Privacy Policy

Who we are

Calbil (calbil.com and app.calbil.com) is a quoting tool for Umrah travel agencies in Pakistan. Agencies use it to keep their vendor rates, build quotes for their clients and share them by link, PDF or WhatsApp.

What we collect

• Account details: your name, email address, phone number and password (stored only as a secure hash by our authentication provider).
• Sign in with Google: if you choose it, Google shares your name, email address and profile picture with us. We use them only to create and sign in to your Calbil account. We do not get access to your Gmail, Drive, contacts or any other Google data.
• Agency data you enter: agency details and logo, vendors and their rates, your clients' names and phone numbers, and the quotes you create.
• Billing: the payment screenshot and reference you upload when paying for Premium.
• Technical data: session cookies needed to keep you signed in, and IP-based counters used only to block abuse (we store a one-way hash, not the IP address itself). If you arrive through a partner's link, a cookie remembers their promo code for 30 days and we count the visit as a click — no personal data is stored with it.
• Our website (calbil.com): we use Google Analytics to count visits, see which pages are read and how many visitors click “Start free”. It sets analytics cookies and Google receives your IP address and browser details to do this; we see only totals. It runs on calbil.com only — never inside the app.

How we use it

• To run the service: sign you in, calculate and save quotes, and show quotes to the clients you share them with.
• To manage your plan and payments, and to contact you about your account.
• To keep the service secure and prevent misuse.

What we never do

• We do not sell, rent or share your data or your clients' data with advertisers or other third parties.
• We do not show ads or use advertising cookies, and the app itself (app.calbil.com) has no analytics or tracking cookies.
• We do not read your agency's business data for any purpose other than running and supporting the service.

Who can see your data

Each agency's data is private to that agency and separated at the database level. Inside an agency, the owner decides who is on the team; agents cannot see vendor names, vendor costs or margins. A shared quote link shows only the quote's client-facing details (no vendor names or costs) and stops working after the quote expires.

Where it is stored

Data is stored with Supabase (database, authentication and file storage) and the app is hosted on Vercel. Both act as our service providers and process data only to run Calbil. Data is encrypted in transit (HTTPS), and our database backups are encrypted.

How long we keep it

We keep your data while your agency account is active. If you ask us to delete your account, we delete your agency and all of its data (vendors, rates, clients, quotes). Encrypted backups are kept for up to 30 days before they are removed.

Your choices

You can view and update your details in Settings, and on the Premium plan the owner can download a full export of the agency's data. To ask for a copy, a correction or deletion of your data, email us at the address below.

Changes

If we change this policy, we will update the date at the top of this page.

Contact

Questions about privacy: privacy@calbil.com