Privacy Policy

Effective date: 14 September 2026  ·  Version: 1.0

This policy applies to the PlantMaster Pro application at app.hsbfix.org and this website at hsbfix.org, both operated by HSB Fix Services ("we", "us"). If anything here is unclear, message us on WhatsApp and we will explain it.

1. Who controls the data

Your company is the owner of the maintenance data you enter — assets, work orders, spares, purchase orders, attendance and documents. We hold and process that data on your behalf so the software can function. We do not sell it, rent it, or use it to advertise to anyone.

2. What we collect

Information you give us

• Account details — name, email address, and the password you set. Passwords are stored only as a cryptographic hash; nobody at HSB Fix Services can read them.
• Staff profile details — full name, contact number, employee ID, designation, skills, default shift and hourly labour rate, where you choose to record them.
• Company details — organisation name, and NTN/STRN where you enter them for purchase orders and invoices.
• Operational records — everything you create in the app: assets, work orders, maintenance plans, spares and tools, checklists, attendance, suppliers and purchase orders.
• Files you upload — equipment manuals, drawings, photographs and attachments.

Information created automatically

• Audit records — when a record is created, changed or deleted, we log who did it, what changed and when. This is a deliberate feature: it is what makes the system acceptable to auditors. It covers plant work only.
• Technical logs — standard server logs needed to keep the service running and secure.

What we do not collect

• We do not track your staff's location. The app requests no GPS or location permission.
• We do not use advertising trackers, third-party analytics pixels or social media tracking on the app.
• We do not collect payment card details. Plans are arranged manually and invoiced directly.

3. Device permissions

The app asks permission only when you use a specific feature, and you may refuse:

• Camera — to scan QR codes on equipment and to take photographs you attach to records.
• Microphone — for voice input, and to record machine sound for condition monitoring. Recording happens only while you hold the button.
• Notifications — to alert you about assigned work and approvals, if you enable them.

4. Artificial intelligence

The AI Problem Solver and manual-reading features send the relevant text of your question, along with extracts from the equipment manuals you have uploaded, to Google's Gemini API for processing. This is how the answer is generated.

5. Who else handles your data

We keep this list short on purpose. We use three service providers:

We do not share your data with anyone else. We would disclose information only if required by a valid legal order under the laws of Pakistan, and we would tell you unless we were legally prevented from doing so.

6. Where the data is stored

Application data is held on Supabase's managed infrastructure, which is hosted outside Pakistan. By using the service you accept that your data is stored and processed on servers in another country. If data residency inside Pakistan is a requirement for your organisation, tell us before you sign up and we will discuss what is possible.

7. Keeping it separate and secure

• Separation between customers — every record carries your organisation and plant identifier, and database-level security rules block access across organisations. One customer cannot read another's data.
• Encryption — traffic uses HTTPS. Stored data is encrypted at rest by the hosting provider.
• Role-based access — owner, manager and supervisor roles limit what each person can see and approve inside your own organisation.
• Honest limitation — no system is perfectly secure. If a breach affects your data, we will tell you promptly and explain what happened rather than keep it quiet.

8. How long we keep it

Retention is configurable by your account owner. The defaults are:

• Operational records — 1,095 days (3 years)
• Audit records — 2,190 days (6 years)
• Deleted items — held in the Recovery Bin for 30 days, then permanently removed

Deleting a record in the app removes it from view immediately but retains it for the grace period so that an accidental deletion can be undone.

9. Your rights

You may ask us at any time to:

• Give you a copy of your data — the app already exports every module to CSV, Excel, Word and PDF, so you can do this yourself without asking.
• Correct information that is wrong.
• Delete your account and its data.
• Explain what we hold and why.

Write to support@hsbfix.org. We aim to respond within 7 working days.

10. If you stop using the service

You can export everything before you leave. Tell us you are closing the account and we will permanently delete your organisation's data within 60 days, except anything we are required to keep by law. Ask and we will confirm deletion in writing.

11. Cookies

This marketing website sets no tracking or advertising cookies. The application stores a login session on your device so you are not asked to sign in repeatedly, and keeps a small amount of data on the phone so a record being saved is not lost if the connection drops for a moment. Clearing your browser data removes both.

12. Children

PlantMaster Pro is industrial software for workplaces and is not intended for anyone under 18.

13. Changes to this policy

If we make a significant change we will update the version and effective date above and notify account owners. The application also records formal acceptance of policy versions, so where acceptance is required you will be asked inside the app.

14. Contact

HSB Fix Services
Karachi, Sindh, Pakistan
Email support@hsbfix.org
Alternate hsbfix.pk@gmail.com
WhatsApp +92 316 236 4074