, and nothing you type is sent. We see totals, never a person.
How long we keep it
We keep your account and your books while your account exists. If your subscription lapses, your account becomes read-only: nothing is deleted, and your books are there when you pay again.
Ask us to delete your unit and we delete it, with all its books and your login.
Your choices
- Correct your details in Settings at any time.
- Ask us what we hold about you.
- Ask us to delete your unit and everything in it.
Email contact@wepronex.com or message us on WhatsApp at +92 331 6204942.
If you are in Indonesia
Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) gives you the right to ask us to show you the data we hold about you, correct it, delete it, withdraw a consent you have given, and object to how we use it. You may also complain to the supervisory authority.
Security
Each unit’s records open only with its own login: the database itself enforces this, so one unit can never see another’s. We never see your password. The app’s pages open only after you sign in.
Changes
The date at the top shows when this page last changed. If we change anything that matters, we will say what changed.