Security at MB Hisab AI

MB Hisab AI is managed by MB Developer Apps. The product handles business records such as customers, udhar, sales, expenses, invoices, inventory, reports, backups and subscription status. Security is treated as part of the product, not a separate marketing promise.

Send support and security reports to support@mbhisabai.com. Business location: Nagpur, Maharashtra, India.

Why businesses can trust MB Hisab AI

Your business data belongs to your account

Business records are linked to the signed-in account. Cloud access uses account ownership checks so records belong to the authenticated owner. On shared devices, locally cached records are scoped to the authenticated account where the app has linked ownership.

Authentication

The app uses Google sign-in through Supabase Auth. This gives every user an authenticated account identity before protected app screens and cloud-backed records are used. Protect your Google account, recovery methods and device lock.

Data access controls

Access rules separate business ownership from unrelated accounts. Shared Expense collaboration is separate from business membership: being invited to one shared expense group does not make the invited user a member of the owner's business workspace.

Payments

Premium access is not unlocked by a client message alone. Supported checkout flows require server-side payment verification or trusted webhook processing before the subscription state changes.

AI processing

AI features may process the minimum text needed for the selected action. AI output must be reviewed before saving. Do not enter bank passwords, OTPs, UPI PINs, full ID-proof images or unnecessary private customer datasets into an AI action. See the Privacy Policy for more detail.

Data export

Supported exports help the account owner keep business copies. Review exports before sharing because they can contain customer, payment or business information.

Backups

Backup and restore are account-sensitive operations. A restore can replace local data for the signed-in account. Use restore only after verifying the backup owner and contents. Legacy records whose owner cannot be established are not silently assigned to a newly signed-in user.

Reporting security issues

Email support@mbhisabai.com with a clear summary, affected platform, app version if visible and safe reproduction steps. Do not send passwords, OTPs, UPI PINs, service keys or private signing files.