How we handle information on the Hisbuu website, platform, and Hisbuu Driver mobile app.
This Privacy Policy applies to the Hisbuu website, driver operations platform, and Hisbuu Driver mobile app, operated by Dhofar Digital ("Hisbuu", "we", "us"). It explains how information is handled when you visit our website, use a company account, or contact support.
Driver accounts are provided by a participating employer or delivery company. Hisbuu Driver does not offer public self-registration. The company's provisioning QR code connects the app to that company's Hisbuu service. Your company manages your account, operational records, and staff access, and may provide an additional company privacy policy. That company policy supplements this policy for the company's own processing; it does not replace the Hisbuu app policy.
For a company-managed or self-hosted deployment, your company controls its hosting, integrations, and use of employment and operational records. Contact your company about those activities, or use our privacy contact below for questions about Hisbuu.
The information handled depends on the features you use and the records your company provides. It includes:
When you submit a form, send a helpdesk message, or upload an attachment, its content is transmitted from your device to the connected company's service and stored with the relevant record. Your company may also enter or import information about you. Please include only information relevant to the request and avoid uploading unnecessary information about other people.
You can change camera and microphone permissions in your device settings and disable biometric sign-in in the app. Denying a permission prevents the feature that needs it from working. The Hisbuu Driver app does not request GPS location or track your location in the background. This does not prevent a server from receiving your IP address when you connect.
We do not sell, rent, or trade personal information. Information is made available as needed in the following circumstances:
Hosting and service providers may process information in countries other than the country where you use the service. Your company can provide details of its deployment and providers.
Hisbuu-operated services use HTTPS/TLS to protect information in transit. Access controls, authentication, upload validation, and role-based permissions help protect records and attachments. Company-managed deployments are responsible for maintaining their hosting security, access settings, and backups.
Protect your device and sign-in credentials, and contact your company if you suspect unauthorized access. No storage or transmission method can guarantee absolute security.
Our standard retention period for company-managed account and operational records is the duration of the company's subscription plus 12 months after the subscription ends. This includes driver documents, submissions, financial and equipment records, and helpdesk messages and attachments. The additional period supports reconciliation, account closure, and handling related queries.
At the end of that period, records are deleted or anonymized unless a legal obligation or an unresolved legal claim requires specific records to be kept longer. A valid earlier deletion request may shorten retention where continued retention is not required. Backup copies are subject to the applicable backup rotation and deletion process. A company operating its own deployment is responsible for applying retention and deletion to its systems and explaining any different legal requirements.
Signing out, uninstalling the app, or closing a helpdesk ticket does not by itself delete records already stored on the company's service. Website inquiries and technical logs are retained only as needed for their stated purpose and applicable legal requirements.
Depending on the applicable law, you may have the right to:
To request access, correction, export, or deletion of your account or data, contact your company's administrator or email privacy@hisbuu.com. Include your company name, Driver ID if applicable, and the request. Do not send your password or identity-document images in the initial email.
We may need to verify your identity and coordinate with the company that manages your records. If information must be retained, the response will explain the reason and the applicable retention period. This contact route is available without signing in to the app.
Hisbuu web services use cookies or browser storage for functions such as sessions, authentication, and preferences. The mobile app uses local app storage for its settings and sign-in information. We do not use third-party advertising cookies or tracking pixels in the Hisbuu service, and Hisbuu Driver does not include advertising or an advertising-ID integration.
Hisbuu may provide a separate review or demonstration company with fictional sample records. The same app privacy policy applies when using that environment. Use fictional information for test submissions, messages, recordings, and attachments; do not upload real identity documents or other people's personal information for testing. Any information you choose to submit is handled by the connected review service as described above.
Hisbuu Driver is intended for adult drivers and authorized company staff aged 18 or older. It is not directed at children. Contact us if you believe a child has provided personal information through the service.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For significant changes, we will notify active account holders via email.
If you have questions about this Privacy Policy or how we handle your data, please contact us: