Privacy Policy
What we hold, why, who else sees it, and the rights you have over it under UAE law. In force from 1 October 2026.
Who controls your data
Finsuite technologies (professional licence 1653679, Dubai) is the controller of the personal data described here. We are established in Dubai mainland, so the UAE Personal Data Protection Law — Federal Decree-Law No. 45 of 2021 — applies to us.
What we hold
Four kinds of data, and nothing else.
Account data
Name, email, phone, company details and the plan you are on.
What you upload
Invoices, trial balances, trade licences, draft returns and supporting documents. These may contain personal data about your staff, customers and suppliers.
What the service produces
Extracted figures, findings, computed returns, and the audit trail of who changed what and when.
Technical data
Log entries, error reports and basic usage analytics. We do not store card numbers — payments are taken outside the product by our payment provider.
Why we hold it, and on what basis
To provide the service you asked for and to perform our contract with you; to keep the product secure and working; and to meet our own legal obligations. Where we rely on your consent — for example to send you product news — you can withdraw it at any time.
Who else sees it
A small number of processors, each bound to protect your data and to use it only on our instructions: Supabase (database, file storage and authentication), Vercel (hosting), Anthropic (reads uploaded documents to extract the figures — content sent for extraction is not used to train models), Sentry (error monitoring) and Ziina (payments). We do not sell your data, and we do not share it with the Federal Tax Authority or any other authority unless the law compels us.
Where it is held
Our processors operate infrastructure inside and outside the UAE. Where data leaves the country it goes only to providers contractually bound to protect it to a standard consistent with the Personal Data Protection Law.
How long we keep it
For as long as your account is open, and for thirty days after closure so you can export it. Some records — invoices we issued, and the audit trail — are kept longer where we must keep them ourselves. Your own seven-year retention obligation is yours, not ours: keep your originals.
Your rights
Under the Personal Data Protection Law you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You may also object to a decision made purely automatically. Write to info@taxcheck.ae and we will answer.
Security
Access to your data is restricted to your own account by database-level row security; traffic is encrypted in transit; files are held in private storage behind time-limited links; and every change to a return is written to a tamper-evident audit trail. No system is perfect — if a breach affects you, we will tell you and the regulator.
Privacy Questions about your data: info@taxcheck.ae · +971 50 552 3307 · Finsuite technologies, licence 1653679, Al Quoz 1, Bur Dubai, Dubai.