Privacy Policy

1. Who we are

Asaan Tech is a branch of DiJEN Tech (SMC Private) Ltd, a company registered with the Securities & Exchange Commission of Pakistan (SECP). We build business and education software for the Pakistani market.

For the purposes of this policy, DiJEN Tech (SMC Private) Ltd is the party responsible for deciding how and why your personal data is processed. You can reach us at privacy@asaan.tech.

2. What this policy covers

This policy applies to:

• The asaan.tech website, including the contact form;
• Asaan Pay — our online payment gateway;
• Asaan Hisab — our khata, stock and sale-purchase app on web, desktop and Android;
• Asaan School — our school management system;
• imagEdit — our free image and PDF toolkit.

It does not cover third-party websites we link to, or the separate privacy practices of payment processors, banks and app stores, each of which has its own policy.

3. Information we collect

3.1 Information you give us directly

• Contact details — your name, email address and message when you submit the contact form on this website, or email us directly.
• Account details — the name, email address, phone number and business or school details you provide when registering for Asaan Pay, Asaan Hisab or Asaan School.
• Business records you enter — customer and supplier names, ledger entries, stock items, invoices, student records, fee entries and similar operational data you choose to store in our products.
• Verification documents — for Asaan Pay, business registration and identity documents required to activate a merchant account under applicable financial regulations.
• Files you upload — images and PDF documents you submit to imagEdit for processing.

3.2 Information collected automatically

• Technical data — IP address, browser type and user-agent string, device type, operating system, and the pages you viewed. We record the IP address and user agent alongside contact-form submissions to help us identify spam and abuse.
• Session data — cookies strictly necessary to keep you signed in and to protect forms against cross-site request forgery.
• Log data — server logs recording requests and errors, used for security monitoring and debugging.

3.3 Information we do not collect

• We do not store full card numbers, CVV codes or banking passwords on Asaan Tech servers.
• We do not sell personal data to anyone, under any circumstances.
• We do not read, index or reuse the contents of files you process through imagEdit.

4. How we use your information

We use the information described above to:

• Provide, operate and maintain the product you signed up for;
• Process transactions and display them in your dashboard;
• Respond to your enquiries, demo requests and support messages;
• Verify merchant identity and meet legal, tax and financial-regulatory obligations in Pakistan;
• Detect, investigate and prevent fraud, spam and abuse of our services;
• Diagnose faults, improve performance and develop new features;
• Send service messages such as billing notices, security alerts and important changes. These are not marketing, and you cannot opt out of them while you hold an active account.

We only send marketing or product-update emails if you have asked to receive them, and every such email carries an unsubscribe link.

5. Product-specific practices

Product	What is processed	Where it is stored
Asaan Pay	Merchant account and verification details, transaction records, settlement history. Card and wallet credentials are handled by the payment processor, not by us.	Our servers, plus the regulated payment processor’s systems.
Asaan Hisab	Your account details and the business records you enter — khata entries, parties, stock, invoices.	Our servers when online. In offline mode, data is stored locally on your own device and synced when you reconnect.
Asaan School	Staff accounts plus the student, guardian, attendance, fee and examination records your school enters.	Our servers. The school remains the owner of this data — see section 8.
imagEdit	The image or PDF file you upload, only for as long as it takes to produce your output.	Temporary server storage, deleted automatically after processing. No account required.

6. When we share information

We share personal data only in these situations:

• Service providers. Hosting providers, email delivery services and payment processors who process data on our instructions and are contractually bound to protect it.
• Payment partners. Where you use Asaan Pay, transaction data is shared with the relevant processor, bank or scheme in order to complete the payment.
• Legal requirements. Where we are required to disclose data by Pakistani law, a court order, or a lawful request from a regulator or law-enforcement agency, including under the Prevention of Electronic Crimes Act 2016.
• Protection of rights. Where disclosure is necessary to investigate fraud, enforce our Terms of Service, or protect the safety of our users.
• Business transfer. If our business is merged, acquired or restructured, data may transfer to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

We never sell, rent or trade your personal data for marketing purposes.

7. Payment data

Asaan Pay supports Raast, the instant payment system operated by the State Bank of Pakistan, alongside card and mobile wallet payments currently processed through the JazzCash gateway.

When a customer pays you, sensitive payment credentials are captured and processed by the payment processor within their own secure environment. Asaan Tech receives and stores only the transaction record — amount, timestamp, status, reference number and a masked identifier. We never receive full card numbers or CVV codes, and we never store banking credentials.

