Privacy Policy
Last updated: 21 September 2026
In short
- Your patients' records never leave your computers. We cannot see them.
- We keep only what we need to run your account and license: your email, lab name, payments and the computers you use.
- We do not sell data and do not use advertising or tracking cookies.
This policy explains what information Haseeb Systems ("we", "us", "our") collects when you use Lab Management System and its website, and how we use it.
1. What we collect
| Information | Why we need it |
|---|---|
| Lab or clinic name and email address | Your account, payment verification, renewal reminders and support |
| Password (stored only as a one-way hash) | Signing in to the app and your account page |
| Hardware ID (a non-reversible fingerprint of each computer) | Free trial limits and the number of computers in your subscription |
| Computer name (for example "RECEPTION-PC"), date added and date last used | Showing you which computers use your subscription, so you can manage them |
| Plan, number of computers, amounts, payment method and JazzCash transaction ID | Verifying payments and deciding what access you have |
| IP address of requests to our servers | Security and troubleshooting, including temporarily blocking repeated failed sign-in attempts. Recorded in our server logs. |
2. What we do not collect
Patient records, test results, reports and all other clinical data stay in the database on your own computers. We do not receive, store or have access to it. Card numbers are never sent to us; card payments are handled entirely by Paddle.com.
3. Who we share data with
- Paddle.com processes card payments and card subscriptions. See Paddle's Privacy Policy.
- Our email provider sends password reset codes and renewal reminders to your email address.
- JazzCash: we compare the transaction ID you submit with our own JazzCash records. We never receive your JazzCash PIN or login.
We do not sell or rent your data.
4. How long we keep it
We keep account, payment and computer records while your account is active and for a reasonable period afterwards for accounting and legal purposes. When you remove a computer, its entry is deleted from your account. Sign-in sessions on the account page expire after 12 hours.
5. Your choices and rights
You can see and manage your computers on the account page. You may ask us to access, correct or delete your personal data at any time, except records we must keep for tax or legal reasons.
6. Cookies and tracking
We do not use advertising or tracking cookies. The account page keeps your sign-in in your browser only until you close the tab. The pricing and checkout pages make a one-time country lookup (through ipwho.is) to suggest a suitable payment method; the result is not stored. When you download the installer from our website, we count the download together with a scrambled, one-way code made from your IP address (not the address itself), so we can tell how many different people downloaded it. It is not used to identify you.
7. Security
Passwords and reset codes are stored only as salted one-way hashes. Traffic between the app, the website and our servers is encrypted (HTTPS). License responses are digitally signed so they cannot be forged. Repeated failed sign-in attempts are temporarily blocked. No system is perfectly secure, but we take reasonable steps to protect your information.
8. Changes to this policy
We may update this policy. The date at the top shows the latest version.
9. Contact
Questions or data requests: support@haseebsystems.com