Who controls this policy
Hashe Site Health is operated by Hashe Computer Solutions (Pvt) Ltd. This policy applies to visitors, registered users, account holders, and future paid subscribers who use sitehealth.hashe.com or related Hashe Site Health services.
Account information we collect
When you register or use account features, we may collect your name, email address, company name, phone or WhatsApp number if provided, profile image, password hash, verification status, package or subscription status, usage limits, saved preferences, and account activity records.
Website scan and report data
When you run a scan, we may store the submitted URL, normalized URL, final scanned URL, hostname, root domain, scores, issues, screenshots, PageSpeed data, DNS records, SSL information, detected technologies, resource-loading evidence, scan duration, scan date, saved report records, and related technical metadata. This data is used to generate reports, show history, compare results, enforce usage limits, and improve product reliability.
Payment and subscription data
When paid billing is enabled, payment checkout, tax calculation, invoices, receipts, subscription management, refunds, and certain buyer-support functions may be handled by Paddle. We do not need to store full card details on our own servers. We may store Paddle customer IDs, subscription IDs, transaction IDs, plan status, renewal status, and billing event references so your account can reflect the correct plan and access level.
How we use information
We use collected information to create and manage accounts, verify email addresses, run scans, save reports, show scan history, enforce scan and domain limits, provide support, send account or service emails, process subscription status, improve the service, detect abuse, maintain security, and comply with legal or provider requirements.
Cookies and analytics
We may use essential cookies for login sessions, security, account functionality, and form handling. We may also use analytics or tracking tools such as GA4 or GTM when configured by the super admin to understand site usage, improve the product, and measure conversions. Non-essential tracking should follow applicable consent requirements where required.
Service providers
We may share necessary data with service providers that help operate the product, including hosting, database, email delivery, analytics, browser rendering, PageSpeed or scanning services, payment and billing providers, fraud prevention tools, logging, and support tools. These providers should only receive the data needed to perform their role.
Data retention
We keep account and scan data for as long as needed to provide saved reports, scan history, comparisons, billing records, support, security, legal compliance, and business records. Some data may be retained longer where required for tax, payment, dispute, fraud-prevention, audit, backup, or legal reasons.
Security
We use reasonable technical and organizational measures to protect account and service data. Sensitive provider keys should be stored securely and must not be exposed in public pages, reports, PDFs, frontend JavaScript, screenshots, or logs. No online service can guarantee absolute security, so users should also protect their login credentials.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, export, or object to certain processing of your personal information. You may also request help with account information or ask questions about privacy by contacting support. Some requests may require identity verification and some data may need to be retained for legal or billing reasons.
International processing
Hashe Site Health may use infrastructure and service providers in different countries. By using the service, you understand that data may be processed outside your country of residence where our systems or providers operate, subject to applicable legal requirements.
Email and communication preferences
We use your email address to send account, security, billing, payment, scan, subscription, and service-related communications. These emails are necessary for operating your account, delivering the service, and keeping users informed about important account activity.
We may also use your email address to send product updates, feature announcements, founder pricing notices, offers, promotions, re-engagement messages, and other marketing communications where permitted by law. Marketing emails will include an unsubscribe or opt-out option where required. You may opt out of marketing emails without affecting service-related account, security, billing, legal, or transactional emails.
Policy updates
We may update this Privacy Policy as the product, providers, legal requirements, or data practices change. The updated policy will be posted on this page with a revised last-updated date.