Transaction records are retained for the period required by Pakistani financial and tax regulations, even after an account is closed.

8. Children’s and students’ data

Our products are intended for businesses and institutions, not for direct use by children. We do not knowingly collect personal data directly from a child.

Asaan School necessarily holds records about students, many of whom are minors. In that relationship:

• The school is the data controller — it decides what student data to enter and why.
• Asaan Tech acts as a data processor, handling that data only on the school’s instructions to operate the system.
• We do not use student data for advertising, profiling or any purpose beyond running the school’s own system.
• If a parent or guardian wants a student record corrected or removed, they should contact the school directly, since the school controls those records. We will support the school in acting on such a request.

If you believe a child’s data has reached us outside this arrangement, email privacy@asaan.tech and we will delete it promptly.

9. Cookies and analytics

We use a small number of cookies:

• Strictly necessary cookies — session cookies that keep you signed in, and a CSRF token cookie that protects forms from being submitted by a malicious third-party site. These cannot be turned off without breaking the service.
• Preference cookies — remember choices such as your interface language.
• Analytics — where enabled, aggregated statistics about page visits so we can see which pages are useful. These are used in aggregate and are not used to build an advertising profile of you.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

This marketing website does not require you to sign in, and the free imagEdit tools do not require an account.

10. How long we keep data

Data	Retention period
Files uploaded to imagEdit	Deleted automatically after processing.
Contact form submissions	Kept while we deal with your enquiry and for a reasonable period afterwards for follow-up and abuse prevention.
Account and business records	Kept for as long as your account is active, and deleted on request after closure — except where we must retain them by law.
Payment transaction records	Retained for the period required by Pakistani financial, tax and anti-money-laundering regulations.
Server and security logs	Kept for a limited period for security monitoring, then discarded.

11. How we protect your data

• All traffic to our websites and apps is encrypted in transit using HTTPS/TLS.
• Passwords are stored as salted one-way hashes — we cannot read your password, and neither can anyone who obtains the database.
• Access to production data is limited to staff who need it to do their job, and is logged.
• Forms are protected against cross-site request forgery, and sensitive endpoints are rate-limited to blunt automated abuse.
• Databases are backed up regularly so your records survive a hardware failure.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify affected users and the relevant authorities without undue delay, and tell you what happened and what to do about it.

12. Your rights and choices

Subject to applicable Pakistani law, you may ask us to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Delete your account and associated personal data, where we are not required to keep it;
• Export your business records in a common, machine-readable format;
• Object to or restrict certain processing;
• Withdraw consent to marketing communications at any time.

Email privacy@asaan.tech to make a request. We will verify your identity before acting, and aim to respond within 30 days. There is no charge for a reasonable request.

Note that where your data sits inside a school's or an employer's account, that organisation controls it — we will refer your request to them and assist them in fulfilling it.

13. Where your data is stored

We aim to host data on infrastructure serving the Pakistani market. Some service providers we rely on — for example email delivery and error monitoring — may process limited data on servers outside Pakistan. Where that happens, we choose providers that offer appropriate contractual and technical safeguards.

Offline copies of Asaan Hisab data live on your own device and remain under your physical control until they sync.

14. Third-party services and links

Our site and products link to and integrate with third parties, including payment processors, app stores and font providers. When you follow an external link or complete a payment through a processor, that organisation's own privacy policy governs the data it collects. We encourage you to read them. We are not responsible for the content or privacy practices of external sites.

15. Changes to this policy

We may update this policy as our products, or the law, change. The "Last updated" date at the top of this page always reflects the current version. If a change materially affects how we handle your personal data, we will notify account holders by email or through an in-product notice before it takes effect. Continuing to use our services after a change means you accept the updated policy.

16. How to contact us

Questions, requests or complaints about privacy — get in touch:

• Privacy enquiries: privacy@asaan.tech
• General enquiries: contact@asaan.tech
• Company: DiJEN Tech (SMC Private) Ltd (trading as Asaan Tech), Karachi, Sindh, Pakistan
• Contact form: asaan.tech/#contact

If you are not satisfied with our response, you may raise the matter with the relevant Pakistani regulator, such as the Pakistan Telecommunication Authority or the Ministry of Information Technology & Telecommunication.

See also our Terms of Service, or return to the Asaan Tech home page.